last executing test programs: 16m45.040933257s ago: executing program 3 (id=24): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x37d, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) 16m42.922172088s ago: executing program 3 (id=26): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 16m41.464100919s ago: executing program 3 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 16m35.754124064s ago: executing program 3 (id=43): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r0, r0, r0], 0x0, 0x10, 0x10000}, 0x94) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000000, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x6f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1042010, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}]}}, 0x1, 0x0, 0x0) 16m35.131878783s ago: executing program 3 (id=47): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x4000423) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x5, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x20000000, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0x7f03) 16m31.192201801s ago: executing program 3 (id=52): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) 16m30.471258722s ago: executing program 32 (id=52): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) 11m18.657304535s ago: executing program 4 (id=484): socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008a"], 0xc8) syz_usb_connect$cdc_ncm(0x4, 0xa0, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0x6, 0x0, 0xf5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4e, 0x663, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x1a}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x3, 0x81, 0x3, 0x1, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7, 0x8, 0xd, 0x5, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xdc, 0x1, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x20, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x2, 0x10}}}}}}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) r5 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r5, 0xffffffffffffffff, 0x0) 11m13.060406629s ago: executing program 4 (id=494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x4900) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x570, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@unspec=@connlabel={{0x28}, {0x4, 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0x3, 0x4, 0x2802, 0x7, 0x9, 0x5, 0x722, 0xe72, 0x8, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) syz_emit_vhci(&(0x7f0000000f00)=ANY=[@ANYBLOB="043e0612"], 0x9) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) 11m9.6859909s ago: executing program 4 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0xb000) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1, 0x1c9, &(0x7f0000000780)="$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") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="ed5247009b140314000100fe88000000000000000000000000000108000f00010000006fd5cb7e8af855c820f88e9c"], 0x38}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c}}, 0x8080) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) 11m8.535541078s ago: executing program 4 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) mmap$snddsp(&(0x7f0000a72000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, r3, 0x1000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5d}}, 0x44) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, {0x0}}) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, 0x0, 0x0) 11m5.907340627s ago: executing program 4 (id=503): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[], 0x20e) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x3, 0x1000000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x2, 0x100000000004}, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080)=0x2c, &(0x7f00000000c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000"], 0xe4}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11m1.243694948s ago: executing program 4 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) socket(0x10, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0xa721) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r3, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) 10m45.789202232s ago: executing program 33 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) socket(0x10, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0xa721) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r3, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) 9.335379189s ago: executing program 5 (id=1530): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x402, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18}, 0xfffffdef) 7.405640307s ago: executing program 5 (id=1536): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000003c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) 6.406358863s ago: executing program 5 (id=1541): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000001c0)=0xf4254) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x510, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x10, 0xe0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xa, 0x7f, 0x8, {0x7, 0x25, 0x1, 0x80, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x3, {0x7, 0x25, 0x1, 0x80, 0x2, 0xb4}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 5.186294401s ago: executing program 0 (id=1545): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1}, 0x0) close(r0) sendmsg$unix(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f085", 0x2}], 0x1}, 0x200c8061) 5.043840273s ago: executing program 2 (id=1546): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@delchain={0x40, 0x65, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x9, 0x2}, {0x0, 0xc}}, [@f_tcindex={{0xc}, {0x10, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x4040) recvmsg$can_raw(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f000001a4c0)=[{&(0x7f00000192c0)=""/158, 0x9e}], 0x1}, 0x2) 4.959839425s ago: executing program 0 (id=1547): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001dc0)='n', 0x1}], 0x1}, 0x2004c885) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) sendmsg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)='x', 0x1}], 0x1}, 0x4) write$tcp_mem(r4, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000280)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000100)='security.', 0x0, &(0x7f0000000480)='+.\x00', 0x0]}) 4.491318352s ago: executing program 2 (id=1548): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 4.357351774s ago: executing program 1 (id=1549): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 4.143958657s ago: executing program 1 (id=1550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0xc, 0xa4, &(0x7f0000000000)="9a18d27f0c4730", 0x0, 0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.516995786s ago: executing program 0 (id=1551): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000001c0)=0xf4254) 3.366213469s ago: executing program 2 (id=1552): unshare(0x22020400) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000100)=[{r0, 0x2030}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) 3.29071516s ago: executing program 5 (id=1553): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e3}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 3.219365331s ago: executing program 1 (id=1554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x80002, 0x90) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$FUSE(r1, &(0x7f0000003640)={0x2020}, 0x2020) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) 2.470405512s ago: executing program 0 (id=1555): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peek(0x2, r1, &(0x7f0000000180)) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) 2.424002873s ago: executing program 5 (id=1556): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x3c0008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9a, 0x2b1, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x80, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r1], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 2.408445943s ago: executing program 2 (id=1557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r0, 0x40000000) sendmmsg$inet(r0, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 2.289634965s ago: executing program 1 (id=1558): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.199898816s ago: executing program 0 (id=1559): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001dc0)='n', 0x1}], 0x1}, 0x2004c885) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) sendmsg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)='x', 0x1}], 0x1}, 0x4) write$tcp_mem(r4, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000280)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000100)='security.', 0x0, &(0x7f0000000480)='+.