last executing test programs: 26m41.649947482s ago: executing program 32 (id=59): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r3, 0x0, 0x0, 0x20004855) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x9, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) fchown(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$read(0xb, r5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) 25m40.194084917s ago: executing program 33 (id=132): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0xf6875fd64963c02c, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5015, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getrlimit(0xd, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x14) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xa9}, @empty, 0x0, "4f6fb4858affffffffb252ab856b00843af297c5433d000000ca580e00", 0x1, 0x1001, 0x81, 0x5}, 0x3c) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) prlimit64(r1, 0xa, &(0x7f0000000180)={0x800, 0x6}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) 24m27.213102009s ago: executing program 34 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xf0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'hsr0\x00', 0x2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r4, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x6, &(0x7f0000000080)={0x0, "14abd83463604d70b41d4008e300000000fcffffff000000000000006d803e8800"}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000401}, 0x140000a0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 23m51.427459577s ago: executing program 35 (id=290): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = socket(0x23, 0x4, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, 0x0, 0x0) 20m5.433309231s ago: executing program 36 (id=609): sendto$inet6(0xffffffffffffffff, &(0x7f00000013c0)="326d75ffacacb1f14d19f9f4b75f997d7c203a5416b79c7371f98f24c4048a0b951153c1c0bba0c9b9323cfea523f7bf735de7958cd0c33086b24cb1ebc596baf6c59767a987486e83ef0fbf0f08fea295302229f687172282ad1d041404ce15773baabc61c3ead423", 0x69, 0x4000, &(0x7f0000001440)={0xa, 0x4e21, 0x5, @local, 0x8}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') pread64(r3, &(0x7f0000000040)=""/101, 0x65, 0x7) pread64(r3, &(0x7f0000000300)=""/4092, 0xffc, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001000400"], 0x1c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x30, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4967}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x100}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 19m23.026495199s ago: executing program 37 (id=678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x0, 0x4a}, 0x28) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x2, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 14m32.645139653s ago: executing program 38 (id=1259): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1006) 7m39.357312082s ago: executing program 6 (id=2527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0x1e, &(0x7f0000000240)={@local, @local, @void, {@can={0xc, {{0x2}, 0x5, 0x3, 0x0, 0x0, "06830400a8181875"}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[], 0x0) 7m36.723870702s ago: executing program 6 (id=2532): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 7m35.713197675s ago: executing program 6 (id=2541): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fchown(r0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) 7m33.92244763s ago: executing program 6 (id=2544): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 7m33.454180246s ago: executing program 6 (id=2551): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7m31.353820239s ago: executing program 6 (id=2559): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") openat(0xffffffffffffff9c, 0x0, 0x153042, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001c0000000000000018000000180000e1ffffffffffff0b020000000000000000009473fa68b8ecfac55f00"], 0x0, 0x34}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000500000000000000c00000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000380)={0x1000000d, {{0xa, 0x4e22, 0x1, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x4e20, 0x0, @mcast2}}}, 0x108) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000080)='./file0/../file0\x00', r8, r9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 7m30.349401148s ago: executing program 39 (id=2559): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, 0x0, 0x153042, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001c0000000000000018000000180000e1ffffffffffff0b020000000000000000009473fa68b8ecfac55f00"], 0x0, 0x34}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000500000000000000c00000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000380)={0x1000000d, {{0xa, 0x4e22, 0x1, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x4e20, 0x0, @mcast2}}}, 0x108) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000080)='./file0/../file0\x00', r8, r9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 7m15.646520448s ago: executing program 9 (id=2594): unshare(0x2040400) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r3, r2, 0x0, 0xffff) 7m15.383501519s ago: executing program 9 (id=2596): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x5, 0x1, [0x6]}, 0xa) 7m13.173994221s ago: executing program 9 (id=2600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x0, 0x4a}, 0x28) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x2, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 7m13.064285728s ago: executing program 3 (id=2601): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff0f, r2, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000080)={r3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 7m11.970403046s ago: executing program 9 (id=2604): syz_open_procfs$userns(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c56, &(0x7f0000001100)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@debug}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8no}]}, 0x81, 0x2a2, &(0x7f00000011c0)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fchdir(0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x6020400) 7m11.1251502s ago: executing program 3 (id=2605): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 7m10.892677141s ago: executing program 9 (id=2609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x0, 0x4a}, 0x28) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x2, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) mkdir(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 7m10.641594058s ago: executing program 3 (id=2610): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$read(0xb, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0xa7deb000) openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYBLOB="050080000900000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r6, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000000210000000700030015c26543c4606b8c86c1789d401dc66ab03a99d352d909c7896736684a5610f32794ce9174fe70874face1c1a6ffa9c3135bfc139ca34d02e533069cd9eef6ae2f38172af4a2610e43d545d451674852561e4ec67f490691dfc75d644209b1b8f3e309874e8634e78dd6444ab623813ada40a7424ff82c9a1aa4daebdf371a5a1915b333ec1149f6d1bc5f7ccf94593542d075616e74566210d9169a54ccdb3af97d5e976d4b4321ce0de646777a8501c300d0f7f251e10dc070c4380af1d56c63fbeb59e3e0a6d9f89ffa25ab2a94d88c7c0f4aa2b9a3e8f6343c99", @ANYRES32=r4, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x1, 0x80000, r2}) bind$rds(r7, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x34) 7m8.77935401s ago: executing program 3 (id=2614): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0035de937e8e1b26ce9bd355819db1a6abda330df4831ffdbbf3dfa77aca3418100187bc8591108841612f023a7939f7fdcc7f4034bf07f88afd63d2af1c39d6da7e423f"], 0x1, 0x14d1, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000180)='./file0/file0\x00', 0x2000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(&(0x7f0000002240)='./file0/file0\x00', 0x0) 7m8.405609526s ago: executing program 9 (id=2617): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x2, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x9, 0x11, "62b367e12306af"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x81, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b12, 0x0) 7m7.63974758s ago: executing program 40 (id=2617): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x2, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x9, 0x11, "62b367e12306af"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x81, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b12, 0x0) 7m7.603008021s ago: executing program 3 (id=2621): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x303902, 0x0) io_uring_setup(0x42cb, &(0x7f00000004c0)={0x0, 0x82de, 0x40, 0xffffffff, 0x39f}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r1, &(0x7f0000000040), &(0x7f00000001c0)=@udp6=r2, 0x1}, 0x20) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000040)=""/192, 0xc0}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 7m6.9441419s ago: executing program 3 (id=2622): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(0x4) 7m6.327556194s ago: executing program 41 (id=2622): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(0x4) 5m4.606281763s ago: executing program 5 (id=3057): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m4.094455309s ago: executing program 5 (id=3060): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) 5m3.11165558s ago: executing program 5 (id=3063): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x8, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480), 0x0, 0x0, 0x10000}], 0x3e0000) 5m2.143397423s ago: executing program 5 (id=3065): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000880)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x1f4, &(0x7f0000000ac0)="$eJzslc+K01AUxr97U9Opf/duXFhwXJgmqbobsBtXLgTFwYVgcTLDOBlHmixMQcQncO/OhY8hKLjyIWR0o5txpQtBuHL/JLmxaRtqoYLnBz35kpyce3LSfAFBEP8tnz/9OBTfN76sATiJLtrm+FenzOFW/se1b0/f3bi++eLe6w/tQ69TV1OIQrJ567cAvB2cRlpca10NoGu2t8HRxamio4tGbYLBM/o+OO4YHYHhrtEPLX0g8z1vezeOvAcH8ZYUvgyBDKEM/T/7O3rOsGX1Z99Uko1lSjRKsvHeMI5niUHlyE8hRJOrRsm8+R0NODas/orntV3m+Wp+mgAcgdF9MNwqnnA7n40eiXX/Z1t5fV5Zf7JdV0w9tVoBPnHKBbBYQfnX/kfua45wzeOozXGghHrZzwCYVbCzlH5ONH1bpovcmpoko9WgIJY8efk+Zd5esw6XId5c0xPJj4hnel/m/PrrJdyF5lP6k3jFcMHyJ20lL9WnppfuP+4l2fjS7v5wJ9qJHoVh/6p/2fevhD1lRDraluNU/a+j/Ol4Wb/2myRxmYsnwzQdBToW+6GOdY7Llf9xrJ/X+9L7Xbvo++oazPy42kq17kzrhyAIYpWcA8Ox3JeFwXxNIArCmyvukyAIgiAIgiAIgiCIxfkdAAD//6jRTN8=") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r2, 0x0, 0x2) 5m0.274631872s ago: executing program 5 (id=3071): setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000040)="0700532f14995bf8", 0x8, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @local}, 0x14) 4m57.78771483s ago: executing program 5 (id=3077): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0xa020, 0x4422}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m56.946696065s ago: executing program 42 (id=3077): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0xa020, 0x4422}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m54.826110946s ago: executing program 4 (id=3368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000000701040000000000000000000000000900010073"], 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) 2m52.943081517s ago: executing program 4 (id=3371): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m50.837196901s ago: executing program 4 (id=3377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x0, 0x4a}, 0x28) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x2, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff8585000000710000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 2m48.219226838s ago: executing program 4 (id=3380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4) 2m45.445857541s ago: executing program 4 (id=3387): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000480)={0x78, 0xffffffffffffffda, 0x0, {0x2, 0xd, 0x0, {0x0, 0x4000000007, 0xa, 0x4, 0x83d, 0x4eb2, 0x8b0f, 0x3f, 0x5, 0xa000, 0x9, 0xee01, 0x0, 0x893f, 0x6}}}, 0x78) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000400)=""/223, 0xdf, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 2m43.651739125s ago: executing program 4 (id=3393): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000280)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac14140000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") rt_sigqueueinfo(0x0, 0x3b, &(0x7f0000000580)={0x37, 0x5, 0x9}) r7 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002000000000000000000"], 0x10}}, 0x0) 2m28.339240949s ago: executing program 43 (id=3393): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000280)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac14140000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") rt_sigqueueinfo(0x0, 0x3b, &(0x7f0000000580)={0x37, 0x5, 0x9}) r7 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002000000000000000000"], 0x10}}, 0x0) 1m41.72779853s ago: executing program 7 (id=3500): prlimit64(0x0, 0xe, &(0x7f0000004080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffe85, 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1m39.672804896s ago: executing program 7 (id=3504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) 1m37.787323734s ago: executing program 7 (id=3508): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003a00)={0x1, 0x0, [{0x0, 0x1000, &(0x7f0000002900)=""/4096}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 1m30.780597851s ago: executing program 7 (id=3519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30, 0x84}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x7, 0x3f0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 1m29.559468049s ago: executing program 7 (id=3521): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) fallocate(r0, 0x29, 0x4, 0x800) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 1m27.48098171s ago: executing program 7 (id=3528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) writev(r1, &(0x7f00000003c0), 0x100000000000022d) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) unshare(0x20060400) fsync(0xffffffffffffffff) 1m12.139733429s ago: executing program 44 (id=3528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) writev(r1, &(0x7f00000003c0), 0x100000000000022d) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) unshare(0x20060400) fsync(0xffffffffffffffff) 30.66393895s ago: executing program 8 (id=3615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x11) 22.228475441s ago: executing program 2 (id=3625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0xfffffdef}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001a80)=ANY=[], 0x228}, 0x1, 0x0, 0x0, 0x4001}, 0x4048880) 20.253442483s ago: executing program 8 (id=3627): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1) 20.253026421s ago: executing program 2 (id=3628): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x8021000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2c8a41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x4}) 18.153685806s ago: executing program 8 (id=3631): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x1, 0x1, "ee"}, 0x0}) 16.838527919s ago: executing program 0 (id=3635): shutdown(0xffffffffffffffff, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$read(0xb, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0xa7deb000) openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r6, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000000210000000700030015c26543c4606b8c86c1789d401dc66ab03a99d352d909c7896736684a5610f32794ce9174fe70874face1c1a6ffa9c3135bfc139ca34d02e533069cd9eef6ae2f38172af4a2610e43d545d451674852561e4ec67f490691dfc75d644209b1b8f3e309874e8634e78dd6444ab623813ada40a7424ff82c9a1aa4daebdf371a5a1915b333ec1149f6d1bc5f7ccf94593542d075616e74566210d9169a54ccdb3af97d5e976d4b4321ce0de646777a8501c300d0f7f251e10dc070c4380af1d56c63fbeb59e3e0a6d9f89ffa25ab2a94d88c7c0f4aa2b9a3e8f6343c99", @ANYRES32=r4, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x1, 0x80000, r2}) bind$rds(r7, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x34) 15.049659196s ago: executing program 2 (id=3637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0xcc, 0x2001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 14.976174587s ago: executing program 0 (id=3639): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 13.376727335s ago: executing program 2 (id=3640): shutdown(0xffffffffffffffff, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$read(0xb, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0xa7deb000) openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYBLOB="050080000900000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r6, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000000210000000700030015c26543c4606b8c86c1789d401dc66ab03a99d352d909c7896736684a5610f32794ce9174fe70874face1c1a6ffa9c3135bfc139ca34d02e533069cd9eef6ae2f38172af4a2610e43d545d451674852561e4ec67f490691dfc75d644209b1b8f3e309874e8634e78dd6444ab623813ada40a7424ff82c9a1aa4daebdf371a5a1915b333ec1149f6d1bc5f7ccf94593542d075616e74566210d9169a54ccdb3af97d5e976d4b4321ce0de646777a8501c300d0f7f251e10dc070c4380af1d56c63fbeb59e3e0a6d9f89ffa25ab2a94d88c7c0f4aa2b9a3e8f6343c99", @ANYRES32=r4, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x1, 0x80000, r2}) bind$rds(r7, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x34) 13.241726412s ago: executing program 1 (id=3641): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20004805) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000002080)=""/102400, 0x19000) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 11.663635051s ago: executing program 8 (id=3642): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x303}, "007a012d00", "60ea793618447aa0918acb210aa0b19d", "e1aa0900"}, 0x28) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2060) shutdown(r0, 0x0) 11.221962612s ago: executing program 0 (id=3652): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x46, 0x0, @fd_index=0x1, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11.199346317s ago: executing program 1 (id=3643): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000280)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") rt_sigqueueinfo(0x0, 0x3b, &(0x7f0000000580)={0x37, 0x5, 0x9}) r7 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) 10.176428003s ago: executing program 2 (id=3644): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_setup(0x7, &(0x7f00000000c0)) 10.047853529s ago: executing program 1 (id=3645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x32) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x5) getdents64(r3, 0xfffffffffffffffe, 0x29) 10.020279096s ago: executing program 8 (id=3646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000100)={0x7f1, 0x1, [{0x1, 0x1}]}) munlockall() 7.962974295s ago: executing program 2 (id=3647): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.98025353s ago: executing program 8 (id=3648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x2404c800) 4.977071485s ago: executing program 1 (id=3649): shutdown(0xffffffffffffffff, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$read(0xb, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0xa7deb000) openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r6, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000000210000000700030015c26543c4606b8c86c1789d401dc66ab03a99d352d909c7896736684a5610f32794ce9174fe70874face1c1a6ffa9c3135bfc139ca34d02e533069cd9eef6ae2f38172af4a2610e43d545d451674852561e4ec67f490691dfc75d644209b1b8f3e309874e8634e78dd6444ab623813ada40a7424ff82c9a1aa4daebdf371a5a1915b333ec1149f6d1bc5f7ccf94593542d075616e74566210d9169a54ccdb3af97d5e976d4b4321ce0de646777a8501c300d0f7f251e10dc070c4380af1d56c63fbeb59e3e0a6d9f89ffa25ab2a94d88c7c0f4aa2b9a3e8f6343c99", @ANYRES32=r4, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x1, 0x80000, r2}) bind$rds(r7, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x34) 4.753006541s ago: executing program 0 (id=3650): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.784023669s ago: executing program 0 (id=3651): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0xf6875fd64963c02c, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5015, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getrlimit(0xd, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2f, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xa9}, @empty, 0x0, "4f6fb4858affffffffb252ab856b00843af297c5433d000000ca580e00", 0x1, 0x1001, 0x81, 0x5}, 0x3c) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) prlimit64(r1, 0xa, &(0x7f0000000180)={0x800, 0x6}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x10a, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60fec00000d03a00fc000000000000000000000000000000ff0200000000000000000000000000012100054064000000020090780000000060d3b0880000000000000000000000000000000000000000fe8000000000000000000000000000aa0210010700000000ff020018000000000000000000000001fe80000000000000000000000000002cff020000000000000000000000000001fe880000000000000000000000000101ff01000000000000"], 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) 1.752036605s ago: executing program 1 (id=3653): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 424.972791ms ago: executing program 1 (id=3654): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0xa7c}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e515", 0x46}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d8", 0x25}, {&(0x7f00000006c0)}, {0x0}], 0x6}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=3655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) kernel console output (not intermixed with test programs): 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1296.372624][ T791] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1296.407957][ T791] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1296.445622][ T791] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1296.484631][ T791] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1296.537685][ T791] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1296.580316][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.648585][T17213] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1296.784702][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1297.139656][ T5961] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input27 [ 1297.293912][T16474] usb 5-1: USB disconnect, device number 24 [ 1297.294000][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1297.308234][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1297.834795][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1297.894002][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2c1c00: rx timeout, send abort [ 1297.907091][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e2c1c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1298.446854][T17258] netlink: 'syz.7.2508': attribute type 3 has an invalid length. [ 1298.874634][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1299.063384][T17253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1299.841581][ T765] wlan1: Trigger new scan to find an IBSS to join [ 1299.904656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1300.094720][ T5890] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1300.282430][T17269] netlink: 'syz.2.2510': attribute type 3 has an invalid length. [ 1300.623222][T17268] loop9: detected capacity change from 0 to 512 [ 1300.809099][ T5890] usb 7-1: Using ep0 maxpacket: 8 [ 1300.908754][T17266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1300.944639][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1301.577967][ T5890] usb 7-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1301.580052][T17268] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1301.587249][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.587290][ T5890] usb 7-1: Product: syz [ 1301.587317][ T5890] usb 7-1: Manufacturer: syz [ 1301.587360][ T5890] usb 7-1: SerialNumber: syz [ 1301.666188][ T5890] usb 7-1: config 0 descriptor?? [ 1301.680927][ T5890] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1301.721723][T17268] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1301.984661][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1302.682452][ T30] audit: type=1800 audit(1772237462.966:477): pid=17299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2512" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1302.912590][ T5890] gspca_vc032x: reg_w err -71 [ 1302.923231][ T5890] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 1303.024665][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1303.027385][ T5890] usb 7-1: USB disconnect, device number 17 [ 1303.192175][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.399395][ T9025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.550879][T17305] netlink: 'syz.4.2519': attribute type 3 has an invalid length. [ 1303.825452][ T7514] wlan1: Trigger new scan to find an IBSS to join [ 1304.064677][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1304.081294][T17303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.104649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1305.104877][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1305.173563][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053b76000: rx timeout, send abort [ 1305.231410][ T49] wlan1: Creating new IBSS network, BSSID f6:90:66:9c:9c:c6 [ 1305.673646][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807af3b400: rx timeout, send abort [ 1305.682101][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053b76000: abort rx timeout. Force session deactivation [ 1306.144800][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1306.181968][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807af3b400: abort rx timeout. Force session deactivation [ 1306.552833][T17341] netlink: 'syz.4.2528': attribute type 3 has an invalid length. [ 1307.043721][T17334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1307.184864][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1308.198346][ T9036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1308.224657][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1308.293301][ T9036] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1308.672257][T17364] fido_id[17364]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1308.967662][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2543'. [ 1309.264633][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1309.321928][T17395] netlink: 'syz.3.2542': attribute type 3 has an invalid length. [ 1309.803808][T17377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.304645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1311.267088][T17414] netlink: 'syz.4.2548': attribute type 3 has an invalid length. [ 1311.344750][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1311.880997][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2549'. [ 1311.894161][T17407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1312.384654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1312.939427][T17428] loop3: detected capacity change from 0 to 512 [ 1312.967392][T17428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1313.058766][T17428] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1313.138147][T17428] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 1313.188776][T17428] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 1313.251923][T17428] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1313.299374][T17428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1313.424940][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1313.455540][T17443] EXT4-fs warning (device loop3): dx_probe:859: inode #2: comm syz.3.2555: dx entry: limit 65535 != root limit 120 [ 1313.504808][ T9837] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1313.512963][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.534999][T17443] EXT4-fs warning (device loop3): dx_probe:933: inode #2: comm syz.3.2555: Corrupt directory, running e2fsck is recommended [ 1313.709533][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.721835][ T9837] usb 5-1: Using ep0 maxpacket: 32 [ 1313.737724][ T9837] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1313.765359][ T9837] usb 5-1: config 0 has no interface number 0 [ 1313.777201][ T9837] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1313.846877][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.866837][ T9837] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1313.885401][ T9837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.911779][ T9837] usb 5-1: Product: syz [ 1313.928122][ T9837] usb 5-1: Manufacturer: syz [ 1313.937379][ T9837] usb 5-1: SerialNumber: syz [ 1313.955827][ T9837] usb 5-1: config 0 descriptor?? [ 1314.018671][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.262336][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.274784][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2562'. [ 1314.439542][ T9837] ipheth 5-1:0.196: Unable to find endpoints [ 1314.464651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1315.450383][T17468] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1315.456963][T17468] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1315.504631][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1315.529610][T17468] vhci_hcd vhci_hcd.0: Device attached [ 1315.562919][T15179] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 1315.589341][T17470] vhci_hcd: connection closed [ 1315.590309][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1315.641343][ T13] vhci_hcd vhci_hcd.4: release socket [ 1315.670953][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1315.704796][ T9036] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1316.544687][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1317.387456][T17457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1317.584741][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1317.978641][ T9837] usb 5-1: USB disconnect, device number 25 [ 1318.416485][T11317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1318.428083][T11317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1318.437261][T11317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1318.448021][T11317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1318.457410][T11317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1318.513743][ T49] bridge_slave_1: left allmulticast mode [ 1318.524656][ T49] bridge_slave_1: left promiscuous mode [ 1318.535079][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.620184][ T49] bridge_slave_0: left allmulticast mode [ 1318.626015][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1318.643964][ T49] bridge_slave_0: left promiscuous mode [ 1318.675916][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.196725][T17504] netlink: 'syz.2.2570': attribute type 3 has an invalid length. [ 1319.596007][T11317] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1319.622103][T11317] Bluetooth: hci4: Injecting HCI hardware error event [ 1319.641692][T15179] Bluetooth: hci4: hardware error 0x00 [ 1319.664632][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1319.667802][T17498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1320.604743][T11317] Bluetooth: hci0: command tx timeout [ 1320.704649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1321.744703][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1322.034639][T15179] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1322.625140][T15179] Bluetooth: hci0: command tx timeout [ 1322.794790][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1323.412007][T17539] netlink: 'syz.4.2581': attribute type 3 has an invalid length. [ 1323.556148][T17534] loop3: detected capacity change from 0 to 1024 [ 1323.776493][T14301] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1323.787696][T17534] EXT4-fs: Ignoring removed orlov option [ 1323.824644][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1323.901673][T14301] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1323.955894][T17534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1323.975041][T17532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1324.107799][ T49] bond0 (unregistering): left promiscuous mode [ 1324.114192][ T49] bond_slave_0: left promiscuous mode [ 1324.137791][ T49] bond_slave_1: left promiscuous mode [ 1324.156495][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.188525][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.189284][T17545] fido_id[17545]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1324.213471][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.236646][ T49] bond0 (unregistering): Released all slaves [ 1324.337278][T17536] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1324.708694][T15179] Bluetooth: hci0: command tx timeout [ 1324.713515][T17488] lo speed is unknown, defaulting to 1000 [ 1324.875012][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1325.038384][ T5890] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1325.196256][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 1325.251103][ T5890] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1325.904831][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1325.944665][ T5890] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1326.025966][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1326.065082][ T5890] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1326.151193][ T49] batadv0: left promiscuous mode [ 1326.167581][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1326.202715][ T5890] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1326.248431][ T5890] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1326.270902][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.306415][ T49] hsr_slave_0: left promiscuous mode [ 1326.466115][ T49] hsr_slave_1: left promiscuous mode [ 1326.536356][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.543808][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.653799][ T5890] usb 3-1: usb_control_msg returned -32 [ 1326.700767][T17579] netlink: 'syz.4.2589': attribute type 3 has an invalid length. [ 1326.747996][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.777408][ T5890] usbtmc 3-1:16.0: can't read capabilities [ 1326.784706][T15179] Bluetooth: hci0: command tx timeout [ 1326.858100][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.954651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1327.121071][T17573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1327.536789][ T49] veth1_macvtap: left promiscuous mode [ 1327.631366][ T49] veth0_macvtap: left promiscuous mode [ 1327.699611][ T49] veth1_vlan: left promiscuous mode [ 1327.791705][ T49] veth0_vlan: left promiscuous mode [ 1327.984641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1328.745460][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1328.782393][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1328.887487][ T5890] usb 3-1: USB disconnect, device number 27 [ 1329.024696][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1329.840497][T17616] netlink: 'syz.2.2597': attribute type 3 has an invalid length. [ 1330.084096][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1330.414179][T17607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.114699][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1332.144875][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1332.646284][T17635] random: crng reseeded on system resumption [ 1333.184780][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1333.270758][T17641] loop9: detected capacity change from 0 to 256 [ 1333.392168][T17488] chnl_net:caif_netlink_parms(): no params data found [ 1333.634701][ T9025] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 1333.642639][ T9025] FAT-fs (loop9): Filesystem has been set read-only [ 1333.677293][T17654] fuse: Bad value for 'fd' [ 1333.707240][ T9025] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1334.224645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1334.318694][T17672] netlink: 'syz.3.2610': attribute type 3 has an invalid length. [ 1334.427047][T17665] loop4: detected capacity change from 0 to 2048 [ 1334.755501][T17658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1335.274740][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1335.504811][T17488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.512045][T17488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.532286][T17488] bridge_slave_0: entered allmulticast mode [ 1335.543603][T17665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1335.557011][T17488] bridge_slave_0: entered promiscuous mode [ 1335.577368][T17488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.623393][T17488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.635656][T17665] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1335.664184][T17488] bridge_slave_1: entered allmulticast mode [ 1335.711799][T17488] bridge_slave_1: entered promiscuous mode [ 1335.824758][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1335.841467][T17682] loop3: detected capacity change from 0 to 256 [ 1336.022543][T17665] fs-verity (loop4, inode 13): Error -4 building Merkle tree [ 1336.139275][T17488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.212506][T17682] loop3: detected capacity change from 256 to 0 [ 1336.217702][ C0] I/O error, dev loop3, sector 168 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1336.241819][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.292475][T17688] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1336.304629][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1336.479733][T17488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.521320][ T5825] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 1336.643284][ T723] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1336.662976][ T723] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.835784][ T5961] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1336.903232][T17488] team0: Port device team_slave_0 added [ 1337.004982][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 1337.029002][T17707] random: crng reseeded on system resumption [ 1337.181058][ T5961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.317989][ T5961] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1337.354641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1337.439422][ T5961] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1337.468819][ T723] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1337.481271][ T5961] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1337.566527][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.574772][ T723] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.606754][T17488] team0: Port device team_slave_1 added [ 1337.701085][ T5961] usb 5-1: config 0 descriptor?? [ 1337.752572][ T5961] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1337.837608][ T723] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1337.864183][T11317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1337.874066][T11317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1337.882370][T11317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1337.890772][T11317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1337.910325][T11317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1337.917617][ T723] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.002104][T17488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.015847][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.087907][T17488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.108569][T17488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.129313][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.158957][T17488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.270019][ T723] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1338.306690][ T723] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.384838][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1338.386507][ T1333] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1338.507196][T11317] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1338.523723][T11317] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1338.533469][T17488] hsr_slave_0: entered promiscuous mode [ 1338.541331][T11317] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1338.541522][T17488] hsr_slave_1: entered promiscuous mode [ 1338.556396][T11317] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1338.556836][T17488] debugfs: 'hsr0' already exists in 'hsr' [ 1338.569946][T17488] Cannot create hsr debugfs directory [ 1338.576710][T11317] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1338.577148][T17710] lo speed is unknown, defaulting to 1000 [ 1338.830157][T17724] lo speed is unknown, defaulting to 1000 [ 1339.045126][ T723] bridge_slave_1: left allmulticast mode [ 1339.057640][ T723] bridge_slave_1: left promiscuous mode [ 1339.071411][ T723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.085594][ T723] bridge_slave_0: left allmulticast mode [ 1339.102066][ T723] bridge_slave_0: left promiscuous mode [ 1339.115724][ T723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.434735][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1339.992886][T15179] Bluetooth: hci1: command tx timeout [ 1340.099130][T17241] usb 5-1: USB disconnect, device number 26 [ 1340.423872][ T723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.462422][ T723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.474694][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1340.492526][ T723] bond0 (unregistering): Released all slaves [ 1340.625872][T15179] Bluetooth: hci2: command tx timeout [ 1341.505419][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1341.801129][T17774] netlink: 'syz.4.2633': attribute type 3 has an invalid length. [ 1341.943780][T17768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.067402][T15179] Bluetooth: hci1: command tx timeout [ 1342.289467][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1342.316999][ T10] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1342.470539][T17710] chnl_net:caif_netlink_parms(): no params data found [ 1342.535233][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1342.543988][ T723] hsr_slave_0: left promiscuous mode [ 1342.553543][ T723] hsr_slave_1: left promiscuous mode [ 1342.554629][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1342.570825][ T723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.579562][ T723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.606462][ T723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.613896][ T723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.709751][T15179] Bluetooth: hci2: command tx timeout [ 1342.734929][ T10] usb 3-1: config 0 has no interfaces? [ 1342.742004][ T723] veth1_macvtap: left promiscuous mode [ 1342.755741][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1342.765952][ T723] veth0_macvtap: left promiscuous mode [ 1342.771527][ T723] veth1_vlan: left allmulticast mode [ 1342.789160][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1342.806486][ T723] veth1_vlan: left promiscuous mode [ 1342.815858][ T10] usb 3-1: SerialNumber: syz [ 1342.825690][ T723] veth0_vlan: left promiscuous mode [ 1342.841636][ T10] usb 3-1: config 0 descriptor?? [ 1343.462887][ T723] team0 (unregistering): Port device team_slave_1 removed [ 1343.487657][ T723] team0 (unregistering): Port device team_slave_0 removed [ 1343.584656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1344.144864][T15179] Bluetooth: hci1: command tx timeout [ 1344.625986][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1344.784907][T15179] Bluetooth: hci2: command tx timeout [ 1345.233007][T17724] chnl_net:caif_netlink_parms(): no params data found [ 1345.286257][ T5917] usb 3-1: USB disconnect, device number 28 [ 1345.441094][T17710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.454991][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.462382][T17710] bridge_slave_0: entered allmulticast mode [ 1345.482305][T17710] bridge_slave_0: entered promiscuous mode [ 1345.664666][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1345.757910][T17710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.768034][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.775377][T17710] bridge_slave_1: entered allmulticast mode [ 1345.783518][T17710] bridge_slave_1: entered promiscuous mode [ 1345.851350][T17813] siw: device registration error -23 [ 1345.865858][T17813] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2643'. [ 1346.225366][T15179] Bluetooth: hci1: command tx timeout [ 1346.500936][T17488] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1346.559468][ T723] IPVS: stop unused estimator thread 0... [ 1346.704696][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1346.724261][T17488] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1346.751588][T17488] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1346.780435][T17488] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1346.812760][T17710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.872351][T17710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.890013][T15179] Bluetooth: hci2: command tx timeout [ 1347.385336][T17724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.393617][T17724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.402348][T17724] bridge_slave_0: entered allmulticast mode [ 1347.413584][T17724] bridge_slave_0: entered promiscuous mode [ 1347.470717][T17710] team0: Port device team_slave_0 added [ 1347.486542][T17724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.495473][T17724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.502849][T17724] bridge_slave_1: entered allmulticast mode [ 1347.533069][T17724] bridge_slave_1: entered promiscuous mode [ 1347.677937][ T723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.711695][T17710] team0: Port device team_slave_1 added [ 1347.744879][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1347.805975][T17724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.946957][ T723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.006230][T17724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.101489][T17710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.110738][T17710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.138260][T17710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.168618][T17710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.178578][T17710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.207203][T17710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.223166][T17724] team0: Port device team_slave_0 added [ 