\x00', 0x0]}) 1.98361084s ago: executing program 2 (id=1560): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6c, @dev={0xac, 0x14, 0x14, 0x2c}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x5e}, 0x2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5ce, &(0x7f00000000c0)={0x0, 0x6734, 0x80, 0x40000, 0x34f, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r6, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) lseek(0xffffffffffffffff, 0x0, 0x4) 1.97241338s ago: executing program 5 (id=1561): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000001c0)=0xf4254) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x510, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x10, 0xe0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xa, 0x7f, 0x8, {0x7, 0x25, 0x1, 0x80, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x3, {0x7, 0x25, 0x1, 0x80, 0x2, 0xb4}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 667.99933ms ago: executing program 1 (id=1562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x400000006, 0x0, 0x10000000000, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0xffffffffffffffce, 0x0, 0x2, 0x0, 0xfffffffffffffffc], 0xdddd0000, 0x1144}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 552.837151ms ago: executing program 2 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x4}, 0x38) 49.623739ms ago: executing program 0 (id=1564): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000001c0)=0xf4254) 0s ago: executing program 1 (id=1565): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) kernel console output (not intermixed with test programs): ute [ 797.648975][T10072] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 797.908805][T10072] usb 3-1: Using ep0 maxpacket: 8 [ 797.920914][T10072] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 797.931493][T10072] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 797.963113][T10072] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 797.973477][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 798.041401][T10072] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 798.074055][T10072] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 798.108802][T10072] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.163019][T10072] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 798.221327][T10072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.776225][T10072] usb 3-1: usb_control_msg returned -71 [ 798.806112][T10072] usbtmc 3-1:16.0: can't read capabilities [ 799.008997][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 799.428145][T10807] 9pnet_virtio: no channels available for device 127.0.0.1 [ 799.803588][T10072] usb 3-1: USB disconnect, device number 6 [ 800.048827][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 800.644493][T10816] ALSA: mixer_oss: invalid index 40000 [ 801.088844][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 802.128872][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 802.573943][T10824] loop5: detected capacity change from 0 to 128 [ 802.575926][T10821] loop0: detected capacity change from 0 to 1024 [ 802.628606][T10821] hfsplus: unable to find HFS+ superblock [ 802.651726][T10824] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 803.168843][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 804.208837][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 804.409072][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 805.158877][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 805.169673][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 805.184459][ T9] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 805.196772][ T9] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 805.205135][ T28] audit: type=1800 audit(1751720325.480:190): pid=10836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.959" name="file2" dev="loop5" ino=95 res=0 errno=0 [ 805.225552][ T9] usb 3-1: Product: syz [ 805.233883][ T9] usb 3-1: Manufacturer: syz [ 805.238746][ T9] usb 3-1: SerialNumber: syz [ 805.248881][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 805.759078][ T9] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 805.783156][ T9] visor: probe of 3-1:1.0 failed with error -110 [ 806.288864][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 807.328901][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 808.280950][T10839] loop5: detected capacity change from 0 to 4096 [ 808.368845][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 808.884131][ T5853] usb 3-1: USB disconnect, device number 7 [ 808.900850][T10839] ntfs3: loop5: Failed to read $UpCase (-4). [ 808.939864][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.948838][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.380220][T10847] netlink: 48 bytes leftover after parsing attributes in process `syz.0.964'. [ 809.408923][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 810.247674][T10853] loop5: detected capacity change from 0 to 1024 [ 810.448822][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 811.488881][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 812.529255][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 812.753295][T10852] syz.2.965 (10852): drop_caches: 2 [ 812.759290][T10852] syz.2.965 (10852): drop_caches: 2 [ 813.331598][T10853] hfsplus: unable to find HFS+ superblock [ 813.508565][T10860] loop1: detected capacity change from 0 to 512 [ 813.568804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 813.722067][T10860] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 813.941157][T10860] EXT4-fs (loop1): 1 truncate cleaned up [ 814.044921][T10860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.609441][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 815.648832][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 816.688822][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 817.728831][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 818.768836][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 818.781704][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.616865][T10888] netlink: 24 bytes leftover after parsing attributes in process `syz.5.972'. [ 819.808882][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 819.921726][T10888] loop5: detected capacity change from 0 to 32768 [ 819.929071][T10888] XFS: noikeep mount option is deprecated. [ 819.935011][T10888] xfs: Unknown parameter 'smackfshat' [ 820.001975][T10887] loop1: detected capacity change from 0 to 1024 [ 820.175267][T10887] hfsplus: unable to find HFS+ superblock [ 820.559442][ T5853] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 820.784906][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 820.848825][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 820.939029][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 820.950820][ T5853] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 820.960046][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.317535][ T5853] usb 3-1: config 0 descriptor?? [ 821.323475][T10895] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 821.888882][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 822.600703][ T5853] hid-rmi 0003:0461:4E72.0001: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 822.652707][ T5853] usb 3-1: USB disconnect, device number 8 [ 822.722832][T10914] netlink: 'syz.1.978': attribute type 4 has an invalid length. [ 822.737454][T10914] netlink: set zone limit has 8 unknown bytes [ 822.929080][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 823.671925][T10913] fido_id[10913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 823.968815][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 825.009006][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 826.048856][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 827.088827][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 828.128853][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 828.968235][T10960] ax25_connect(): syz.5.988 uses autobind, please contact jreuter@yaina.de [ 829.168798][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 829.997215][T10963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 830.208855][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 831.248877][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 832.144061][T10971] loop5: detected capacity change from 0 to 512 [ 832.288839][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 833.328839][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 833.865926][T10971] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5. [ 834.368845][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 835.408849][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 836.230274][ T5853] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 836.448866][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 836.452910][ T5853] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 836.480606][ T5853] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 836.569571][ T5853] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 836.598864][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.723557][T10985] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 837.488824][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 837.649387][ T5853] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 838.528803][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 839.568822][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 840.608794][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 841.648803][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 842.567035][T10107] usb 6-1: USB disconnect, device number 6 [ 842.689008][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 843.610292][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.999'. [ 843.619516][T11018] netlink: 32 bytes leftover after parsing attributes in process `syz.5.999'. [ 843.658131][T11018] gtp0: entered promiscuous mode [ 843.673803][T11018] gtp0: entered allmulticast mode [ 843.728818][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 844.778853][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 845.808840][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 846.477636][T11016] syz.0.997 (11016): drop_caches: 2 [ 846.494928][T11016] syz.0.997 (11016): drop_caches: 2 [ 846.858804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 847.888796][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 848.928816][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 849.521888][T11030] IPv6: Can't replace route, no match found [ 849.968784][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 851.009832][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 852.048861][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 852.270948][T11053] loop2: detected capacity change from 0 to 1024 [ 852.316832][T11053] hfsplus: unable to find HFS+ superblock [ 853.089016][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 853.299080][T10072] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 853.928285][T10072] usb 1-1: unable to get BOS descriptor or descriptor too short [ 853.938757][T10072] usb 1-1: not running at top speed; connect to a high speed hub [ 853.956932][T10072] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 853.979154][T10072] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 854.015833][T10072] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 854.138998][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 854.364002][T11054] sctp: failed to load transform for md5: -2 [ 854.780502][T10072] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 854.838799][T10072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.869409][T10072] usb 1-1: Product: syz [ 854.873652][T10072] usb 1-1: Manufacturer: syz [ 854.878281][T10072] usb 1-1: SerialNumber: syz [ 855.168804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 855.170114][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 855.184793][T11079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1010'. [ 855.392496][T11079] gtp0: entered promiscuous mode [ 855.397650][T11079] gtp0: entered allmulticast mode [ 856.208891][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 856.807878][T10072] usb 1-1: can't set config #1, error -71 [ 857.017380][T10072] usb 1-1: USB disconnect, device number 6 [ 857.028913][T11089] loop5: detected capacity change from 0 to 16 [ 857.046144][T11089] erofs: Unknown parameter 'GPL' [ 857.248818][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 858.159643][T11104] lo speed is unknown, defaulting to 1000 [ 858.169262][T11104] lo speed is unknown, defaulting to 1000 [ 858.194464][T11104] lo speed is unknown, defaulting to 1000 [ 858.216712][T11104] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 858.237448][T11104] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 858.288897][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 858.292553][T11104] lo speed is unknown, defaulting to 1000 [ 858.315073][T11104] lo speed is unknown, defaulting to 1000 [ 858.323565][T11104] lo speed is unknown, defaulting to 1000 [ 858.333050][T11104] lo speed is unknown, defaulting to 1000 [ 858.427729][T11111] pimreg3: entered allmulticast mode [ 859.328905][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 859.524727][T11115] loop5: detected capacity change from 0 to 8 [ 860.369127][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 861.408831][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 862.448792][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 863.488833][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 864.528790][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 865.568784][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 866.608833][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 866.848547][T11130] sctp: failed to load transform for md5: -2 [ 866.954249][T11159] loop0: detected capacity change from 0 to 16 [ 866.979057][T11159] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature d45400, please upgrade kernel [ 867.333640][T11159] loop0: detected capacity change from 0 to 512 [ 867.585272][T11159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.598344][T11159] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 867.648829][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 867.951172][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.688845][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 869.217180][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 869.226413][T11171] bridge_slave_1: left allmulticast mode [ 869.232760][T11171] bridge_slave_1: left promiscuous mode [ 869.239099][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.728837][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 869.802084][T11171] bridge_slave_0: left allmulticast mode [ 869.807770][T11171] bridge_slave_0: left promiscuous mode [ 870.388127][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.462681][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.768775][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 871.041139][T11187] ax25_connect(): syz.1.1031 uses autobind, please contact jreuter@yaina.de [ 871.736575][T11184] pimreg3: entered allmulticast mode [ 871.808922][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 872.321618][T11192] loop1: detected capacity change from 0 to 8 [ 872.656958][T11193] SQUASHFS error: xz decompression failed, data probably corrupt [ 872.665865][T11193] SQUASHFS error: Failed to read block 0xa8: -5 [ 872.710914][T11193] SQUASHFS error: xz decompression failed, data probably corrupt [ 872.719146][T11193] SQUASHFS error: Failed to read block 0xa8: -5 [ 872.726879][ T28] audit: type=1800 audit(1751720393.020:191): pid=11193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1034" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 872.848965][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 873.888822][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 874.928823][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 875.659568][T11207] netlink: set zone limit has 8 unknown bytes [ 875.740886][T11207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1036'. [ 875.927482][T11212] lo speed is unknown, defaulting to 1000 [ 875.943693][T11212] lo speed is unknown, defaulting to 1000 [ 875.966434][T11212] lo speed is unknown, defaulting to 1000 [ 875.968828][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 876.062004][T11216] loop5: detected capacity change from 0 to 256 [ 877.008799][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 877.162574][T11212] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 878.048799][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 878.455792][T11212] lo speed is unknown, defaulting to 1000 [ 878.653897][T11212] lo speed is unknown, defaulting to 1000 [ 878.664826][T11212] lo speed is unknown, defaulting to 1000 [ 878.829925][T11212] lo speed is unknown, defaulting to 1000 [ 879.089020][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 880.128868][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 880.602914][T11249] loop1: detected capacity change from 0 to 128 [ 881.168788][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 882.208862][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 883.248823][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 884.101721][T11276] loop2: detected capacity change from 0 to 1024 [ 884.109785][T11276] ext4: Unknown parameter 'dont_measure' [ 884.231300][ T8735] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 884.298871][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 884.335374][T11276] loop2: detected capacity change from 0 to 64 [ 884.380869][ T8735] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 884.969237][ T5853] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 885.338760][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 886.072176][ T5853] usb 2-1: unable to get BOS descriptor or descriptor too short [ 886.323056][ T5853] usb 2-1: not running at top speed; connect to a high speed hub [ 886.369083][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 887.002207][ T5853] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 887.018700][ T5853] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 887.048647][ T5853] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.061553][ T5853] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 887.088928][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.107310][ T5853] usb 2-1: Product: syz [ 887.117446][ T5853] usb 2-1: Manufacturer: syz [ 887.127596][ T5853] usb 2-1: SerialNumber: syz [ 887.158101][T11290] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 887.239801][T11290] IPVS: ip_vs_edit_dest(): server weight less than zero [ 887.347966][ T28] audit: type=1400 audit(1751720663.642:192): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11289 comm="syz.0.1053" [ 887.408859][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 887.424871][ T5853] usb 2-1: 0:2 : does not exist [ 887.689458][ T5853] usb 2-1: USB disconnect, device number 13 [ 887.774463][T11294] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 887.789993][T11294] ubi31: attaching mtd0 [ 887.813028][T11294] ubi31: scanning is finished [ 887.817843][T11294] ubi31: empty MTD device detected [ 888.287573][T11294] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 888.448869][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 888.564540][ T8735] udevd[8735]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.742129][T11297] input: syz1 as /devices/virtual/input/input11 [ 888.923582][T11305] xt_connbytes: Forcing CT accounting to be enabled [ 888.930588][T11305] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 888.942551][T11305] xt_bpf: check failed: parse error [ 889.488887][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 889.832466][T11304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1056'. [ 890.096735][T11307] sp0: Synchronizing with TNC [ 890.114853][T11304] unsupported nlmsg_type 40 [ 890.528932][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 891.578808][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 892.608976][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 892.840998][T11332] loop5: detected capacity change from 0 to 32768 [ 892.848162][T11332] XFS: ikeep mount option is deprecated. [ 893.648802][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 893.737062][T11332] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 893.983773][T11332] XFS (loop5): Ending clean mount [ 893.991001][T11332] XFS (loop5): Quotacheck needed: Please wait. [ 894.146638][T11332] XFS (loop5): Quotacheck: Done. [ 894.386409][T11345] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1062'. [ 894.688884][T11346] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 894.698847][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 894.724528][T11346] IPVS: ip_vs_edit_dest(): server weight less than zero [ 894.804195][ T28] audit: type=1400 audit(1751720671.102:193): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11344 comm="syz.2.1064" [ 894.842972][ T8428] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 895.280629][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 895.289792][T11351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1066'. [ 895.324450][T11351] gtp0: entered promiscuous mode [ 895.329643][T11351] gtp0: entered allmulticast mode [ 895.728793][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 896.107856][T11358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1068'. [ 896.695699][T11362] loop2: detected capacity change from 0 to 16 [ 896.768817][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 