1348.262204][ T723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.313245][T17724] team0: Port device team_slave_1 added [ 1348.470177][ T723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.501918][T17724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.512648][T17724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.538924][T17724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.562147][T17710] hsr_slave_0: entered promiscuous mode [ 1348.569713][T17710] hsr_slave_1: entered promiscuous mode [ 1348.607621][T17724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.661075][T17724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.688223][T17724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.784734][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1348.875151][T17724] hsr_slave_0: entered promiscuous mode [ 1348.882149][T17724] hsr_slave_1: entered promiscuous mode [ 1348.889755][T17724] debugfs: 'hsr0' already exists in 'hsr' [ 1348.895971][T17724] Cannot create hsr debugfs directory [ 1349.530069][ T723] bridge_slave_1: left allmulticast mode [ 1349.549603][ T723] bridge_slave_1: left promiscuous mode [ 1349.558711][ T723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.571384][ T723] bridge_slave_0: left allmulticast mode [ 1349.579300][ T723] bridge_slave_0: left promiscuous mode [ 1349.585433][ T723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.824715][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1350.263203][ T723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.274894][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1350.287564][ T723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.300586][ T723] bond0 (unregistering): Released all slaves [ 1350.345007][T17488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.448147][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1350.480822][ T10] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8 [ 1350.490801][ T10] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 16 [ 1350.503500][ T10] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1350.527662][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1350.544324][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1350.560440][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1350.577700][ T10] usb 5-1: SerialNumber: syz [ 1350.590241][ T723] tipc: Left network mode [ 1350.607878][T17875] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1350.617045][T17875] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1350.864641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1350.885395][T17875] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1350.895018][T17875] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1351.198936][T17488] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.393447][ T723] hsr_slave_0: left promiscuous mode [ 1351.408086][ T723] hsr_slave_1: left promiscuous mode [ 1351.414258][ T723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.435505][ T723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.455675][ T723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.463144][ T723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.503189][ T723] veth1_macvtap: left promiscuous mode [ 1351.509491][ T723] veth0_macvtap: left promiscuous mode [ 1351.764112][ T723] team0 (unregistering): Port device team_slave_1 removed [ 1351.904653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1352.200918][ T723] team0 (unregistering): Port device team_slave_0 removed [ 1352.721223][ T10] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1352.723209][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.735932][ T10] usb 5-1: USB disconnect, device number 27 [ 1352.740070][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.749835][ T10] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 1352.782170][T17887] loop4: detected capacity change from 0 to 512 [ 1352.826808][T17887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1352.839630][T17887] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.944645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1353.048627][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.055905][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.459626][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1353.491684][T17488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1353.533814][T17488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1353.695783][T17892] netlink: 'syz.2.2668': attribute type 3 has an invalid length. [ 1353.737165][T17891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.761144][ T723] IPVS: stop unused estimator thread 0... [ 1353.984664][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1354.252149][T17724] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1354.276929][T17724] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1354.338619][T17488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.347105][T17724] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1354.362320][T17724] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1354.641573][T17710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1354.665552][T17914] loop4: detected capacity change from 0 to 512 [ 1354.823550][T17710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1354.863508][T17914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1354.915127][T17914] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1354.927936][T17710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1354.962342][T17488] veth0_vlan: entered promiscuous mode [ 1354.971318][T17710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1355.024734][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1355.052000][T17488] veth1_vlan: entered promiscuous mode [ 1355.057872][ T5961] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1355.119930][T17724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.214706][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 1355.240578][ T5961] usb 3-1: config 0 has no interfaces? [ 1355.293361][ T5961] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=b8.a2 [ 1355.306350][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.314835][ T5961] usb 3-1: Product: syz [ 1355.319919][ T5961] usb 3-1: Manufacturer: syz [ 1355.448463][ T5961] usb 3-1: SerialNumber: syz [ 1355.683779][ T5961] usb 3-1: config 0 descriptor?? [ 1355.761569][T17724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.787510][T17488] veth0_macvtap: entered promiscuous mode [ 1355.832535][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.839776][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.894741][ T765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.902080][ T765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.920359][T17488] veth1_macvtap: entered promiscuous mode [ 1355.983127][ T10] usb 3-1: USB disconnect, device number 29 [ 1356.064665][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1356.096985][T17710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.156399][T17488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1356.190963][T17710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.203491][T17488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1356.233414][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.240671][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.262907][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.289844][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.321104][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.328381][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.381661][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.404653][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.719277][ T765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.741594][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1356.764280][ T765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.848339][ T7514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.886388][ T7514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.104955][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1357.977864][T17724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1358.144638][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1358.665346][T17962] loop4: detected capacity change from 0 to 512 [ 1358.740378][T17962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1358.754383][T17962] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1359.184775][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1359.319274][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1359.443943][T17968] netlink: 'syz.7.2680': attribute type 3 has an invalid length. [ 1359.456741][T17963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1359.583649][T17710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1360.026858][T17724] veth0_vlan: entered promiscuous mode [ 1360.051095][T17724] veth1_vlan: entered promiscuous mode [ 1360.173512][T17724] veth0_macvtap: entered promiscuous mode [ 1360.224643][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1360.243727][T17724] veth1_macvtap: entered promiscuous mode [ 1360.307935][T17724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1360.364153][T17724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1360.436856][ T1333] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.479765][ T1333] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.489503][ T1333] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.498319][ T1333] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.865149][T18007] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2685'. [ 1361.264789][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1361.446670][T18006] lo speed is unknown, defaulting to 1000 [ 1361.452524][T18006] lo speed is unknown, defaulting to 1000 [ 1361.459090][T18006] lo speed is unknown, defaulting to 1000 [ 1361.473901][T18006] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1361.484707][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1361.579569][T18006] lo speed is unknown, defaulting to 1000 [ 1361.596199][T18006] lo speed is unknown, defaulting to 1000 [ 1361.604038][T18006] lo speed is unknown, defaulting to 1000 [ 1361.611954][T18006] lo speed is unknown, defaulting to 1000 [ 1361.621207][T18006] lo speed is unknown, defaulting to 1000 [ 1361.629153][T18006] lo speed is unknown, defaulting to 1000 [ 1361.778357][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1361.832249][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1361.858408][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1361.907576][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1361.950078][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1361.983233][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1362.002076][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1362.014976][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.092433][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.118980][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.179778][T17710] veth0_vlan: entered promiscuous mode [ 1362.214681][ T7514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.244199][ T7514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.256445][ T10] usb 2-1: usb_control_msg returned -32 [ 1362.260594][T17710] veth1_vlan: entered promiscuous mode [ 1362.272318][ T10] usbtmc 2-1:16.0: can't read capabilities [ 1362.304654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1362.371735][T17710] veth0_macvtap: entered promiscuous mode [ 1362.411861][T17710] veth1_macvtap: entered promiscuous mode [ 1362.487579][T17710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.511757][ T791] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1362.515756][T18024] nbd4: detected capacity change from 0 to 112 [ 1362.539642][T17710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.541957][ T791] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1362.583113][ T9684] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1362.587896][T18028] block nbd4: shutting down sockets [ 1362.614755][ T9684] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1362.619892][ T7514] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.640113][ T5240] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1362.655334][ T5240] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1362.665230][ T9684] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1362.683423][ T7514] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.714676][ T9684] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1362.727829][ T6108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.754102][ T9684] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1362.768662][ T6108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.778918][ T9684] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1362.786906][ T9684] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1362.802046][ T9684] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1362.814723][ T9684] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1362.824270][ T9684] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1362.844134][ T9684] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1362.872181][ T9684] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1362.934822][ T9684] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1362.966661][ T9684] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1362.974464][ T9684] ldm_validate_partition_table(): Disk read failed. [ 1363.005755][ T9684] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1363.027155][ T9684] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1363.043535][ T9684] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1363.078292][ T9684] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1363.109916][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.120318][ T9684] Dev nbd4: unable to read RDB block 0 [ 1363.126144][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.140759][ T9684] nbd4: unable to read partition table [ 1363.157186][T18032] ldm_validate_partition_table(): Disk read failed. [ 1363.164027][T18032] Dev nbd4: unable to read RDB block 0 [ 1363.175281][T18032] nbd4: unable to read partition table [ 1363.191555][ T9684] ldm_validate_partition_table(): Disk read failed. [ 1363.213663][ T9684] Dev nbd4: unable to read RDB block 0 [ 1363.232130][ T9684] nbd4: unable to read partition table [ 1363.267245][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.290388][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.344945][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1363.581450][T18049] loop5: detected capacity change from 0 to 512 [ 1363.647601][T18049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1363.665522][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1363.721711][T18049] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1363.814889][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1363.831525][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1363.852881][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.923634][ T10] usb 9-1: Product: syz [ 1363.959385][ T10] usb 9-1: Manufacturer: syz [ 1364.004651][ T10] usb 9-1: SerialNumber: syz [ 1364.068532][ T10] usb 9-1: config 0 descriptor?? [ 1364.089519][ T5890] usb 2-1: USB disconnect, device number 2 [ 1364.225667][ T30] audit: type=1800 audit(1772237524.516:478): pid=18068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2619" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1364.281544][ T5917] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1364.333452][ T10] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1364.384642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1364.448170][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 1364.484964][ T5917] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1364.493112][ T5917] usb 3-1: config 0 has no interface number 0 [ 1364.528417][T18072] netlink: 'syz.1.2695': attribute type 3 has an invalid length. [ 1364.539840][T18071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.594901][ T5917] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1364.623539][ T5917] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1364.630444][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.687342][ T5917] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1364.735168][ T5917] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1364.763045][ T5917] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1364.803230][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.845410][ T5917] usb 3-1: config 0 descriptor?? [ 1364.887306][ T5917] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1364.981700][ T10] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1365.022151][ T10] usb 9-1: USB disconnect, device number 2 [ 1365.157660][ T5897] usb 3-1: USB disconnect, device number 30 [ 1365.203220][ T5897] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1365.424657][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1365.453035][T18085] siw: device registration error -23 [ 1365.465302][T18085] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2697'. [ 1366.464644][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1366.701386][T18095] netlink: 'syz.4.2699': attribute type 3 has an invalid length. [ 1366.978921][T18089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.504674][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1368.010777][T17710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.544664][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1368.582980][T18140] netlink: 'syz.7.2712': attribute type 3 has an invalid length. [ 1368.641182][T18143] loop5: detected capacity change from 0 to 128 [ 1368.735585][T18143] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1368.778933][T18132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.862713][T18143] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1368.977338][T18143] ext2 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1369.118745][T18143] overlayfs: upper fs needs to support d_type. [ 1369.245083][T18156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1369.574840][ T791] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1369.584642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1369.788118][ T791] usb 6-1: Using ep0 maxpacket: 8 [ 1370.399354][ T1333] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1370.410443][ T791] usb 6-1: config 0 has no interfaces? [ 1370.421794][ T791] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1370.431452][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.441343][ T791] usb 6-1: Product: syz [ 1370.445865][ T791] usb 6-1: Manufacturer: syz [ 1370.461462][ T791] usb 6-1: SerialNumber: syz [ 1370.477022][ T791] usb 6-1: config 0 descriptor?? [ 1370.624663][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1370.665234][T18172] loop8: detected capacity change from 0 to 512 [ 1370.730092][T12671] usb 6-1: USB disconnect, device number 5 [ 1370.809775][T18174] loop4: detected capacity change from 0 to 512 [ 1370.872398][T18179] netlink: 'syz.1.2722': attribute type 1 has an invalid length. [ 1370.890491][T18171] fuse: root generation should be zero [ 1370.935888][T18181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2722'. [ 1371.068764][T18174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.083892][T18172] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1371.091907][T18174] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.097239][T18172] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.554064][ T30] audit: type=1800 audit(1772237531.696:479): pid=18174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2720" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1371.633454][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.665754][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1371.759362][T17710] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1372.095606][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1372.541472][T18210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.629531][T18207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.674394][T18213] netlink: 'syz.5.2729': attribute type 3 has an invalid length. [ 1372.685537][T18211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.704670][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1373.745071][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1373.886320][ T791] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1373.952039][T18233] netlink: 'syz.8.2734': attribute type 3 has an invalid length. [ 1373.961829][T18231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.067053][ T791] usb 3-1: Using ep0 maxpacket: 32 [ 1374.107326][ T791] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1374.135341][ T791] usb 3-1: config 0 has no interface number 0 [ 1374.152635][ T791] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1374.173189][ T791] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1374.212901][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.463560][ T791] usb 3-1: Product: syz [ 1374.469183][ T791] usb 3-1: Manufacturer: syz [ 1374.484041][ T791] usb 3-1: SerialNumber: syz [ 1374.506020][ T791] usb 3-1: config 0 descriptor?? [ 1374.784654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1375.446026][ T791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1375.511421][ T791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1375.627916][T18253] overlayfs: failed to get inode (-116) [ 1375.665886][T18253] overlayfs: failed to get inode (-116) [ 1375.696372][T18253] overlayfs: failed to get inode (-116) [ 1375.705332][T18253] overlayfs: failed to get inode (-116) [ 1375.824670][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1376.263894][T18269] loop4: detected capacity change from 0 to 512 [ 1376.358184][T18269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1376.530694][T18269] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1376.623221][ T791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1376.864646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1376.975861][T18275] loop5: detected capacity change from 0 to 7 [ 1376.987907][ T791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1377.022338][T18275] loop5: [ 1377.041499][ T791] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1377.064207][T18275] loop5: partition table partially beyond EOD, truncated [ 1377.351241][ T791] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1377.371999][ T30] audit: type=1800 audit(1772237537.666:480): pid=18269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2745" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1377.426291][ T791] usb 3-1: USB disconnect, device number 31 [ 1377.610245][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1377.693723][T18291] netlink: 'syz.2.2749': attribute type 3 has an invalid length. [ 1377.703613][T18290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.904638][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1378.320945][T18308] loop5: detected capacity change from 0 to 512 [ 1378.402777][T18308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1378.538535][T18308] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.899308][ T30] audit: type=1800 