897.509699][T11362] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature d45400, please upgrade kernel [ 897.543873][T11364] loop5: detected capacity change from 0 to 1024 [ 897.595488][T11364] hfsplus: unable to find HFS+ superblock [ 897.796875][T11361] loop2: detected capacity change from 0 to 512 [ 897.808778][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 898.762308][T11361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.775076][T11361] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 898.848802][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 899.066009][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.106153][T11373] bad cache= option: no%e [ 899.106153][T11373] [ 899.113310][T11373] CIFS: VFS: bad cache= option: no%e [ 899.888798][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 900.433362][T11385] hub 9-0:1.0: USB hub found [ 900.442358][T11385] hub 9-0:1.0: 1 port detected [ 900.928997][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 901.669341][T11389] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 901.676655][T11389] IPVS: ip_vs_edit_dest(): server weight less than zero [ 901.783968][ T28] audit: type=1400 audit(1751720678.082:194): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11388 comm="syz.1.1074" [ 901.968858][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 902.438059][ T8430] Bluetooth: hci4: command 0x0c1a tx timeout [ 902.619344][T10072] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 902.902352][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 902.906968][T11399] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 902.938213][T10072] usb 6-1: unable to get BOS descriptor or descriptor too short [ 903.008858][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 903.054808][T10072] usb 6-1: not running at top speed; connect to a high speed hub [ 903.442257][T10072] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 903.471824][T10072] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 903.498682][T10072] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.523672][T10072] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 903.543273][T10072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.552231][T10072] usb 6-1: Product: syz [ 903.563731][T10072] usb 6-1: Manufacturer: syz [ 903.568508][T10072] usb 6-1: SerialNumber: syz [ 904.048981][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 904.117016][T11407] veth0_vlan: entered allmulticast mode [ 905.027916][T11410] hub 8-0:1.0: USB hub found [ 905.035232][T11410] hub 8-0:1.0: 1 port detected [ 905.088781][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 905.308153][T10072] usb 6-1: 0:2 : does not exist [ 905.330500][T10072] usb 6-1: USB disconnect, device number 7 [ 905.495685][T11409] veth0_vlan: left promiscuous mode [ 905.502393][T11409] veth0_vlan: entered promiscuous mode [ 905.522219][T11411] lo speed is unknown, defaulting to 1000 [ 905.583600][ T8735] udevd[8735]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.128891][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 906.972693][T11425] loop5: detected capacity change from 0 to 16 [ 907.168813][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 908.208773][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 908.541081][T11425] erofs: (device loop5): check_layout_compatibility: unidentified incompatible feature d45400, please upgrade kernel [ 908.887819][T11429] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 908.899153][T11429] IPVS: ip_vs_edit_dest(): server weight less than zero [ 909.099220][ T28] audit: type=1400 audit(1751720685.402:195): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11428 comm="syz.5.1084" [ 909.248820][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 910.276126][T11440] random: crng reseeded on system resumption [ 910.288831][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 910.743709][T11442] batman_adv: batadv0: Adding interface: ip6gretap1 [ 910.750614][T11442] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.776354][T11442] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 910.979558][T11446] batman_adv: batadv0: Removing interface: ip6gretap1 [ 911.328905][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 911.890576][T11448] loop0: detected capacity change from 0 to 128 [ 912.361947][T11443] xt_CT: No such helper "snmp" [ 912.370121][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 913.319744][T11457] loop2: detected capacity change from 0 to 256 [ 913.329175][T11457] FAT-fs (loop2): Unrecognized mount option ";;zÈTC" or missing value [ 913.409667][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 914.448785][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 915.489761][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 916.248786][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 916.514357][T11474] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 916.528789][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 916.545357][T11474] IPVS: ip_vs_edit_dest(): server weight less than zero [ 916.569307][ T9533] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 916.621798][ T28] audit: type=1400 audit(1751720692.902:196): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11473 comm="syz.1.1093" [ 916.781563][ T9533] usb 6-1: unable to get BOS descriptor or descriptor too short [ 916.799442][ T9533] usb 6-1: not running at top speed; connect to a high speed hub [ 916.819460][ T9533] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 916.848755][ T9533] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 916.869039][ T9533] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 916.887566][T11479] loop1: detected capacity change from 0 to 4096 [ 916.905645][ T9533] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 916.931624][ T9533] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.942890][T11479] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 916.952080][ T9533] usb 6-1: Product: syz [ 916.956382][ T9533] usb 6-1: Manufacturer: syz [ 916.963043][T11479] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 916.974496][T11479] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 916.982950][ T9533] usb 6-1: SerialNumber: syz [ 916.993747][T11479] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 917.006523][T11479] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 917.017810][T11479] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 917.197102][T11479] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 917.216704][T11479] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 917.238491][T11479] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 917.258824][T11479] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 917.568819][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 918.608912][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 918.843638][ T9533] usb 6-1: 0:2 : does not exist [ 919.032650][ T9533] usb 6-1: USB disconnect, device number 8 [ 919.198472][ T8726] udevd[8726]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.648774][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 920.688787][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 920.718865][ T9533] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 921.208847][ T9533] usb 2-1: device descriptor read/64, error -71 [ 921.728774][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 921.899815][ T8430] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 921.928891][ T9533] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 922.017515][T11510] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 922.040567][T11510] IPVS: ip_vs_edit_dest(): server weight less than zero [ 922.086742][ T28] audit: type=1400 audit(1751720698.382:197): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11509 comm="syz.5.1102" [ 922.103395][ T9533] usb 2-1: device descriptor read/64, error -71 [ 922.238904][ T9533] usb usb2-port1: attempt power cycle [ 922.437478][T11512] loop5: detected capacity change from 0 to 512 [ 922.457872][T11512] EXT4-fs: Ignoring removed nobh option [ 922.470636][T11512] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 922.547350][T11512] EXT4-fs (loop5): 1 orphan inode deleted [ 922.567633][T11512] EXT4-fs (loop5): 1 truncate cleaned up [ 922.590383][T11512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.768803][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 923.033014][ T8428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.808932][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 924.848780][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 925.371147][T11533] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1109'. [ 925.540027][T11537] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 925.553695][T11537] IPVS: ip_vs_edit_dest(): server weight less than zero [ 925.656301][T11540] sp0: Synchronizing with TNC [ 925.888856][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 926.790933][ T28] audit: type=1400 audit(1751720702.912:198): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11536 comm="syz.2.1111" [ 926.928771][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 927.769465][T11545] loop0: detected capacity change from 0 to 256 [ 927.788805][T11545] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 927.810014][T11545] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 927.858657][T11545] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 927.968934][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 929.008924][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 930.048823][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 930.338743][T10107] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 930.525815][T11562] loop1: detected capacity change from 0 to 8 [ 930.773885][T10107] usb 3-1: device descriptor read/64, error -71 [ 931.088758][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 931.507252][T10107] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 931.572990][T11556] block device autoloading is deprecated and will be removed. [ 931.817861][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.887616][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 932.128813][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 932.568832][T10107] usb 3-1: device descriptor read/64, error -71 [ 932.646074][T11579] xt_limit: Overflow, try lower: 687865856/40 [ 932.695347][T10107] usb usb3-port1: attempt power cycle [ 933.168771][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 933.548665][T10107] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 934.208804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 934.291705][T10107] usb 3-1: Using ep0 maxpacket: 16 [ 934.308672][T10107] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 934.342671][T10107] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 934.367602][T10107] usb 3-1: config 166 has no interface number 0 [ 934.392278][T10107] usb 3-1: config 166 has no interface number 1 [ 934.410141][T10107] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 934.448999][T10107] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 934.491358][T10107] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 934.525282][T10107] usb 3-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 934.556864][T10107] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 934.608691][T10107] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 934.659349][T10107] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 934.730787][T10107] usb 3-1: config 166 interface 177 has no altsetting 0 [ 934.761746][T10107] usb 3-1: config 166 interface 34 has no altsetting 0 [ 934.791831][T10107] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 934.822108][T10107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.858158][T10107] usb 3-1: Product: syz [ 934.878335][T10107] usb 3-1: Manufacturer: syz [ 934.884374][T10107] usb 3-1: SerialNumber: syz [ 935.008111][T10107] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 935.188326][T11599] loop2: detected capacity change from 0 to 256 [ 935.196972][T11599] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 935.229279][T11599] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 935.248796][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 935.272190][T10107] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 935.285128][T11599] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 935.462843][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 936.288874][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 936.901076][T10107] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 936.907475][T10107] usb 3-1: No valid video chain found. [ 936.966053][T10107] usb 3-1: USB disconnect, device number 12 [ 937.328766][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 938.368755][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 938.488370][T11608] loop1: detected capacity change from 0 to 32768 [ 938.527823][T11608] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1131 (11608) [ 938.591645][T11608] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 938.620595][T11608] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 938.646599][T11608] BTRFS info (device loop1): force zlib compression, level 3 [ 938.657365][T11608] BTRFS info (device loop1): force clearing of disk cache [ 938.667612][T11608] BTRFS info (device loop1): setting nodatasum [ 938.676834][T11608] BTRFS info (device loop1): use zlib compression, level 3 [ 938.685769][T11608] BTRFS info (device loop1): allowing degraded mounts [ 938.693757][T11608] BTRFS info (device loop1): enabling disk space caching [ 938.702121][T11608] BTRFS info (device loop1): disk space caching is enabled [ 938.798284][T11608] BTRFS info (device loop1): enabling ssd optimizations [ 938.820228][T11608] BTRFS info (device loop1): auto enabling async discard [ 938.857528][T11608] BTRFS info (device loop1): rebuilding free space tree [ 938.975070][T11608] BTRFS info (device loop1): disabling free space tree [ 938.992023][T11608] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 939.032421][T11606] loop0: detected capacity change from 0 to 32768 [ 939.035621][T11608] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 939.071227][T11606] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1130 (11606) [ 939.193613][T11606] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 939.230446][T11606] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 939.253816][T11606] BTRFS info (device loop0): turning on sync discard [ 939.283237][T11606] BTRFS info (device loop0): disabling tree log [ 939.300500][T11606] BTRFS info (device loop0): metadata ratio 5 [ 939.338696][T11606] BTRFS info (device loop0): using free space tree [ 939.370490][T11608] BTRFS info (device loop1): balance: start -susage=4..0,limit=2 [ 939.394668][T11608] BTRFS info (device loop1): balance: ended with status: 0 [ 939.408810][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 939.510308][ T5783] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 939.558434][T11606] BTRFS info (device loop0): enabling ssd optimizations [ 939.729305][ T5785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 940.349976][T11622] loop2: detected capacity change from 0 to 32768 [ 940.389149][T11622] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1134 (11622) [ 940.448769][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 940.649873][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1135'. [ 940.727883][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1135'. [ 941.082218][T11622] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 941.109724][T11622] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 941.118453][T11622] BTRFS info (device loop2): using free space tree [ 941.488870][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 941.729526][T11676] loop1: detected capacity change from 0 to 22 [ 941.739908][T11676] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 941.753333][T11622] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 941.758945][T11622] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 941.782778][T11676] romfs: bad initial checksum on dev loop1. [ 941.922642][T11622] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 941.961125][T11622] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 942.083345][T11622] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 942.129293][T11684] loop1: detected capacity change from 0 to 1024 [ 942.147760][T11684] EXT4-fs: Ignoring removed oldalloc option [ 942.192719][T11684] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 942.528823][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 942.759391][T11622] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 942.782264][T11622] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 943.568732][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 944.014346][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 944.070151][T11622] BTRFS error (device loop2): open_ctree failed: -12 [ 944.362034][T11695] loop0: detected capacity change from 0 to 64 [ 944.608781][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 945.654267][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 946.071239][T11693] loop2: detected capacity change from 0 to 32768 [ 946.124485][T11693] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1142 (11693) [ 946.225748][T11693] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 946.254011][T11693] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 946.274150][T11693] BTRFS info (device loop2): enabling ssd optimizations [ 946.329035][T11693] BTRFS info (device loop2): turning on sync discard [ 946.335852][T11693] BTRFS info (device loop2): max_inline at 3 [ 946.378758][T11693] BTRFS info (device loop2): not using ssd optimizations [ 946.409684][T11693] BTRFS info (device loop2): using free space tree [ 946.517670][T11710] loop0: detected capacity change from 0 to 4096 [ 946.596617][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 946.688767][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 947.006121][T11734] loop5: detected capacity change from 0 to 22 [ 947.016552][T11734] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 947.060084][T11734] romfs: bad initial checksum on dev loop5. [ 947.098660][T11693] BTRFS info (device loop2): checking UUID tree [ 947.338407][T11736] loop5: detected capacity change from 0 to 1024 [ 947.348274][T11736] EXT4-fs: Ignoring removed oldalloc option [ 947.370676][T11736] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 947.728762][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 948.768729][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 949.689386][T11710] ntfs3: loop0: Failed to read $AttrDef (-4). [ 949.777072][T11741] loop1: detected capacity change from 0 to 128 [ 949.808763][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 949.826423][ T5784] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 949.906556][T11741] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 950.005381][T11741] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 950.334186][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 950.848934][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 951.532325][T11756] loop2: detected capacity change from 0 to 1024 [ 951.558350][T11756] hfsplus: unable to find HFS+ superblock [ 951.888930][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 952.928799][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 953.439882][T11753] loop1: detected capacity change from 0 to 32768 [ 953.529715][T11753] (syz.1.1157,11753,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 953.655557][T11753] (syz.1.1157,11753,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 953.864992][T11753] JBD2: Ignoring recovery information on journal [ 953.968735][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 954.042980][T11753] JBD2: journal reset failed [ 954.069177][T11753] (syz.1.1157,11753,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 954.129474][T11753] (syz.1.1157,11753,0):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -4 [ 954.309290][T11765] loop5: detected capacity change from 0 to 32768 [ 954.522565][T11765] syz.5.1160: attempt to access beyond end of device [ 954.522565][T11765] loop5: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 954.559758][T11765] metapage_write_end_io: I/O error [ 954.590901][T11765] ERROR: (device loop5): diWrite: ixpxd invalid [ 954.590901][T11765] [ 954.630167][T11765] ERROR: (device loop5): remounting filesystem as read-only [ 954.660535][T11765] ERROR: (device loop5): txCommit: [ 954.660535][T11765] [ 954.721803][T11765] blkno = 8f7c0, nblocks = 1 [ 954.738801][T11765] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 954.738801][T11765] [ 954.771355][T11765] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 954.771355][T11765] [ 954.816846][T11765] ialloc: diAlloc returned -5! [ 954.966761][ T8428] syz-executor: attempt to access beyond end of device [ 954.966761][ T8428] loop5: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 955.008910][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 955.058787][ T8428] metapage_write_end_io: I/O error [ 955.122145][T11772] loop1: detected capacity change from 0 to 64 [ 955.428270][T11776] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1164'. [ 955.549853][T11778] loop2: detected capacity change from 0 to 22 [ 955.559812][T11778] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 955.571963][T11778] romfs: bad initial checksum on dev loop2. [ 955.852819][T11779] loop2: detected capacity change from 0 to 1024 [ 955.862799][T11779] EXT4-fs: Ignoring removed oldalloc option [ 956.048838][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 957.088750][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 957.658086][T11779] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 957.751786][ T8735] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 958.128792][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 958.201730][T11782] random: crng reseeded on system resumption [ 958.422287][T11786] batman_adv: batadv0: Adding interface: ip6gretap1 [ 958.429335][T11786] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.455607][T11786] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 958.758179][T11792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.766060][T11792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.168734][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 959.216347][T11784] xt_CT: No such helper "snmp" [ 959.385874][T11792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.460065][T11792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.529909][T11792] batman_adv: batadv0: Interface deactivated: vlan1 [ 959.546921][T11792] batman_adv: batadv0: Removing interface: vlan1 [ 959.609660][T11792] batman_adv: batadv0: Removing interface: ip6gretap1 [ 959.744929][T11796] loop5: detected capacity change from 0 to 8192 [ 959.784919][T11796] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 960.208854][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 960.242951][T11800] loop5: detected capacity change from 0 to 4096 [ 960.668707][T11800] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 960.806956][T11800] ntfs3: loop5: failed to convert "c46c" to cp863 [ 961.248823][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 962.288726][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 963.328749][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 963.806215][T11818] lo speed is unknown, defaulting to 1000 [ 964.306226][T11814] loop2: detected capacity change from 0 to 32768 [ 964.368752][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 964.376554][T11814] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1174 (11814) [ 964.444294][T11814] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 964.459779][T11814] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 964.470977][T11814] BTRFS info (device loop2): using free space tree [ 964.702798][T11814] BTRFS info (device loop2): enabling ssd optimizations [ 964.745399][T11814] BTRFS info (device loop2): auto enabling async discard [ 965.151049][ T5784] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 965.408757][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 966.448798][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 967.025271][T11869] loop0: detected capacity change from 0 to 2048 [ 967.089434][T11869] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 967.488732][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 968.528795][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 969.568915][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 970.608745][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 970.767475][T11888] bridge1: entered promiscuous mode [ 971.344381][T11898] loop1: detected capacity change from 0 to 128 [ 971.649320][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 972.688737][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 973.259585][T11900] loop0: detected capacity change from 0 to 32768 [ 973.297081][T11900] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1201 (11900) [ 973.402746][T11900] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 973.452219][T11900] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 973.496224][T11900] BTRFS info (device loop0): force zlib compression, level 3 [ 973.514414][T11900] BTRFS info (device loop0): force clearing of disk cache [ 973.534438][T11900] BTRFS info (device loop0): setting nodatasum [ 973.552899][T11900] BTRFS info (device loop0): use zlib compression, level 3 [ 973.574729][T11900] BTRFS info (device loop0): allowing degraded mounts [ 973.595145][T11900] BTRFS info (device loop0): enabling disk space caching [ 973.616235][T11900] BTRFS info (device loop0): disk space caching is enabled [ 973.728817][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 973.759235][T11900] BTRFS info (device loop0): enabling ssd optimizations [ 973.766257][T11900] BTRFS info (device loop0): auto enabling async discard [ 973.830681][T11918] loop1: detected capacity change from 0 to 32768 [ 973.837705][T11900] BTRFS info (device loop0): rebuilding free space tree [ 973.877076][T11918] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1207 (11918) [ 974.037897][ T8726] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (8726) [ 974.090264][T11939] loop2: detected capacity change from 0 to 256 [ 974.350018][T11900] BTRFS info (device loop0): disabling free space tree [ 974.368372][T11900] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 974.473901][T11900] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 974.768850][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 975.109524][ T5785] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 975.808752][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 976.848766][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 977.889311][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 978.928761][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 979.209884][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 979.230670][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1215'. [ 979.360677][T11968] loop5: detected capacity change from 0 to 256 [ 979.758234][T11972] loop1: detected capacity change from 0 to 1024 [ 979.776983][T11972] EXT4-fs: Ignoring removed oldalloc option [ 979.837172][T11972] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 979.968731][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 980.338195][T11984] loop5: detected capacity change from 0 to 256 [ 980.477166][T11984] FAT-fs (loop5): Directory bread(block 64) failed [ 980.507348][T11984] FAT-fs (loop5): Directory bread(block 65) failed [ 980.529437][T11984] FAT-fs (loop5): Directory bread(block 66) failed [ 980.536127][T11984] FAT-fs (loop5): Directory bread(block 67) failed [ 980.543135][T11984] FAT-fs (loop5): Directory bread(block 68) failed [ 980.549833][T11984] FAT-fs (loop5): Directory bread(block 69) failed [ 980.556593][T11984] FAT-fs (loop5): Directory bread(block 70) failed [ 980.563389][T11984] FAT-fs (loop5): Directory bread(block 71) failed [ 980.570170][T11984] FAT-fs (loop5): Directory bread(block 72) failed [ 980.576841][T11984] FAT-fs (loop5): Directory bread(block 73) failed [ 981.008776][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 982.048756][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 983.088739][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 983.970865][T11995] macsec0: entered promiscuous mode [ 984.022517][T11995] macsec0: left promiscuous mode [ 984.128753][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 984.765262][T12012] loop1: detected capacity change from 0 to 4096 [ 984.798078][T12012] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 984.849130][T12012] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 984.886307][T12012] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 984.921732][T12012] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 984.958351][T12012] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 984.986762][T12012] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 985.023441][T12012] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 985.053802][T12012] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 985.079380][T12012] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 985.087322][T12012] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 985.168762][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 985.369116][T12020] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 986.208710][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 987.051127][T12024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1241'. [ 987.248758][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 987.686509][T12039] bond0: Error: Cannot enslave bond to itself. [ 988.288732][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 988.432311][T12054] loop2: detected capacity change from 0 to 64 [ 988.578925][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 988.840496][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.851421][T12060] loop1: detected capacity change from 0 to 8 [ 988.887641][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.908227][ T8] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 988.939818][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.968275][T12060] SQUASHFS error: Unable to read directory block [2c0:35] [ 988.968443][ T8] usb 6-1: config 0 descriptor?? [ 