audit(1772237539.196:481): pid=18308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2755" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1378.944645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1378.965889][T18330] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1379.081295][T17710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.476603][T18341] loop4: detected capacity change from 0 to 512 [ 1379.607833][T18341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.713711][T18353] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 1379.723865][T18341] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.989720][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1380.062186][T18353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1380.302977][ T30] audit: type=1800 audit(1772237540.596:482): pid=18341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2764" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1380.576191][T18360] bond1: (slave ip6erspan0): making interface the new active one [ 1380.606580][T18360] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1380.647555][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.782675][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1380.826018][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1380.833486][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 1380.906762][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1380.914253][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1380.925675][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1380.933071][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1380.958282][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1380.968401][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1380.980356][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1380.987917][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1381.005792][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1381.013217][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 1381.197880][T18333] loop8: detected capacity change from 0 to 128 [ 1381.205218][T18371] loop4: detected capacity change from 0 to 256 [ 1381.589440][T18379] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1381.658359][T18371] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1381.748745][T18378] netlink: 'syz.7.2771': attribute type 3 has an invalid length. [ 1381.790196][T18369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.904301][T18384] netlink: 'syz.2.2772': attribute type 3 has an invalid length. [ 1382.183899][T18376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1383.228894][T18389] loop4: detected capacity change from 0 to 512 [ 1383.320816][T18389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1383.422567][T18389] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1384.692400][ T30] audit: type=1800 audit(1772237544.856:483): pid=18407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2774" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1384.775718][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.869801][T18411] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2778'. [ 1385.439696][T18423] loop8: detected capacity change from 0 to 512 [ 1385.510161][T18423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.952863][T18423] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1386.224657][ C1] net_ratelimit: 24 callbacks suppressed [ 1386.224689][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1386.413036][ T30] audit: type=1800 audit(1772237546.706:484): pid=18423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2783" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1386.701380][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.866920][T18441] input: syz1 as /devices/virtual/input/input30 [ 1387.264651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1387.431922][T18458] netlink: 'syz.1.2790': attribute type 3 has an invalid length. [ 1387.448080][T18457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.306808][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1388.309125][T18468] nbd5: detected capacity change from 0 to 112 [ 1388.398603][T18464] block nbd5: shutting down sockets [ 1388.405366][ C0] blk_print_req_error: 43 callbacks suppressed [ 1388.405396][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1388.421153][ C0] buffer_io_error: 43 callbacks suppressed [ 1388.421174][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1388.457661][ T5185] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1388.516403][ T5185] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1388.544207][ T5185] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1388.578983][ T5185] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1388.604781][ T5185] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1388.721437][ T5185] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1388.732713][ T5185] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1388.760226][ T5185] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1388.801776][ T5185] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1388.845536][ T5185] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1388.868865][ T5185] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1388.897965][ T5185] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1388.975476][ T5185] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1389.004939][ T5185] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1389.032303][ T5185] ldm_validate_partition_table(): Disk read failed. [ 1389.067756][ T5185] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1389.090016][ T5185] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1389.313340][ T5185] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1389.324161][ T5185] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1389.332321][ T5185] Dev nbd5: unable to read RDB block 0 [ 1389.338326][ T5185] nbd5: unable to read partition table [ 1389.344800][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1389.720315][ T5185] ldm_validate_partition_table(): Disk read failed. [ 1389.746520][ T5185] Dev nbd5: unable to read RDB block 0 [ 1389.837518][ T5185] nbd5: unable to read partition table [ 1390.295022][T18501] netlink: 'syz.8.2802': attribute type 3 has an invalid length. [ 1390.384708][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1390.460101][T18497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1390.609060][T18514] netlink: 'syz.2.2806': attribute type 3 has an invalid length. [ 1390.621322][T18512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1390.743828][T18516] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2803'. [ 1391.437856][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1392.474662][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1392.856078][T18552] netlink: 'syz.2.2814': attribute type 3 has an invalid length. [ 1392.871884][T18551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1393.061978][T18560] loop8: detected capacity change from 0 to 512 [ 1393.171350][T18560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.262288][T18560] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1393.504681][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1393.704793][ T30] audit: type=1800 audit(1772237553.986:485): pid=18580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2816" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1394.554641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1394.569864][T18589] netlink: 'syz.5.2822': attribute type 3 has an invalid length. [ 1394.579917][T18585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1394.780845][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.345442][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1395.584688][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1395.638124][T18615] loop4: detected capacity change from 0 to 512 [ 1395.708092][T18615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.739969][T18615] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1396.143391][ T30] audit: type=1800 audit(1772237556.436:486): pid=18622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2826" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1396.345598][ T5917] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1396.560118][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.630857][ T5917] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1396.634898][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1396.655177][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.744711][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1396.784754][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1396.860745][ T5917] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1396.884641][ T5917] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1396.904694][ T5917] usb 6-1: Manufacturer: syz [ 1396.955337][ T5917] usb 6-1: config 0 descriptor?? [ 1396.999382][T18645] netlink: 'syz.4.2832': attribute type 3 has an invalid length. [ 1397.013045][T18644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1397.431312][ T5917] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 1397.511033][ T5917] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1397.664662][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1398.075307][T18667] netlink: 'syz.2.2837': attribute type 3 has an invalid length. [ 1398.084866][T18666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1398.704668][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1399.244050][T18699] netlink: 'syz.2.2845': attribute type 3 has an invalid length. [ 1399.306568][T18696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.744850][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1399.988132][ T10] usb 6-1: USB disconnect, device number 6 [ 1400.193030][T18714] netlink: 'syz.5.2848': attribute type 3 has an invalid length. [ 1400.221397][T18713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1400.646737][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2852'. [ 1400.784652][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1401.269594][T18745] siw: device registration error -23 [ 1401.283860][T18745] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2854'. [ 1401.834667][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1402.361301][T18748] netlink: 'syz.1.2857': attribute type 3 has an invalid length. [ 1402.373238][T18747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1402.781829][T18763] loop5: detected capacity change from 0 to 128 [ 1402.864656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1402.947916][T18773] loop4: detected capacity change from 0 to 512 [ 1403.034044][T18773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1403.182085][T18773] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.575593][ T30] audit: type=1800 audit(1772237563.866:487): pid=18782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2862" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1403.904693][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1403.940194][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.955510][T18790] random: crng reseeded on system resumption [ 1404.881412][T18808] siw: device registration error -23 [ 1404.896202][T18808] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2870'. [ 1404.944680][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1405.665951][T18810] overlayfs: failed to resolve './file0': -2 [ 1405.984734][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1406.194686][ T5917] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1407.024703][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1407.137004][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.151343][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.194440][T18835] netlink: 'syz.1.2876': attribute type 3 has an invalid length. [ 1407.205690][T18834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.223475][ T5917] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1407.250399][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.289325][ T5917] usb 5-1: config 0 descriptor?? [ 1407.767276][ T5917] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 1407.815589][ T5917] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0019/input/input31 [ 1407.912656][T18850] loop5: detected capacity change from 0 to 512 [ 1407.947026][T18818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.017342][T18818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.073919][T18850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1408.086813][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1408.209568][T18850] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.217681][ T5917] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1408.304294][ T5917] usb 5-1: USB disconnect, device number 28 [ 1408.630849][ T30] audit: type=1800 audit(1772237568.906:488): pid=18861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2879" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1408.649439][T18859] fido_id[18859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1408.882900][T17710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.104642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1410.144658][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1411.184637][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1411.630198][T18905] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2885'. [ 1411.918433][T18886] loop5: detected capacity change from 0 to 32768 [ 1411.940699][T18911] netlink: 'syz.1.2893': attribute type 3 has an invalid length. [ 1411.953517][T18909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.044990][T18886] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1412.234742][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1412.312154][T18886] XFS (loop5): Starting recovery (logdev: internal) [ 1412.483428][T18886] XFS (loop5): Ending recovery (logdev: internal) [ 1412.709212][T18932] netlink: 'syz.8.2896': attribute type 3 has an invalid length. [ 1412.744466][T18931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.123280][ T791] XFS (loop5): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:256). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1413.164730][ T791] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 [ 1413.190182][T17710] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1413.200532][ T791] XFS (loop5): Unmount and run xfs_repair [ 1413.210442][ T791] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1413.218355][ T791] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 1413.229914][ T791] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 1413.265205][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1413.273276][ T791] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 1413.294664][ T791] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 1413.310089][ T791] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 1413.345328][ T791] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1413.368772][ T791] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1413.387266][ T791] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1413.402490][ T791] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x4 len 4 error 74 [ 1413.422267][ T791] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x9d0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1413.456518][ T791] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 1413.474666][ T791] loop5: lost filesystem error report for type 5 error -108 [ 1413.474753][ T791] loop5: lost filesystem error report for type 5 error -117 [ 1413.865939][ T30] audit: type=1800 audit(1772237574.156:489): pid=18946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2897" name="file1" dev="fuse" ino=0 res=0 errno=0 [ 1414.304654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1414.322422][T18965] binder: 18964:18965 ioctl c0306201 2000000001c0 returned -22 [ 1414.839724][T18975] loop8: detected capacity change from 0 to 512 [ 1415.344646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1415.623131][T18975] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1415.642218][T18975] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1415.776784][T18982] loop4: detected capacity change from 0 to 512 [ 1416.020653][T18982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1416.076565][T18982] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1416.086713][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1416.154781][T18991] process 'syz.7.2909' launched './file0' with NULL argv: empty string added [ 1416.384690][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1416.455589][ T30] audit: type=1800 audit(1772237576.756:490): pid=18997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2908" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1416.796423][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.397806][T19026] siw: device registration error -23 [ 1417.426190][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1418.171561][T19032] loop4: detected capacity change from 0 to 1024 [ 1418.185317][T19032] EXT4-fs: Ignoring removed orlov option [ 1418.238945][T19032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1418.464649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1418.540219][T19036] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2918'. [ 1418.770519][ T6430] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5033: inode #13: block 0: len 1: ext4_ext_map_blocks returned -28 [ 1419.123430][ T6430] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 13, error -28) [ 1419.282718][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.514635][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1420.544650][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1421.180985][T19061] Bluetooth: MGMT ver 1.23 [ 1421.195997][T19059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2925'. [ 1421.424580][T19066] netlink: 'syz.5.2926': attribute type 17 has an invalid length. [ 1421.432680][T19066] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2926'. [ 1421.443590][T19066] macvtap0: entered allmulticast mode [ 1421.449589][T19066] veth0_macvtap: entered allmulticast mode [ 1421.482009][T19066] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1421.584697][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1421.877247][T19071] program syz.8.2929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1422.634651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1423.674770][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1424.704799][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1425.124910][ T791] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1425.365864][T19104] netlink: 'syz.4.2937': attribute type 3 has an invalid length. [ 1425.504607][ T791] usb 6-1: Using ep0 maxpacket: 16 [ 1425.552259][ T791] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1425.633445][ T791] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1425.666166][T19098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.684711][ T791] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1425.704785][ T791] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1425.726695][ T791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1425.744843][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1425.877476][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.885654][ T791] usb 6-1: Product: syz [ 1425.890109][ T791] usb 6-1: Manufacturer: syz [ 1425.902702][ T791] usb 6-1: SerialNumber: syz [ 1426.069945][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.141922][ T791] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1426.784924][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1427.358137][ T723] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1427.399869][T19088] usblp0:failed reading printer status (-71) [ 1427.407140][ T5917] usb 6-1: USB disconnect, device number 7 [ 1427.654661][T16474] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1427.665372][T19087] usblp0: removed [ 1427.825254][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1427.837725][T16474] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1428.242076][T16474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.512111][T16474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.594145][T16474] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1428.699795][T16474] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1428.760788][T16474] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1428.838198][T16474] usb 3-1: Manufacturer: syz [ 1428.864639][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1428.883831][T16474] usb 3-1: config 0 descriptor?? [ 1428.922943][T19152] loop4: detected capacity change from 0 to 512 [ 1429.307761][T19152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1429.450996][T19152] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1429.622769][T16474] usbhid 3-1:0.0: can't add hid device: -71 [ 1429.704828][T16474] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1429.845118][T16474] usb 3-1: USB disconnect, device number 32 [ 1429.904630][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1430.100017][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1430.162753][T19171] loop8: detected capacity change from 0 to 512 [ 1430.227084][T19171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1430.244947][T19171] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1430.954892][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1431.149130][ T30] audit: type=1800 audit(1772237591.436:491): pid=19185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2955" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1431.427529][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.560918][T19193] netlink: 'syz.7.2960': attribute type 3 has an invalid length. [ 1431.585238][T19192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1431.876009][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2961'. [ 1431.984723][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1432.039687][T19208] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1433.024845][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1433.400410][T19227] overlayfs: orphan index entry (index/00fb210001d4a03e8ddee74b709ad5d2a6c6966d1a5b82add72901000000000000, ftype=8000, nlink=1) [ 1434.064789][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1434.130215][T19236] tipc: Started in network mode [ 1434.189308][T19236] tipc: Node identity 4, cluster identity 4711 [ 1434.224652][T19236] tipc: Node number set to 4 [ 1434.356100][T19244] loop5: detected capacity change from 0 to 512 [ 1435.105118][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1435.195523][T19253] loop4: detected capacity change from 0 to 512 [ 1435.217272][T19244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.250282][T19244] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1435.279492][T19253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1435.292164][T19253] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1436.144634][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1436.255850][ T30] audit: type=1800 audit(1772237596.416:492): pid=19266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2973" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1436.346024][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1436.449752][T17710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.505480][T19264] netlink: 'syz.8.2976': attribute type 3 has an invalid length. [ 1436.515356][T19263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.806257][T19275] netlink: 'syz.5.2978': attribute type 3 has an invalid length. [ 1436.825613][T19274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.853084][T19277] bridge_slave_0: left allmulticast mode [ 1436.897028][T19277] bridge_slave_0: left promiscuous mode [ 1436.912986][T19277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.928905][T19277] bridge_slave_1: left allmulticast mode [ 1436.934624][T19277] bridge_slave_1: left promiscuous mode [ 1436.940414][T19277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.959397][T19277] bond0: (slave bond_slave_0): Releasing backup interface [ 1436.966740][T17241] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1436.983185][T19277] bond0: (slave bond_slave_1): Releasing backup interface [ 1437.184769][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1437.201060][T19277] team0: Port device team_slave_0 removed [ 1437.211590][T19277] team0: Port device team_slave_1 removed [ 1437.218961][T19277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.226511][T19277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.237100][T19277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.245620][T19277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.319712][T19283] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2981'. [ 1437.998029][T19277] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1438.040185][ T5897] lo speed is unknown, defaulting to 1000 [ 1438.133124][T17241] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1438.142301][T17241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.150979][T17241] usb 5-1: Product: syz [ 1438.159978][T17241] usb 5-1: Manufacturer: syz [ 1438.164680][T17241] usb 5-1: SerialNumber: syz [ 1438.171668][T19279] team0: Mode changed to "loadbalance" [ 1438.212143][T17241] usb 5-1: config 0 descriptor?? [ 1438.224869][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1438.342094][T19285] netlink: 'syz.2.2982': attribute type 3 has an invalid length. [ 1438.385306][T19284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.479682][T17241] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1439.255957][T12671] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1439.264769][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1439.425831][T12671] usb 2-1: Using ep0 maxpacket: 8 [ 1439.433636][T12671] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1439.446596][T12671] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1439.461085][T12671] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1439.498830][T17241] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1439.756550][T12671] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1439.781022][T17241] usb 5-1: USB disconnect, device number 29 [ 1439.790182][T12671] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1439.801650][T12671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.304638][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1440.351345][T12671] usb 2-1: GET_CAPABILITIES returned 0 [ 1440.363865][T12671] usbtmc 2-1:16.0: can't read capabilities [ 1440.867233][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1440.879743][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1440.889053][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1440.948692][T19302] usbtmc 2-1:16.0: Unable to send data, error -71 [ 1441.136120][ T10] usb 2-1: USB disconnect, device number 3 [ 1441.344649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1441.463547][T19327] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1441.476985][T19326] netlink: 'syz.4.2998': attribute type 3 has an invalid length. [ 1441.499119][T19325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.582268][T19330] netlink: 'syz.8.2997': attribute type 3 has an invalid length. [ 1441.674796][T19324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.384629][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1443.424754][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1443.870414][T19365] loop5: detected capacity change from 0 to 512 [ 1444.098289][T19365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1444.131011][T19365] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1444.261631][T19372] loop8: detected capacity change from 0 to 512 [ 1444.464100][T19372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1444.476721][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1444.485182][T19372] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1444.935937][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1445.153519][ T30] audit: type=1800 audit(1772237605.396:493): pid=19377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3008" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1445.493398][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1445.504675][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1445.605789][ T10] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1445.673395][T17710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.754849][ T5917] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1445.945780][ T5917] usb 5-1: config 0 has no interfaces? [ 1445.983493][ T5917] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1446.013982][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1446.078042][ T5917] usb 5-1: SerialNumber: syz [ 1446.343256][ T5917] usb 5-1: config 0 descriptor?? [ 1446.545030][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1446.590767][T19399] netlink: 'syz.8.3015': attribute type 3 has an invalid length. [ 1446.601143][T19398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.001307][T12671] usb 5-1: USB disconnect, device number 30 [ 1447.299098][T19411] netlink: 'syz.5.3017': attribute type 3 has an invalid length. [ 1447.319601][T19410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.584648][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1447.812240][T19420] netlink: 'syz.1.3018': attribute type 17 has an invalid length. [ 1447.820336][T19420] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3018'. [ 1447.830361][T19420] macvtap0: entered allmulticast mode [ 1447.839289][T19420] veth0_macvtap: entered allmulticast mode [ 1447.850772][T19420] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1448.624639][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1448.625209][T11317] Bluetooth: hci0: command 0x0406 tx timeout [ 1449.128465][T19438] loop5: detected capacity change from 0 to 512 [ 1449.144796][T12671] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1449.241942][T19438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1449.325544][T12671] usb 5-1: Using ep0 maxpacket: 16 [ 1449.353645][T19438] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1449.366987][T12671] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1449.402613][T12671] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1449.445274][T12671] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1449.461091][T12671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.478679][T12671] usb 5-1: Product: syz [ 1449.488649][T12671] usb 5-1: Manufacturer: syz [ 1449.498039][T12671] usb 5-1: SerialNumber: syz [ 1449.664670][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1449.729195][T12671] usb 5-1: config 0 descriptor?? [ 1449.883041][ T30] audit: type=1800 audit(1772237610.136:494): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3025" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1450.335672][T12671] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1450.358981][T17710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.389264][T12671] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1450.704641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1450.801476][T19452] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3026'. [ 1451.515796][T12671] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1451.539413][T12671] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1451.644369][T19455] binder: 19453:19455 ioctl c0306201 2000000003c0 returned -14 [ 1451.744644][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1451.756980][T19461] binder: 19460:19461 ioctl c0306201 2000000003c0 returned -14 [ 1452.161950][T19469] netlink: 'syz.1.3031': attribute type 3 has an invalid length. [ 1452.179448][T19468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.240233][T19474] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1452.313685][T19472] ***************************************************** [ 1452.372288][T19474] netlink: 'syz.7.3033': attribute type 3 has an invalid length. [ 1452.383080][T12671] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1452.392340][T19471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.416236][T19472] ORANGEFS Device Error: You cannot open the device file [ 1452.416263][T19472] [ 1452.416263][T19472] /dev/pvfs2-req more than once. Please make sure that [ 1452.416263][T19472] there are no [ 1452.417553][T12671] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1452.498156][T19472] instances of a program using this device [ 1452.498156][T19472] currently running. (You must verify this!) [ 1452.499084][T12671] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1452.520282][T19472] For example, you can use the lsof program as follows: [ 1452.532390][T19472] 'lsof | grep pvfs2-req' (run this as root) [ 1452.538572][T19472] open_access_count = 1 [ 1452.555123][T19472] ***************************************************** [ 1452.585001][T12671] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1452.595048][T12671] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1452.634976][T12671] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1452.677079][T12671] usb 5-1: USB disconnect, device number 31 [ 1452.784673][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1452.848800][T19484] netlink: 'syz.8.3035': attribute type 17 has an invalid length. [ 1452.860018][T19484] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3035'. [ 1452.875722][T19484] macvtap0: entered allmulticast mode [ 1452.881433][T19484] veth0_macvtap: entered allmulticast mode [ 1452.895780][T19484] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1453.824680][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1453.871279][T19496] netlink: 'syz.7.3039': attribute type 3 has an invalid length. [ 1453.881819][T19495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.921452][T19501] loop4: detected capacity change from 0 to 512 [ 1454.025755][T19501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1454.055232][T19501] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1454.558189][ T30] audit: type=1800 audit(1772237614.806:495): pid=19512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3040" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1454.864646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1454.974725][ T5890] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1455.029882][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.350489][T19517] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3042'. [ 1455.904650][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1456.060876][ T5890] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1456.070417][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.087790][ T5890] usb 2-1: Product: syz [ 1456.091980][ T5890] usb 2-1: Manufacturer: syz [ 1456.114847][ T5890] usb 2-1: SerialNumber: syz [ 1456.148546][ T5890] usb 2-1: config 0 descriptor?? [ 1456.233792][T19519] input: syz1 as /devices/virtual/input/input32 [ 1456.413876][ T5890] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1456.944640][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available {[ 1457.909819][T19547] netlink: 'syz.7.3050': attribute type 3 has an invalid length. [ 1457.920509][T19546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.984656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1458.173949][T19552] netlink: 'syz.2.3051': attribute type 3 has an invalid length. [ 1458.188051][T19551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.344240][ T5890] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1458.394885][ T5890] usb 2-1: USB disconnect, device number 4 [ 1458.742036][T19562] loop8: detected capacity change from 0 to 512 [ 1459.024655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1459.391873][ T6430] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1459.464070][T19562] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1459.476738][T19562] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1459.774060][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1460.064669][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1460.084744][T19577] netlink: 'syz.7.3056': attribute type 3 has an invalid length. [ 1460.158695][T19571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.166522][T19571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.447569][T19571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.475679][ T5897] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1460.498087][T19571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.998660][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 1461.007979][T19572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.037167][ T5897] usb 5-1: no configurations [ 1461.041888][ T5897] usb 5-1: can't read configurations, error -22 [ 1461.104659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1461.194887][ T5897] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1461.366131][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 1461.372289][ T5897] usb 5-1: no configurations [ 1461.397430][ T5897] usb 5-1: can't read configurations, error -22 [ 1461.443993][ T5897] usb usb5-port1: attempt power cycle [ 1461.460714][T19571] veth0_macvtap: left allmulticast mode [ 1461.489732][T19571] macvtap0: left allmulticast mode [ 1461.645654][ T8613] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1462.074691][ T8613] usb 9-1: Using ep0 maxpacket: 8 [ 1462.089710][ T8613] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1462.112150][ T8613] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 1462.134709][ T5897] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1462.144689][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1462.152008][ T8613] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 1462.171525][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 1462.192769][ T5897] usb 5-1: no configurations [ 1462.209774][ T5897] usb 5-1: can't read configurations, error -22 [ 1462.287287][ T8613] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1462.415379][ T8613] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.561960][ T5897] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1462.772969][ T8613] usb 9-1: Product: syz [ 1462.798088][ T8613] usb 9-1: Manufacturer: syz [ 1462.812092][ T8613] usb 9-1: SerialNumber: syz [ 1462.822954][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.828562][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 1462.916233][ T5897] usb 5-1: no configurations [ 1462.932752][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.936081][ T8613] usb 9-1: config 0 descriptor?? [ 1462.947560][ T5897] usb 5-1: can't read configurations, error -22 [ 1462.981851][ T5897] usb usb5-port1: unable to enumerate USB device [ 1463.021281][T19616] loop5: detected capacity change from 0 to 16 [ 1463.038419][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.075242][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.095160][T19616] erofs (device loop5): mounted with root inode @ nid 36. [ 1463.194934][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1463.719657][ T8613] rc_core: IR keymap rc-streamzap not found [ 1463.736259][ T8613] Registered IR keymap rc-empty [ 1463.758904][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.786020][ T8613] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1463.815706][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.877024][ T8613] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input33 [ 1463.888117][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.917057][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.983374][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.998188][T19630] netlink: 'syz.4.3068': attribute type 3 has an invalid length. [ 1464.008580][T19628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1464.072218][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.148073][T19611] Bluetooth: hci1: command 0x0406 tx timeout [ 1464.166547][T17710] erofs (device loop5): bogus dirent @ nid 36 [ 1464.224655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1465.264657][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1465.520552][ T5897] usb 9-1: USB disconnect, device number 3 [ 1466.304672][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1466.644678][ T9036] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1466.814699][ T9036] usb 5-1: Using ep0 maxpacket: 32 [ 1466.842285][ T9036] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.876961][ T9036] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1466.907515][ T9036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1466.946789][ T9036] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1466.950270][T19669] loop8: detected capacity change from 0 to 512 [ 1466.984326][ T9036] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 1467.026312][ T9036] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1467.035018][T19669] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.3080: inode has both inline data and extents flags [ 1467.054868][ T9036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1467.083434][ T9036] usb 5-1: SerialNumber: syz [ 1467.109144][T19675] netlink: 'syz.2.3079': attribute type 3 has an invalid length. [ 1467.120240][ T723] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.133884][ T9036] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1467.160730][T19669] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1467.161592][T19669] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.3080: couldn't read orphan inode 15 (err -117) [ 1467.170906][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1467.170945][ C0] EXT4-fs (loop8): initial error at time 1772237627: ext4_orphan_get:1391: inode 15 [ 1467.171001][ C0] EXT4-fs (loop8): last error at time 1772237627: ext4_orphan_get:1391: inode 15 [ 1467.275286][T19669] loop8: lost filesystem error report for type 5 error -117 [ 1467.279400][T19669] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 1467.317254][T19663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1467.344635][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1467.460346][T19653] loop4: detected capacity change from 0 to 128 [ 1467.470853][ T723] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.497805][ T8613] usb 5-1: USB disconnect, device number 36 [ 1467.641009][T19681] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1467.708296][ T723] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.842404][T19685] [ 1467.962069][ T723] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.996043][T19611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1468.020834][T19611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1468.032406][T19611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1468.040907][T19611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1468.053232][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 1468.062710][T19611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1468.334379][T19689] lo speed is unknown, defaulting to 1000 [ 1468.384692][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1469.434653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1470.146597][T19611] Bluetooth: hci1: command tx timeout [ 1470.474646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1471.252320][T19743] binder: 19742:19743 ioctl c0306201 200000000640 returned -22 [ 1471.363683][ T765] bond0: (slave bond_slave_0): interface is now down [ 1471.416678][ T765] bond0: (slave bond_slave_1): interface is now down [ 1471.479435][ T723] bridge_slave_1: left allmulticast mode [ 1471.504638][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1471.613045][ T765] bond0: (slave bond_slave_0): interface is now down [ 1471.621986][ T765] bond0: (slave bond_slave_1): interface is now down [ 1471.653105][ T723] bridge_slave_1: left promiscuous mode [ 1471.766332][ T723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.877136][ T7514] bond0: (slave bond_slave_0): interface is now down [ 1471.989348][ T7514] bond0: (slave bond_slave_1): interface is now down [ 1472.176435][ T9790] bond0: (slave bond_slave_0): interface is now down [ 1472.193554][ T9790] bond0: (slave bond_slave_1): interface is now down [ 1472.226455][T19611] Bluetooth: hci1: command tx timeout [ 1472.296017][ T723] bridge_slave_0: left allmulticast mode [ 1472.364883][ T9790] bond0: (slave bond_slave_0): interface is now down [ 1472.371626][ T9790] bond0: (slave bond_slave_1): interface is now down [ 1472.545069][ T723] bridge_slave_0: left promiscuous mode [ 1472.554682][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1472.556655][ T9790] bond0: (slave bond_slave_0): interface is now down [ 1472.562682][ T723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.584665][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1473.804524][T19771] loop8: detected capacity change from 0 to 512 [ 1474.359289][T19611] Bluetooth: hci1: command tx timeout [ 1474.451429][T19771] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1474.465007][T19771] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1474.634642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1474.798679][ T9790] bond0: (slave bond_slave_1): interface is now down [ 1475.110336][ T58] bond0: (slave bond_slave_0): interface is now down [ 1475.189942][ T58] bond0: (slave bond_slave_1): interface is now down [ 1475.265016][T19776] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1475.279062][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1475.328537][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1475.404895][ T58] bond0: (slave bond_slave_0): interface is now down [ 1475.411641][ T58] bond0: (slave bond_slave_1): interface is now down [ 1475.664834][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1475.804732][ T1317] bond0: (slave bond_slave_0): interface is now down [ 1475.900698][ T1317] bond0: (slave bond_slave_1): interface is now down [ 1476.355489][ T13] bond0: (slave bond_slave_0): interface is now down [ 1476.362240][ T13] bond0: (slave bond_slave_1): interface is now down [ 1476.384770][T19611] Bluetooth: hci1: command tx timeout [ 1476.524722][ T58] bond0: (slave bond_slave_0): interface is now down [ 1476.547716][ T58] bond0: (slave bond_slave_1): interface is now down [ 1476.704649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1476.716288][ T49] bond0: (slave bond_slave_0): interface is now down [ 1476.748047][ T49] bond0: (slave bond_slave_1): interface is now down [ 1476.930723][ T13] bond0: (slave bond_slave_0): interface is now down [ 1476.943173][ T13] bond0: (slave bond_slave_1): interface is now down [ 1477.203905][ T49] bond0: (slave bond_slave_0): interface is now down [ 1477.290525][ T49] bond0: (slave bond_slave_1): interface is now down [ 1477.644666][ T765] bond0: (slave bond_slave_0): interface is now down [ 1477.664189][ T765] bond0: (slave bond_slave_1): interface is now down [ 1477.744640][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1477.814916][T11918] bond0: (slave bond_slave_0): interface is now down [ 1477.832420][T11918] bond0: (slave bond_slave_1): interface is now down [ 1478.000379][ T49] bond0: (slave bond_slave_0): interface is now down [ 1478.010709][ T49] bond0: (slave bond_slave_1): interface is now down [ 1478.148780][T19803] loop8: detected capacity change from 0 to 512 [ 1478.215360][T11918] bond0: (slave bond_slave_0): interface is now down [ 1478.343209][T19803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1478.357244][T19803] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1478.469257][T11918] bond0: (slave bond_slave_1): interface is now down [ 1478.772558][ T723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.784669][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1478.785132][ T765] bond0: (slave bond_slave_0): interface is now down [ 1478.810800][ T765] bond0: (slave bond_slave_1): interface is now down [ 1478.821109][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1478.821918][ T723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.865383][ T723] bond0 (unregistering): Released all slaves [ 1478.954696][T11918] bond0: (slave bond_slave_0): interface is now down [ 1478.961439][T11918] bond0: (slave bond_slave_1): interface is now down [ 1478.985703][T19757] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1479.139252][T11918] bond0: (slave bond_slave_0): interface is now down [ 1479.165030][T11918] bond0: (slave bond_slave_1): interface is now down [ 1479.193281][T11918] bond0: (slave ip6gretap2): interface is now down [ 1479.233582][T19824] loop4: detected capacity change from 0 to 512 [ 1479.319721][T19824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1479.364784][ T49] bond0: (slave bond_slave_0): interface is now down [ 1479.371613][ T49] bond0: (slave bond_slave_1): interface is now down [ 1479.391848][ T49] bond0: (slave ip6gretap2): interface is now down [ 1479.402662][T19824] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1479.544914][ T765] bond0: (slave bond_slave_0): interface is now down [ 1479.834711][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1479.841892][ T765] bond0: (slave bond_slave_1): interface is now down [ 1479.864159][ T765] bond0: (slave ip6gretap2): interface is now down [ 1480.276999][ T30] audit: type=1800 audit(1772237640.556:496): pid=19838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3109" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1480.538915][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1480.625765][ T765] bond0: (slave bond_slave_0): interface is now down [ 1480.642790][ T765] bond0: (slave bond_slave_1): interface is now down [ 1480.654658][ T765] bond0: (slave ip6gretap2): interface is now down [ 1480.818213][ T49] bond0: (slave bond_slave_0): interface is now down [ 1480.835077][ T49] bond0: (slave bond_slave_1): interface is now down [ 1480.842165][ T49] bond0: (slave ip6gretap2): interface is now down [ 1480.874772][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1481.027753][ T6108] bond0: (slave bond_slave_0): interface is now down [ 1481.052938][ T6108] bond0: (slave bond_slave_1): interface is now down [ 1481.250636][ T6108] bond0: (slave ip6gretap2): interface is now down [ 1481.571428][T19860] loop4: detected capacity change from 0 to 256 [ 1481.632167][T19860] exfat: Deprecated parameter 'namecase' [ 1481.640600][T19860] exfat: Deprecated parameter 'utf8' [ 1481.650750][T19849] geneve2: entered promiscuous mode [ 1481.656516][ T58] bond0: (slave bond_slave_0): interface is now down [ 1481.663218][ T58] bond0: (slave bond_slave_1): interface is now down [ 1481.738276][ T58] bond0: (slave ip6gretap2): interface is now down [ 1481.753470][T19860] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 1481.894824][ T765] bond0: (slave bond_slave_0): interface is now down [ 1481.904633][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1481.922437][ T765] bond0: (slave bond_slave_1): interface is now down [ 1481.944681][ T765] bond0: (slave ip6gretap2): interface is now down [ 1482.106672][ T6108] bond0: (slave bond_slave_0): interface is now down [ 1482.113495][ T6108] bond0: (slave bond_slave_1): interface is now down [ 1482.180772][ T6108] bond0: (slave ip6gretap2): interface is now down [ 1482.269403][ T7514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.336664][ T49] bond0: (slave bond_slave_0): interface is now down [ 1482.350943][T19877] overlayfs: failed to resolve './file1': -2 [ 1482.353763][ T6108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.399961][ T49] bond0: (slave bond_slave_1): interface is now down [ 1482.425793][ T49] bond0: (slave ip6gretap2): interface is now down [ 1482.515823][ T6108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.557830][ T6108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.597212][ T49] bond0: (slave bond_slave_0): interface is now down [ 1482.639942][ T49] bond0: (slave bond_slave_1): interface is now down [ 1482.656905][ T49] bond0: (slave ip6gretap2): interface is now down [ 1482.809162][ T13] bond0: (slave bond_slave_0): interface is now down [ 1482.848925][ T13] bond0: (slave bond_slave_1): interface is now down [ 1482.897384][ T13] bond0: (slave ip6gretap2): interface is now down [ 1482.944651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1482.978947][ T723] hsr_slave_0: left promiscuous mode [ 1483.076621][ T723] hsr_slave_1: left promiscuous mode [ 1483.099877][ T7514] bond0: (slave bond_slave_0): interface is now down [ 1483.137388][ T723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1483.380295][ T7514] bond0: (slave bond_slave_1): interface is now down [ 1483.432227][ T723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.623395][ T7514] bond0: (slave ip6gretap2): interface is now down [ 1483.984645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1484.125837][ T7514] bond0: (slave bond_slave_0): interface is now down [ 1484.155323][ T723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1484.162992][ T7514] bond0: (slave bond_slave_1): interface is now down [ 1484.179637][ T7514] bond0: (slave ip6gretap2): interface is now down [ 1484.308228][ T723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1484.333105][ T1317] bond0: (slave bond_slave_0): interface is now down [ 1484.366577][ T1317] bond0: (slave bond_slave_1): interface is now down [ 1484.385777][ T1317] bond0: (slave ip6gretap2): interface is now down [ 1484.513384][ T723] veth1_macvtap: left promiscuous mode [ 1484.560554][ T723] veth0_macvtap: left allmulticast mode [ 1484.589787][ T723] veth0_macvtap: left promiscuous mode [ 1484.610750][ T723] veth1_vlan: left promiscuous mode [ 1484.625151][ T6108] bond0: (slave bond_slave_0): interface is now down [ 1484.645195][ T723] veth0_vlan: left promiscuous mode [ 1484.652645][ T6108] bond0: (slave bond_slave_1): interface is now down [ 1484.674587][ T6108] bond0: (slave ip6gretap2): interface is now down [ 1484.841264][ T49] bond0: (slave bond_slave_0): interface is now down [ 1484.939986][ T49] bond0: (slave bond_slave_1): interface is now down [ 1484.996832][ T49] bond0: (slave ip6gretap2): interface is now down [ 1485.024664][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1485.770890][ T49] bond0: (slave bond_slave_0): interface is now down [ 1485.906830][ T49] bond0: (slave bond_slave_1): interface is now down [ 1485.913545][ T49] bond0: (slave ip6gretap2): interface is now down [ 1485.946817][ T5897] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1486.064631][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1486.267023][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 1486.606724][ T1317] bond0: (slave bond_slave_0): interface is now down [ 1486.613465][ T1317] bond0: (slave bond_slave_1): interface is now down [ 1486.621322][ T1317] bond0: (slave ip6gretap2): interface is now down [ 1486.768449][ T49] bond0: (slave bond_slave_0): interface is now down [ 1486.776386][ T49] bond0: (slave bond_slave_1): interface is now down [ 1486.785522][ T49] bond0: (slave ip6gretap2): interface is now down [ 1486.944805][ T6430] bond0: (slave bond_slave_0): interface is now down [ 1486.962335][ T6430] bond0: (slave bond_slave_1): interface is now down [ 1486.987851][ T6430] bond0: (slave ip6gretap2): interface is now down [ 1487.104673][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1487.144784][ T765] bond0: (slave bond_slave_0): interface is now down [ 1487.152613][ T765] bond0: (slave bond_slave_1): interface is now down [ 1487.178694][ T765] bond0: (slave ip6gretap2): interface is now down [ 1487.338462][ T7514] bond0: (slave bond_slave_0): interface is now down [ 1487.453630][ T7514] bond0: (slave bond_slave_1): interface is now down [ 1487.473899][ T7514] bond0: (slave ip6gretap2): interface is now down [ 1487.615442][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.726531][ T723] team0 (unregistering): Port device team_slave_1 removed [ 1487.835759][T19938] siw: device registration error -23 [ 1487.847269][T19938] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3130'. [ 1488.145050][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1488.697504][ T6430] bond0: (slave bond_slave_0): interface is now down [ 1488.704239][ T6430] bond0: (slave bond_slave_1): interface is now down [ 1488.735669][ T723] team0 (unregistering): Port device team_slave_0 removed [ 1488.744762][ T6430] bond0: (slave ip6gretap2): interface is now down [ 1489.048317][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1489.057656][ T5897] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1489.082642][ T5897] usb 3-1: can't read configurations, error -71 [ 1489.087204][ T6430] bond0: (slave bond_slave_0): interface is now down [ 1489.116688][ T6430] bond0: (slave bond_slave_1): interface is now down [ 1489.123420][ T6430] bond0: (slave ip6gretap2): interface is now down [ 1489.184651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1489.336831][ T765] bond0: (slave bond_slave_0): interface is now down [ 1489.646210][ T765] bond0: (slave bond_slave_1): interface is now down [ 1489.767917][ T765] bond0: (slave ip6gretap2): interface is now down [ 1489.796071][T19959] netlink: 'syz.2.3133': attribute type 3 has an invalid length. [ 1490.084670][ T58] bond0: (slave bond_slave_0): interface is now down [ 1490.091508][ T58] bond0: (slave bond_slave_1): interface is now down [ 1490.185859][T19949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1490.224670][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1490.865054][ T58] bond0: (slave ip6gretap2): interface is now down [ 1491.004807][ T9790] bond0: (slave bond_slave_0): interface is now down [ 1491.041701][ T9790] bond0: (slave bond_slave_1): interface is now down [ 1491.134930][ T9790] bond0: (slave ip6gretap2): interface is now down [ 1491.264783][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1491.348874][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1491.361440][ T9790] bond0: (slave bond_slave_0): interface is now down [ 1491.381017][ T9790] bond0: (slave bond_slave_1): interface is now down [ 1491.405431][ T9790] bond0: (slave ip6gretap2): interface is now down [ 1491.491263][T19689] chnl_net:caif_netlink_parms(): no params data found [ 1491.545751][ T58] bond0: (slave bond_slave_0): interface is now down [ 1491.553769][ T58] bond0: (slave bond_slave_1): interface is now down [ 1491.604630][ T58] bond0: (slave ip6gretap2): interface is now down [ 1491.973575][ T9790] bond0: (slave bond_slave_0): interface is now down [ 1491.981735][ T9790] bond0: (slave bond_slave_1): interface is now down [ 1491.988821][ T9790] bond0: (slave ip6gretap2): interface is now down [ 1492.156222][T19985] loop8: detected capacity change from 0 to 512 [ 1492.221533][T11918] bond0: (slave bond_slave_0): interface is now down [ 1492.304686][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1492.477452][T19985] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1492.491533][T19985] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1492.669962][T11918] bond0: (slave bond_slave_1): interface is now down [ 1492.677707][T11918] bond0: (slave ip6gretap2): interface is now down [ 1492.830700][T19989] syz_tun: entered allmulticast mode [ 1492.871454][ T13] bond0: (slave bond_slave_0): interface is now down [ 1492.892704][ T13] bond0: (slave bond_slave_1): interface is now down [ 1492.918444][ T13] bond0: (slave ip6gretap2): interface is now down [ 1492.956676][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1492.970870][T19981] syz_tun: left allmulticast mode [ 1493.046475][T20001] loop4: detected capacity change from 0 to 1024 [ 1493.137199][T20001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1493.145798][ T6430] bond0: (slave bond_slave_0): interface is now down [ 1493.145837][ T6430] bond0: (slave bond_slave_1): interface is now down [ 1493.145864][ T6430] bond0: (slave ip6gretap2): interface is now down [ 1493.216330][T19689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.229250][T19689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.273205][T19689] bridge_slave_0: entered allmulticast mode [ 1493.281968][T19689] bridge_slave_0: entered promiscuous mode [ 1493.301605][T19689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.318228][T19689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.336858][ T6430] bond0: (slave bond_slave_0): interface is now down [ 1493.343558][ T6430] bond0: (slave bond_slave_1): interface is now down [ 1493.344648][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1493.395269][T19689] bridge_slave_1: entered allmulticast mode [ 1493.438912][T19689] bridge_slave_1: entered promiscuous mode [ 1493.447203][T20001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1493.463705][ T6430] bond0: (slave ip6gretap2): interface is now down [ 1494.384641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1494.645001][ T6108] bond0: (slave bond_slave_0): interface is now down [ 1494.651759][ T6108] bond0: (slave bond_slave_1): interface is now down [ 1494.659910][ T6108] bond0: (slave ip6gretap2): interface is now down [ 1494.891137][ T1317] bond0: (slave bond_slave_0): interface is now down [ 1494.944997][ T1317] bond0: (slave bond_slave_1): interface is now down [ 1494.951759][ T1317] bond0: (slave ip6gretap2): interface is now down [ 1495.238638][ T13] bond0: (slave bond_slave_0): interface is now down [ 1495.246817][T19689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.256766][ T13] bond0: (slave bond_slave_1): interface is now down [ 1495.263632][ T13] bond0: (slave ip6gretap2): interface is now down [ 1495.284868][T19689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.329416][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3145'. [ 1495.424669][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1495.436840][ T13] bond0: (slave bond_slave_0): interface is now down [ 1495.466470][T19689] team0: Port device team_slave_0 added [ 1495.477048][ T13] bond0: (slave bond_slave_1): interface is now down [ 1495.483747][ T13] bond0: (slave ip6gretap2): interface is now down [ 1495.494015][T19689] team0: Port device team_slave_1 added [ 1495.654670][ T1317] bond0: (slave bond_slave_0): interface is now down [ 1495.662108][ T1317] bond0: (slave bond_slave_1): interface is now down [ 1495.680645][T19689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1495.689358][ T1317] bond0: (slave ip6gretap2): interface is now down [ 1495.699078][T19689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.820179][T19689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1495.864391][T19689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1495.871463][T19689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.933061][T19689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1495.943763][ T7514] bond0: (slave bond_slave_0): interface is now down [ 1495.950645][ T7514] bond0: (slave bond_slave_1): interface is now down [ 1495.957454][ T7514] bond0: (slave ip6gretap2): interface is now down [ 1496.102767][T19689] hsr_slave_0: entered promiscuous mode [ 1496.110534][ T1317] bond0: (slave bond_slave_0): interface is now down [ 1496.119462][T19689] hsr_slave_1: entered promiscuous mode [ 1496.138023][ T1317] bond0: (slave bond_slave_1): interface is now down [ 1496.167078][ T1317] bond0: (slave ip6gretap2): interface is now down [ 1496.315021][ T1317] bond0: (slave bond_slave_0): interface is now down [ 1496.322125][ T1317] bond0: (slave bond_slave_1): interface is now down [ 1496.336031][ T1317] bond0: (slave ip6gretap2): interface is now down [ 1496.464686][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1496.598921][ T723] bond0: (slave bond_slave_0): interface is now down [ 1496.617870][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.628659][ T723] bond0: (slave bond_slave_1): interface is now down [ 1496.636360][ T723] bond0: (slave ip6gretap2): interface is now down [ 1496.791545][ T6108] bond0: (slave bond_slave_0): interface is now down [ 1496.824920][ T6108] bond0: (slave bond_slave_1): interface is now down [ 1496.831666][ T6108] bond0: (slave ip6gretap2): interface is now down [ 1496.907841][ T6108] bond0: now running without any active interface! [ 1496.984258][T20060] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1497.504658][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1498.544641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1499.584664][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1500.322756][T20108] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1500.624642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1501.444810][ T9036] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1501.664662][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1502.356429][T20134] netlink: 'syz.7.3166': attribute type 3 has an invalid length. [ 1502.503156][T20126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1502.704660][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1503.338114][ T9036] usb 3-1: Using ep0 maxpacket: 8 [ 1503.365128][ T9036] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1503.389737][ T9036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.406639][ T9036] usb 3-1: Product: syz [ 1503.449735][ T9036] usb 3-1: Manufacturer: syz [ 1503.469394][ T9036] usb 3-1: SerialNumber: syz [ 1503.499612][ T9036] usb 3-1: config 0 descriptor?? [ 1503.745277][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1503.778203][ T9036] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1504.610025][T20166] netlink: 'syz.7.3175': attribute type 3 has an invalid length. [ 1504.784806][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1504.947779][T20161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.722917][T19689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1505.782620][ T9036] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1505.834684][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1505.858920][ T9036] usb 3-1: USB disconnect, device number 35 [ 1506.013685][T19689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1506.466330][T20172] binder: 20170:20172 ioctl c0306201 2000000003c0 returned -14 [ 1506.515944][T19689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1506.582705][T19689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1506.843577][T20180] random: crng reseeded on system resumption [ 1506.874725][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1507.904647][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1507.985130][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1508.738550][T20196] siw: device registration error -23 [ 1508.751978][T20196] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3182'. [ 1508.944641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1509.984654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1511.024667][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1511.397023][T19689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.522059][T19689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.603531][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.610695][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.849496][T11918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.856719][T11918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.952547][T20226] siw: device registration error -23 [ 1512.064653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1513.104752][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1513.842555][T20228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1514.144648][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1514.156306][T20239] netlink: 'syz.8.3192': attribute type 3 has an invalid length. [ 1514.695870][T20232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1515.185175][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1516.234646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1517.074152][T20265] siw: device registration error -23 [ 1517.086542][T20265] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3198'. [ 1517.274662][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1517.956210][T20266] netlink: 'syz.7.3197': attribute type 3 has an invalid length. [ 1518.103842][T20258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1518.314655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1519.344646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1520.384660][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1521.139855][T19689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.243081][T19689] veth0_vlan: entered promiscuous mode [ 1521.260155][T19689] veth1_vlan: entered promiscuous mode [ 1521.394842][T19689] veth0_macvtap: entered promiscuous mode [ 1521.424916][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1521.450059][T19689] veth1_macvtap: entered promiscuous mode [ 1521.490285][T19689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1521.524144][T19689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1521.601663][ T6108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.644154][ T6108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.736319][T20310] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1521.846621][T20313] loop8: detected capacity change from 0 to 512 [ 1521.951034][T20313] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1521.989980][T20313] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1522.465160][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1522.963420][ T6108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.994668][ T6108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.114706][ T30] audit: type=1800 audit(1772237683.276:497): pid=20321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3211" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1523.336428][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.356919][ T7514] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1523.504638][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1523.531888][T20338] siw: device registration error -23 [ 1523.546192][T20338] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3213'. [ 1524.554666][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1525.468012][ T6430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.494623][ T6430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.584657][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1525.718473][T20357] xt_hashlimit: size too large, truncated to 1048576 [ 1525.784044][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.812641][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.157969][T20367] siw: device registration error -23 [ 1526.624756][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1527.487820][ T8613] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1527.571339][T20383] siw: device registration error -23 [ 1527.674718][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1528.704672][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1528.814672][ T8613] usb 9-1: Using ep0 maxpacket: 32 [ 1528.832351][ T8613] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.852604][ T8613] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1528.903988][ T8613] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1528.960958][ T8613] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.006621][ T8613] usb 9-1: config 0 descriptor?? [ 1529.045843][ T8613] hub 9-1:0.0: USB hub found [ 1529.306599][ T8613] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1529.744852][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1530.637087][ T8613] hid-generic 0003:046D:C31C.001B: unknown main item tag 0x0 [ 1530.748449][T20391] netlink: 'syz.7.3228': attribute type 3 has an invalid length. [ 1530.794663][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1530.899675][T20388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1531.475204][ T8613] hid-generic 0003:046D:C31C.001B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.8-1/input0 [ 1531.585895][ T8613] usb 9-1: USB disconnect, device number 4 [ 1531.824658][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1531.909107][T20407] fido_id[20407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1532.864650][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1533.367567][T20435] netlink: 'syz.4.3236': attribute type 3 has an invalid length. [ 1533.516745][T20427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1533.914641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1534.954651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1535.984675][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1536.236179][T20451] netlink: 'syz.4.3243': attribute type 1 has an invalid length. [ 1537.024738][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1537.358790][T20451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1537.391611][T20470] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3243'. [ 1537.998198][T20455] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1538.013221][T20465] bridge0: port 4(dummy0) entered disabled state [ 1538.022058][T20465] bridge0: port 4(dummy0) entered disabled state [ 1538.065539][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1538.524868][T20465] bridge0: port 3(vlan2) entered blocking state [ 1538.531275][T20465] bridge0: port 3(vlan2) entered forwarding state [ 1538.586381][T20465] bond1: (slave dummy0): making interface the new active one [ 1538.850509][T20465] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1538.954434][T20483] netlink: 17780 bytes leftover after parsing attributes in process `syz.7.3249'. [ 1539.104665][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1539.840495][T20470] bridge0: port 3(vlan2) entered disabled state [ 1539.975525][T20470] bond1: (slave dummy0): Releasing active interface [ 1540.137172][T20470] vlan2 (unregistering): left promiscuous mode [ 1540.144642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1540.171855][T20492] loop8: detected capacity change from 0 to 512 [ 1541.194718][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1541.383811][T20470] dummy0 (unregistering): left promiscuous mode [ 1541.399876][T20470] bridge0: port 3(vlan2) entered disabled state [ 1541.472309][T20492] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1541.594368][T20493] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1541.618365][T20492] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1542.234743][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1542.555472][ T30] audit: type=1800 audit(1772237702.846:498): pid=20508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3252" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1542.774933][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1543.217745][T19560] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1543.265023][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1543.379539][T19560] usb 9-1: Using ep0 maxpacket: 32 [ 1543.411025][T19560] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1543.452950][T19560] usb 9-1: config 0 has no interface number 0 [ 1543.477574][T19560] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1543.520756][T19560] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1543.550460][T19560] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.591100][T19560] usb 9-1: Product: syz [ 1543.617809][T19560] usb 9-1: Manufacturer: syz [ 1543.652335][T19560] usb 9-1: SerialNumber: syz [ 1543.683701][T19560] usb 9-1: config 0 descriptor?? [ 1543.736034][T20520] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1544.305186][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1544.531444][T20520] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1545.344824][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1545.470052][T20554] netlink: 'syz.1.3265': attribute type 3 has an invalid length. [ 1546.058344][T20549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1546.385058][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1546.809167][T19560] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1546.819780][T19560] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1546.834181][T19560] asix 9-1:0.188: probe with driver asix failed with error -71 [ 1546.854910][T19560] usb 9-1: USB disconnect, device number 5 [ 1547.424765][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1548.409211][T20591] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3276'. [ 1548.464646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1548.955266][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.504657][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1550.544650][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1551.584651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1551.800389][T20636] netlink: 'syz.2.3285': attribute type 3 has an invalid length. [ 1552.460776][T20631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.624688][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1553.617017][T20648] loop8: detected capacity change from 0 to 512 [ 1553.664727][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1553.815970][T20648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1553.829615][T20648] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1554.460070][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1554.704777][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1555.040797][T20665] mmap: syz.2.3292 (20665) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1555.744650][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1555.988230][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1556.684673][ T5897] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1556.794642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1556.916932][ T5897] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1556.936327][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.007210][ T5897] usb 2-1: Product: syz [ 1557.011434][ T5897] usb 2-1: Manufacturer: syz [ 1557.158207][ T5897] usb 2-1: SerialNumber: syz [ 1557.266947][ T5897] usb 2-1: config 0 descriptor?? [ 1557.824670][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1558.001622][ T5897] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1558.864644][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1558.924867][ T5961] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1558.974064][T20710] loop4: detected capacity change from 0 to 512 [ 1559.722731][T20710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1559.735450][T20710] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1559.825992][ T5961] usb 9-1: Using ep0 maxpacket: 32 [ 1559.848488][ T5961] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1559.869506][ T5897] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1559.904688][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1560.013443][ T5897] usb 2-1: USB disconnect, device number 5 [ 1560.026140][ T5961] usb 9-1: config 0 has no interface number 0 [ 1560.064718][ T5961] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1560.088675][T10091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1560.131759][ T5961] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1560.559217][ T5961] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1560.944671][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1561.163677][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.244626][ T5961] usb 9-1: Product: syz [ 1561.248861][ T5961] usb 9-1: Manufacturer: syz [ 1561.253480][ T5961] usb 9-1: SerialNumber: syz [ 1561.292509][ T5961] usb 9-1: config 0 descriptor?? [ 1561.985625][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1562.139721][T20723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1562.797353][ T5961] appletouch 9-1:0.85: Failed to read mode from device. [ 1562.816277][ T5961] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 1562.849007][ T5961] usb 9-1: USB disconnect, device number 6 [ 1563.034799][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1564.074662][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1565.104658][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1565.623219][T20763] binder: 20759:20763 ioctl c0306201 2000000003c0 returned -14 [ 1565.738355][ T30] audit: type=1804 audit(2000000022.470:499): pid=20758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3313" name="/newroot/112/file0" dev="fuse" ino=1 res=1 errno=0 [ 1566.144668][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1567.194653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1568.234669][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1568.664304][T20779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1568.767587][T20791] siw: device registration error -23 [ 1568.781175][T20791] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3321'. [ 1569.210209][T20788] binder: 20782:20788 ioctl c0306201 200000000440 returned -14 [ 1569.274669][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1570.304929][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1570.607688][T20800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1571.355102][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1572.394821][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1573.424907][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1574.464650][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1575.504772][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1576.544795][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1577.584643][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1578.191408][T20866] netlink: 'syz.1.3338': attribute type 3 has an invalid length. [ 1578.634659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1578.829256][T20862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1579.665611][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1580.682642][T20885] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1580.704655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1581.140351][T20888] netlink: 'syz.2.3340': attribute type 3 has an invalid length. [ 1581.295315][T20875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1581.435487][T20877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1581.744641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1582.784647][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1583.167793][T20892] Bluetooth: MGMT ver 1.23 [ 1583.824681][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1584.853159][T20907] 9p: Bad value for 'rfdno' [ 1584.864687][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1585.264879][T19611] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1585.267286][T15179] Bluetooth: hci2: command 0x0401 tx timeout [ 1585.547540][T20925] syzkaller1: entered promiscuous mode [ 1585.553067][T20925] syzkaller1: entered allmulticast mode [ 1585.705308][T20930] loop8: detected capacity change from 0 to 512 [ 1585.839224][T20930] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1585.904692][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1585.916817][T20930] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.830834][ T30] audit: type=1800 audit(2000000043.570:500): pid=20949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3354" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1586.944757][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1587.444942][T20952] netlink: 'syz.1.3358': attribute type 3 has an invalid length. [ 1587.626811][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.783143][T20935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1587.985614][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1587.995370][T11918] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1589.024661][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1590.064649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1590.761074][T20976] NFSD: Failed to start, no listeners configured. [ 1591.104915][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1591.966946][T21011] binder: 21010:21011 ioctl c0306201 2000000003c0 returned -14 [ 1592.000014][T15179] Bluetooth: hci2: command 0x0401 tx timeout [ 1592.144647][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1593.184659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1594.224649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1594.473907][T21021] loop8: detected capacity change from 0 to 512 [ 1594.675705][T21021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1594.688725][T21021] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1595.264656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1596.304735][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1596.477911][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1597.344668][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1598.384650][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1598.734097][ T9036] libceph: connect (1)[c::]:6789 error -97 [ 1598.741566][ T9036] libceph: mon0 (1)[c::]:6789 connect error [ 1599.008926][ T5961] libceph: connect (1)[c::]:6789 error -97 [ 1599.015010][ T5961] libceph: mon0 (1)[c::]:6789 connect error [ 1599.424650][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1599.870731][ T5961] libceph: connect (1)[c::]:6789 error -97 [ 1599.876871][ T5961] libceph: mon0 (1)[c::]:6789 connect error [ 1599.934286][T21062] ceph: No mds server is up or the cluster is laggy [ 1599.962560][T21076] binder: BINDER_SET_CONTEXT_MGR already set [ 1599.972305][T21076] binder: 21075:21076 ioctl 4018620d 200000000040 returned -16 [ 1600.464656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1600.477712][T21076] binder: 21075:21076 ioctl c0306201 2000000003c0 returned -14 [ 1601.504752][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1602.544656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1603.269594][T21119] netlink: 'syz.0.3395': attribute type 3 has an invalid length. [ 1603.584655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1603.780486][T21110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1604.624651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1605.664660][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1605.965886][T21145] comedi comedi0: Minor 8 could not be opened [ 1606.704721][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1607.744656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1608.784651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1609.824681][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1610.215247][T21175] binder: 21174:21175 ioctl c0306201 200000000180 returned -14 [ 1610.385888][T21176] netlink: 'syz.1.3408': attribute type 3 has an invalid length. [ 1610.407946][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.864647][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1610.950717][T21172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1611.904659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1612.717773][T21191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1612.944646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1613.112688][T21199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3413'. [ 1613.984838][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1615.024649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1616.064657][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1616.493354][T21231] vlan2: entered promiscuous mode [ 1616.554987][T21231] vlan2: entered allmulticast mode [ 1616.560163][T21231] hsr_slave_1: entered allmulticast mode [ 1616.874913][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1617.104658][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1618.144655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1618.605101][T21233] netlink: 'syz.2.3427': attribute type 3 has an invalid length. [ 1618.741065][T21232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1618.753058][T15179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1618.788642][T15179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1618.798415][T15179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1618.849568][T15179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1618.866210][T15179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1619.115877][T21248] lo speed is unknown, defaulting to 1000 [ 1619.184659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1619.451465][T21257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1620.224684][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1620.944818][T15179] Bluetooth: hci5: command tx timeout [ 1621.264643][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1622.056257][ T9791] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1622.304662][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1623.344993][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1623.550496][T15179] Bluetooth: hci5: command tx timeout [ 1623.778710][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 1623.795169][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 1623.915639][T21285] ceph: No mds server is up or the cluster is laggy [ 1624.202309][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 1624.218125][T21248] chnl_net:caif_netlink_parms(): no params data found [ 1624.225839][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 1624.384662][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1625.424645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1625.606472][T15179] Bluetooth: hci5: command tx timeout [ 1626.224093][T21323] netlink: 'syz.1.3446': attribute type 3 has an invalid length. [ 1626.464693][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1626.482390][T21311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1627.197404][T21248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.260577][T21248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.305096][T21248] bridge_slave_0: entered allmulticast mode [ 1627.313273][T21248] bridge_slave_0: entered promiscuous mode [ 1627.504668][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1627.659243][T21327] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1627.755079][T15179] Bluetooth: hci5: command tx timeout [ 1628.342586][T21248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.404732][T21248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.458272][T21248] bridge_slave_1: entered allmulticast mode [ 1628.476457][T21248] bridge_slave_1: entered promiscuous mode [ 1628.544781][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1628.558669][T21329] binder: BINDER_SET_CONTEXT_MGR already set [ 1628.574838][T21329] binder: 21328:21329 ioctl 4018620d 200000000040 returned -16 [ 1628.697643][T21248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1628.773720][T21248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.594930][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1630.182222][T21331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1630.634679][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1631.607097][T21248] team0: Port device team_slave_0 added [ 1631.616201][T21248] team0: Port device team_slave_1 added [ 1631.664973][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1631.673501][T21248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.680743][T21248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.997314][T21248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.704673][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1633.744679][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1633.781222][T21248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.820353][T21248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.861151][T21367] loop8: detected capacity change from 0 to 512 [ 1633.949685][T21370] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1634.047046][T21248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1634.116509][T21367] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1634.185896][T21367] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1634.784737][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1635.298763][ T30] audit: type=1804 audit(2000000092.040:501): pid=21381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3460" name="/newroot/138/file0" dev="tmpfs" ino=792 res=1 errno=0 [ 1635.302055][T21381] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 1635.350328][T21384] netlink: 'syz.7.3459': attribute type 3 has an invalid length. [ 1635.373046][T21381] ref_ctr increment failed for inode: 0x318 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880258ee200 [ 1635.498266][T21366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1635.824657][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1636.505389][ T30] audit: type=1800 audit(2000000093.120:502): pid=21390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3457" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1636.599723][T21388] netlink: 'syz.0.3461': attribute type 3 has an invalid length. [ 1636.619551][T21382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1636.864653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1636.964490][T17724] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.210292][T21374] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 1637.318231][T21374] ref_ctr decrement failed for inode: 0x318 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880258ee200 [ 1637.580593][T21374] uprobe: syz.1.3460:21374 failed to unregister, leaking uprobe [ 1637.730949][T21248] hsr_slave_0: entered promiscuous mode [ 1637.796054][T21248] hsr_slave_1: entered promiscuous mode [ 1637.802599][T21248] debugfs: 'hsr0' already exists in 'hsr' [ 1637.814723][T21248] Cannot create hsr debugfs directory [ 1637.905147][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1638.944729][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1639.984672][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1640.706373][T21427] netlink: 'syz.8.3469': attribute type 3 has an invalid length. [ 1641.024667][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1641.221464][T21419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1642.064648][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1643.104709][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1644.144663][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1644.702954][T21452] siw: device registration error -23 [ 1644.715935][T21452] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3474'. [ 1645.184660][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1645.365511][T21446] orangefs_mount: mount request failed with -4 [ 1645.748459][T21459] netlink: 'syz.2.3475': attribute type 3 has an invalid length. [ 1645.826277][T21460] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1646.184436][T21465] netlink: 'syz.1.3476': attribute type 3 has an invalid length. [ 1646.227392][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1646.369364][T21453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1646.433981][T21455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1647.264654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1648.042490][T21471] netlink: 'syz.8.3477': attribute type 3 has an invalid length. [ 1648.304651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1648.694119][T21467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1649.344660][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1649.426267][T21476] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3478'. [ 1650.042899][T21483] netlink: 'syz.1.3479': attribute type 3 has an invalid length. [ 1650.220313][T21474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1650.384742][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1650.735032][T21482] vivid-003: kernel_thread() failed [ 1651.424681][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1652.363093][T21498] genirq: Flags mismatch irq 5. 00200000 (aio_iiro_16) vs. 00200000 (aio_iiro_16) [ 1652.464646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1652.683912][T21502] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1652.745524][T21356] udevd[21356]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1653.418615][T21499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1653.504663][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1653.959412][T21356] udevd[21356]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1654.544698][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1655.584653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1656.572407][ T6430] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1656.634648][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1657.664684][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1658.704715][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1658.822900][T21248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1659.181962][T21553] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3490'. [ 1659.744874][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1659.948552][T21556] netlink: 'syz.7.3491': attribute type 3 has an invalid length. [ 1660.095915][T21542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1660.612975][T21555] vivid-000: kernel_thread() failed [ 1660.794649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1661.824691][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1662.600788][T21248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1662.667342][T21248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1662.790010][T21248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1662.864758][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1663.030089][T15179] Bluetooth: hci5: command tx timeout [ 1663.904807][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1664.945029][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1665.633473][T21609] IPv6: NLM_F_CREATE should be specified when creating new route [ 1665.984831][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1666.387757][T21576] syzkaller0: entered promiscuous mode [ 1666.393291][T21576] syzkaller0: entered allmulticast mode [ 1667.024649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1668.064718][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1668.578026][T21631] netlink: 'syz.0.3509': attribute type 1 has an invalid length. [ 1669.104658][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1669.222349][T21638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3509'. [ 1670.108473][T21652] netlink: 'syz.1.3512': attribute type 3 has an invalid length. [ 1670.154660][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1670.644374][T21646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1671.184838][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1671.832214][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.869511][T21654] binder_alloc: 21653: pid 21653 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1672.234687][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1673.274688][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1673.692634][T21635] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 1673.727850][ T6108] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1673.743832][T21638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1674.059210][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1674.314664][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1675.054662][ T5897] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1675.199193][T21248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.233874][ T5897] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1675.258359][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.272016][T21248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1675.294848][ T5897] usb 3-1: Product: syz [ 1675.305597][ T5897] usb 3-1: Manufacturer: syz [ 1675.328365][ T5897] usb 3-1: SerialNumber: syz [ 1675.344649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1676.394690][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1676.425038][ T5897] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1676.939929][ T5897] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1676.953642][ T5897] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1677.015383][ T5897] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1677.016749][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.030548][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.085121][ T5897] usb 3-1: USB disconnect, device number 36 [ 1677.107595][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.114855][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1677.424659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1678.474708][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1678.623271][T19611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1678.657515][T19611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1678.689050][T19611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1678.725618][T19611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1678.755103][T19611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1679.049113][T21727] netlink: 'syz.8.3529': attribute type 3 has an invalid length. [ 1679.504730][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1680.336283][T21722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1680.544664][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1680.923529][T15179] Bluetooth: hci4: command tx timeout [ 1681.182868][T21720] lo speed is unknown, defaulting to 1000 [ 1681.584718][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1682.371450][T21741] syz.0.3533 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1682.624656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1682.964786][T15179] Bluetooth: hci4: command tx timeout [ 1683.156140][T21750] netlink: 'syz.2.3534': attribute type 3 has an invalid length. [ 1683.542299][T21744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1683.664658][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1684.704765][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1684.984903][ T30] audit: type=1804 audit(2000000141.720:503): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3537" name="/newroot/151/file1" dev="fuse" ino=1 res=1 errno=0 [ 1685.025110][T15179] Bluetooth: hci4: command tx timeout [ 1685.066313][ T30] audit: type=1800 audit(2000000141.720:504): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3537" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1685.087151][ T30] audit: type=1800 audit(2000000141.720:505): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3537" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1685.744644][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1686.784659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1687.174688][T15179] Bluetooth: hci4: command tx timeout [ 1687.543005][T21778] syzkaller0: entered promiscuous mode [ 1687.565850][T21778] syzkaller0: entered allmulticast mode [ 1687.824761][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1688.035969][T21720] chnl_net:caif_netlink_parms(): no params data found [ 1688.864682][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1689.084752][T21809] nvme_fabrics: missing parameter 'transport=%s' [ 1689.092340][T21809] nvme_fabrics: missing parameter 'nqn=%s' [ 1689.904671][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1690.413372][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1690.954660][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1691.721678][T21828] genirq: Flags mismatch irq 5. 00200000 (aio_iiro_16) vs. 00200000 (aio_iiro_16) [ 1691.984670][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1692.835592][T19560] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1693.024659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1693.169349][T19560] usb 9-1: Using ep0 maxpacket: 16 [ 1693.176020][T21720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.184155][T21720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.216297][T19560] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.227529][T21720] bridge_slave_0: entered allmulticast mode [ 1693.253854][T19560] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1694.064647][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1694.108032][T21720] bridge_slave_0: entered promiscuous mode [ 1694.128267][T19560] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1694.142391][T19611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1694.363706][T21720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.371018][T19611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1694.386557][T19611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1694.395762][T19611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1694.403650][T19611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1694.681693][T19560] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1694.691474][T19560] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1694.709226][T19560] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1694.724300][T19560] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1694.733526][T19560] usb 9-1: Manufacturer: syz [ 1694.735599][T21720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.782146][T19560] usb 9-1: config 0 descriptor?? [ 1694.903110][T21720] bridge_slave_1: entered allmulticast mode [ 1695.002419][T21720] bridge_slave_1: entered promiscuous mode [ 1695.105015][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1695.383263][T21720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.452787][T21720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.509994][T21849] lo speed is unknown, defaulting to 1000 [ 1696.075906][T19560] rc_core: IR keymap rc-hauppauge not found [ 1696.138700][T19560] Registered IR keymap rc-empty [ 1696.145021][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1696.167565][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1696.254849][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1696.305602][T19560] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1696.382826][T19560] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input35 [ 1696.710889][T15179] Bluetooth: hci5: command tx timeout [ 1696.786790][T21720] team0: Port device team_slave_0 added [ 1696.901691][T21720] team0: Port device team_slave_1 added [ 1697.184684][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1697.255777][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1697.578908][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1697.604760][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1697.625395][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1697.644715][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1697.664727][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1697.694772][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1697.803052][T21720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1697.810107][T21720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1697.854786][T21720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1697.875710][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1697.878996][T21720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1697.893489][T21720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1697.894787][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1697.920720][T21720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1697.973126][T20995] bridge_slave_1: left allmulticast mode [ 1698.015058][T20995] bridge_slave_1: left promiscuous mode [ 1698.020886][T20995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.141413][T20995] bridge_slave_0: left allmulticast mode [ 1698.155112][T19560] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1698.164666][T20995] bridge_slave_0: left promiscuous mode [ 1698.170454][T20995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.224651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1698.227550][T19560] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1698.257741][T19560] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1698.787302][T15179] Bluetooth: hci5: command tx timeout [ 1698.796413][T19560] usb 9-1: USB disconnect, device number 7 [ 1698.868972][T21898] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1698.924415][T21898] block device autoloading is deprecated and will be removed. [ 1699.274727][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1700.314657][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1700.864865][T15179] Bluetooth: hci5: command tx timeout [ 1701.344688][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1702.023255][T20995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.036544][T20995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.394665][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1702.806049][T20995] bond0 (unregistering): Released all slaves [ 1702.945285][T15179] Bluetooth: hci5: command tx timeout [ 1703.424809][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1704.346453][T20995] hsr_slave_0: left promiscuous mode [ 1704.377309][T20995] hsr_slave_1: left promiscuous mode [ 1704.393023][T20995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1704.464847][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1705.187331][T20995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.504842][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1705.548257][T21959] netlink: 'syz.8.3578': attribute type 3 has an invalid length. [ 1705.964073][T21951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1706.546339][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1707.584682][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1708.624655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1708.778363][T20995] team0 (unregistering): Port device team_slave_1 removed [ 1708.855184][T20995] team0 (unregistering): Port device team_slave_0 removed [ 1709.259673][T21981] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1709.270243][T21981] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1709.674671][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1709.972965][T21849] chnl_net:caif_netlink_parms(): no params data found [ 1710.704690][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1711.736873][T21720] hsr_slave_0: entered promiscuous mode [ 1711.754227][T21720] hsr_slave_1: entered promiscuous mode [ 1711.754676][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1711.815899][T21720] debugfs: 'hsr0' already exists in 'hsr' [ 1711.822143][T21720] Cannot create hsr debugfs directory [ 1712.794715][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1713.834687][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1714.215649][T21849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.421143][T21849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.864683][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1715.032630][T21849] bridge_slave_0: entered allmulticast mode [ 1715.067360][T21849] bridge_slave_0: entered promiscuous mode [ 1715.108666][T21849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.157175][T21849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.215803][T21849] bridge_slave_1: entered allmulticast mode [ 1715.245369][T21849] bridge_slave_1: entered promiscuous mode [ 1715.904655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1716.706069][T21849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1716.729411][T21849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.944646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1717.984662][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1719.024766][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1720.074802][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1720.669327][T22063] netlink: 'syz.8.3598': attribute type 3 has an invalid length. [ 1720.818536][T22056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1721.122631][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1721.445653][T20995] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.591936][T21849] team0: Port device team_slave_0 added [ 1721.788486][T21849] team0: Port device team_slave_1 added [ 1722.144786][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1723.184805][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1723.954332][T11918] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1724.083025][T20995] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.224770][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1725.264651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1726.314663][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1727.354644][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1728.394650][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1729.430163][T21849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1729.435829][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1729.446953][T21849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1729.519691][T21849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.549363][T22106] mkiss: ax0: crc mode is auto. [ 1729.913680][T20995] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.474801][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1731.226334][T21849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1731.237102][T21849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.514640][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1731.703954][T21849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.544671][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1733.264948][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1733.594637][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1733.750901][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.944766][T20995] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.624793][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1735.664645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1735.736616][T21849] hsr_slave_0: entered promiscuous mode [ 1735.959957][T19611] Bluetooth: hci1: command 0x0406 tx timeout [ 1735.998558][T21849] hsr_slave_1: entered promiscuous mode [ 1736.714668][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1736.998671][T21849] debugfs: 'hsr0' already exists in 'hsr' [ 1737.015807][T21849] Cannot create hsr debugfs directory [ 1737.744645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1738.794666][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1739.824694][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1740.874659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1741.017892][T22183] netlink: 'syz.1.3623': attribute type 3 has an invalid length. [ 1741.165201][T22175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.891042][T19611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1741.902282][T19611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1741.911820][T19611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1741.914645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1741.920271][T19611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1741.938821][T19611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1742.336040][T22186] lo speed is unknown, defaulting to 1000 [ 1742.944739][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1743.984637][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1743.995006][T19611] Bluetooth: hci6: command tx timeout [ 1745.034757][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1746.074835][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1746.095224][T19611] Bluetooth: hci6: command tx timeout [ 1747.084974][ T9036] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1747.104798][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1747.265616][T20995] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1747.397204][ T9036] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.411157][ T9036] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.545098][T20995] bond0 (unregistering): Released all slaves [ 1747.577662][T20995] bond1 (unregistering): Released all slaves [ 1747.658026][ T9036] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1747.672314][ T9036] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1747.681512][ T9036] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.700400][ T9036] usb 9-1: config 0 descriptor?? [ 1748.144711][T19611] Bluetooth: hci6: command tx timeout [ 1748.144832][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1748.597368][T22232] netlink: 'syz.0.3635': attribute type 3 has an invalid length. [ 1748.631967][T22231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1748.745752][T22237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1749.194669][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1749.291891][ T9036] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1749.514151][T20995] tipc: Disabling bearer [ 1749.537348][T20995] tipc: Left network mode Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.