989.120907][T12062] loop0: detected capacity change from 0 to 4096 [ 989.192326][T12062] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 989.240352][ T8] usbhid 6-1:0.0: can't add hid device: -71 [ 989.253920][ T8] usbhid: probe of 6-1:0.0 failed with error -71 [ 989.297339][ T8] usb 6-1: USB disconnect, device number 9 [ 989.328749][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 989.503125][T12068] loop0: detected capacity change from 0 to 512 [ 989.519600][T12068] EXT4-fs: Ignoring removed i_version option [ 989.532090][T12068] EXT4-fs: Ignoring removed nobh option [ 989.554044][T12058] loop2: detected capacity change from 0 to 32768 [ 989.565046][T12068] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 989.621175][T12068] EXT4-fs (loop0): 1 truncate cleaned up [ 989.637856][T12068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.797885][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.799063][ T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 989.934179][T12075] loop0: detected capacity change from 0 to 16 [ 989.977458][T12075] erofs: Unknown parameter '' [ 990.019809][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 990.368712][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 990.872791][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.408704][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 992.177534][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.189905][ T8] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 992.205171][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.239803][ T8] usb 6-1: config 0 descriptor?? [ 992.250907][ T8] usb 6-1: can't set config #0, error -71 [ 992.259406][ T8] usb 6-1: USB disconnect, device number 10 [ 992.448908][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 993.096410][T12087] macsec0: entered promiscuous mode [ 993.117340][T12087] macsec0: left promiscuous mode [ 993.202417][T12078] loop2: detected capacity change from 0 to 32768 [ 993.260985][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.456702][T12078] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 993.488798][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 993.925441][ T5784] ocfs2: Unmounting device (7,2) on (node local) [ 994.352624][T12099] tipc: Enabling of bearer rejected, failed to enable media [ 994.387200][T12090] loop5: detected capacity change from 0 to 32768 [ 994.420791][T12090] XFS: ikeep mount option is deprecated. [ 994.455104][T12090] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 994.528790][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 994.651117][T12090] XFS (loop5): Ending clean mount [ 994.663693][T12090] XFS (loop5): Quotacheck needed: Please wait. [ 994.718937][T12090] XFS (loop5): Quotacheck: Done. [ 994.796957][T12116] loop2: detected capacity change from 0 to 512 [ 994.809045][T12116] EXT4-fs: Ignoring removed bh option [ 994.812594][ T8428] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 994.820132][T12116] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 994.879490][T12116] EXT4-fs (loop2): 1 truncate cleaned up [ 994.886091][T12116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.950291][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.022353][T12120] loop2: detected capacity change from 0 to 512 [ 995.061639][T12120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.078759][T12120] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 995.125477][T12120] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 995.149019][T12120] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 995.163734][T12120] EXT4-fs (loop2): This should not happen!! Data will be lost [ 995.163734][T12120] [ 995.174930][T12120] EXT4-fs (loop2): Total free blocks count 0 [ 995.182978][T12120] EXT4-fs (loop2): Free/Dirty block details [ 995.189327][T12120] EXT4-fs (loop2): free_blocks=65280 [ 995.194704][T12120] EXT4-fs (loop2): dirty_blocks=33 [ 995.200076][T12120] EXT4-fs (loop2): Block reservation details [ 995.207160][T12120] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 995.249860][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.568781][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 996.608780][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 997.648792][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 998.688740][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 999.215888][T12162] loop5: detected capacity change from 0 to 22 [ 999.226236][T12162] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 999.728730][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 999.890655][T12162] romfs: bad initial checksum on dev loop5. [ 999.900864][ T8735] udevd[8735]: incorrect romfs checksum on /dev/loop5 [ 1000.769561][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1001.808737][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1002.850306][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1003.507855][T12169] loop0: detected capacity change from 0 to 22 [ 1003.518028][T12169] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1003.628103][T12169] romfs: bad initial checksum on dev loop0. [ 1003.888775][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1004.416425][T12177] macsec0: entered promiscuous mode [ 1004.437427][T12177] macsec0: left promiscuous mode [ 1004.928921][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1005.968753][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1006.710390][T12193] loop0: detected capacity change from 0 to 22 [ 1006.717287][T12193] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1006.727753][T12193] romfs: bad initial checksum on dev loop0. [ 1006.931441][ T8735] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1007.008697][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1007.019259][T12194] loop0: detected capacity change from 0 to 1024 [ 1007.026143][T12194] EXT4-fs: Ignoring removed oldalloc option [ 1007.034121][T12194] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 1007.094005][T12173] loop1: detected capacity change from 0 to 32768 [ 1007.175460][T12173] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1007.175793][T12173] (syz.1.1290,12173,0):ocfs2_initialize_super:2287 ERROR: status = -12 [ 1007.226646][T12173] (syz.1.1290,12173,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 1007.518642][T10072] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1007.730010][T10072] usb 6-1: Using ep0 maxpacket: 8 [ 1007.754079][T10072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.794866][T10072] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1007.824006][T10072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.872874][T10072] usb 6-1: config 0 descriptor?? [ 1008.048695][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1008.523423][T10072] koneplus 0003:1E7D:2E22.0002: ignoring exceeding usage max [ 1008.610988][T10072] koneplus 0003:1E7D:2E22.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 1008.787385][T10072] usb 6-1: USB disconnect, device number 11 [ 1009.088718][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1009.102338][T12213] vivid-000: ================= START STATUS ================= [ 1009.119361][T12213] vivid-000: Test Pattern: 75% Colorbar [ 1009.128822][T12213] vivid-000: Fill Percentage of Frame: 100 [ 1009.147778][T12213] vivid-000: Horizontal Movement: Move Left [ 1009.154260][T12213] vivid-000: Vertical Movement: No Movement [ 1009.161200][T12213] vivid-000: OSD Text Mode: All [ 1009.166140][T12213] vivid-000: Show Border: false [ 1009.172211][T12213] vivid-000: Show Square: false [ 1009.177243][T12213] vivid-000: Sensor Flipped Horizontally: false [ 1009.184265][T12213] vivid-000: Sensor Flipped Vertically: false [ 1009.198731][T12213] vivid-000: Insert SAV Code in Image: false [ 1009.209072][T12213] vivid-000: Insert EAV Code in Image: false [ 1009.218993][T12213] vivid-000: Insert Video Guard Band: false [ 1009.232561][T12213] vivid-000: Reduced Framerate: false [ 1009.238909][T12213] vivid-000: Enable Capture Cropping: true [ 1009.244805][T12213] vivid-000: Enable Capture Composing: true [ 1009.251719][T12213] vivid-000: Enable Capture Scaler: true [ 1009.257468][T12213] vivid-000: Timestamp Source: End of Frame [ 1009.265064][T12213] vivid-000: Colorspace: Rec. 709 [ 1009.271708][T12213] vivid-000: Transfer Function: Default [ 1009.277435][T12213] vivid-000: Y'CbCr Encoding: Default [ 1009.304993][T12213] vivid-000: HSV Encoding: Hue 0-179 [ 1009.316661][T12213] vivid-000: Quantization: Default [ 1009.323652][T12213] vivid-000: Apply Alpha To Red Only: false [ 1009.329908][T12213] vivid-000: Standard Aspect Ratio: 4x3 [ 1009.335996][T12213] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1009.352683][T12213] vivid-000: DV Timings: 640x480p59 inactive [ 1009.361593][T12213] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1009.370898][T12213] vivid-000: Maximum EDID Blocks: 2 [ 1009.376279][T12213] vivid-000: Limited RGB Range (16-235): true [ 1009.382992][T12213] vivid-000: Rx RGB Quantization Range: Automatic [ 1009.390082][T12213] vivid-000: Power Present: 0x00000001 [ 1009.395774][T12213] tpg source WxH: 1280x720 (Luma) [ 1009.401491][T12213] tpg field: 1 [ 1009.405010][T12213] tpg crop: 1280x64@0x0 [ 1009.409939][T12213] tpg compose: 1280x16@0x0 [ 1009.414492][T12213] tpg colorspace: 3 [ 1009.418440][T12213] tpg transfer function: 0/1 [ 1009.424200][T12213] tpg quantization: 0/2 [ 1009.441123][T12213] tpg RGB range: 0/1 [ 1009.447730][T12213] vivid-000: ================== END STATUS ================== [ 1009.608086][T12230] loop5: detected capacity change from 0 to 22 [ 1009.618877][T12230] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1009.784179][T12230] romfs: bad initial checksum on dev loop5. [ 1010.128707][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1011.168712][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1011.951425][ T8735] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1012.033235][T12230] loop5: detected capacity change from 0 to 1024 [ 1012.044172][T12230] EXT4-fs: Ignoring removed oldalloc option [ 1012.051793][T12230] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 1012.112276][ T8735] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1012.208737][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1012.994331][T12242] loop5: detected capacity change from 0 to 32768 [ 1013.021127][T12242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1309 (12242) [ 1013.085802][T12242] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1013.115508][T12242] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1013.135025][T12242] BTRFS info (device loop5): turning on sync discard [ 1013.148666][T12242] BTRFS info (device loop5): doing ref verification [ 1013.165842][T12242] BTRFS info (device loop5): disabling tree log [ 1013.177894][T12242] BTRFS info (device loop5): enabling ssd optimizations [ 1013.196637][T12242] BTRFS info (device loop5): using spread ssd allocation scheme [ 1013.216772][T12242] BTRFS info (device loop5): not using ssd optimizations [ 1013.227826][T12242] BTRFS info (device loop5): not using spread ssd allocation scheme [ 1013.248747][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1013.256176][T12242] BTRFS info (device loop5): using free space tree [ 1013.861495][ T8428] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1014.288705][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1014.514608][T12265] loop5: detected capacity change from 0 to 1024 [ 1014.537915][T12265] hfsplus: unable to find HFS+ superblock [ 1015.090637][T12269] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 1015.136961][T12269] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1015.328800][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1015.383864][ T28] audit: type=1400 audit(1751720791.682:199): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12267 comm="syz.1.1313" [ 1016.368777][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1016.718589][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'. [ 1016.868826][T12277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 1017.408728][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1018.448726][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1019.068660][T12296] loop2: detected capacity change from 0 to 22 [ 1019.079071][T12296] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1019.468618][T12296] romfs: bad initial checksum on dev loop2. [ 1019.488773][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1020.305401][ T8735] udevd[8735]: incorrect romfs checksum on /dev/loop2 [ 1020.528713][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1020.894996][T12303] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 1020.922907][T12303] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1021.012219][ T28] audit: type=1400 audit(1751720797.312:200): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12302 comm="syz.5.1323" [ 1021.058745][ T8] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1021.568670][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1022.312134][ T8] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 1022.608570][ T8] usb 3-1: config 0 has no interface number 0 [ 1022.618758][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1022.631579][ T8] usb 3-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1022.646775][ T8] usb 3-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 1022.677164][ T8] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1022.696098][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.712973][ T8] usb 3-1: Product: syz [ 1022.722334][ T8] usb 3-1: Manufacturer: syz [ 1022.738568][ T8] usb 3-1: SerialNumber: syz [ 1022.760255][ T8] usb 3-1: config 0 descriptor?? [ 1022.786933][T12299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1022.807159][T12299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1023.093180][T12299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1023.108980][T12299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1023.170263][ T28] audit: type=1326 audit(1751720799.472:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f070292ab19 code=0x7ffc0000 [ 1023.232383][ T28] audit: type=1326 audit(1751720799.472:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070298e929 code=0x7ffc0000 [ 1023.308702][ T28] audit: type=1326 audit(1751720799.472:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070298e929 code=0x7ffc0000 [ 1023.420765][T12320] loop0: detected capacity change from 0 to 22 [ 1023.432324][T12320] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1023.648768][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1024.688734][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1025.728720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1025.995176][T12320] romfs: bad initial checksum on dev loop0. [ 1026.060013][ T28] audit: type=1326 audit(1751720799.492:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f070292ab19 code=0x7ffc0000 [ 1026.107253][ T8726] udevd[8726]: incorrect romfs checksum on /dev/loop0 [ 1026.195319][ T28] audit: type=1326 audit(1751720799.492:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f070292ab19 code=0x7ffc0000 [ 1026.280031][ T8] asix 3-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1026.305583][ T8] asix: probe of 3-1:0.239 failed with error -71 [ 1026.346428][ T8] usb 3-1: USB disconnect, device number 13 [ 1026.354815][ T28] audit: type=1326 audit(1751720799.492:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f070292ab19 code=0x7ffc0000 [ 1026.477358][ T28] audit: type=1326 audit(1751720799.492:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f070292ab19 code=0x7ffc0000 [ 1026.649859][ T28] audit: type=1326 audit(1751720799.492:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f070292ab19 code=0x7ffc0000 [ 1026.768724][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1026.918704][ T28] audit: type=1326 audit(1751720799.492:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f070292ab19 code=0x7ffc0000 [ 1026.969054][ T28] audit: type=1326 audit(1751720799.492:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f070292ab19 code=0x7ffc0000 [ 1027.019144][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1027.238708][ T28] audit: type=1326 audit(1751720799.492:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f070292ab19 code=0x7ffc0000 [ 1027.808807][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1027.943884][ T28] audit: type=1326 audit(1751720799.492:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f070292ab19 code=0x7ffc0000 [ 1027.999037][ T28] audit: type=1326 audit(1751720799.492:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.1.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f070292ab19 code=0x7ffc0000 [ 1028.030536][T12338] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 1028.037897][T12338] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1028.323959][ T23] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1028.848765][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1028.930993][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.995013][T12325] loop0: detected capacity change from 0 to 32768 [ 1029.010087][T12325] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1330 (12325) [ 1029.058306][ T23] usb 2-1: Product: syz [ 1029.083986][T12325] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1029.095341][ T23] usb 2-1: Manufacturer: syz [ 1029.114204][ T23] usb 2-1: SerialNumber: syz [ 1029.122860][T12325] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1029.132915][T12325] BTRFS info (device loop0): setting nodatacow, compression disabled [ 1029.141224][T12325] BTRFS info (device loop0): setting datacow [ 1029.147268][T12325] BTRFS info (device loop0): doing ref verification [ 1029.154866][T12325] BTRFS info (device loop0): force clearing of disk cache [ 1029.162603][T12325] BTRFS info (device loop0): turning off barriers [ 1029.163643][ T23] usb 2-1: config 0 descriptor?? [ 1029.177983][T12325] BTRFS info (device loop0): enabling ssd optimizations [ 1029.185234][T12325] BTRFS info (device loop0): using spread ssd allocation scheme [ 1029.205400][T12325] BTRFS info (device loop0): not using ssd optimizations [ 1029.394457][T12325] BTRFS info (device loop0): not using spread ssd allocation scheme [ 1029.470069][T12325] BTRFS info (device loop0): using free space tree [ 1029.579037][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1029.727034][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1029.756102][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1029.776537][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1029.805392][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1029.822122][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1029.836875][ T23] usb 2-1: Firmware: major: 217, minor: 21, hardware type: ATUSB (2) [ 1029.838333][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1029.861661][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1029.888709][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1029.920228][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1029.922975][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1030.020799][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1030.068093][ T23] usb 2-1: failed to fetch extended address, random address set [ 1030.190996][T12325] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1030.196731][T12325] BTRFS error (device loop0): open_ctree failed: -12 [ 1030.439128][ T23] usb 2-1: USB disconnect, device number 17 [ 1030.938743][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1031.968775][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1032.058690][ T5853] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1032.259429][ T5853] usb 6-1: Using ep0 maxpacket: 32 [ 1032.278260][ T5853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.309683][T12379] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 1032.318849][ T5853] usb 6-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1032.328817][T12379] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1032.346101][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.457676][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 1032.457749][ T28] audit: type=1400 audit(1751720808.752:269): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12378 comm="syz.1.1344" [ 1033.008720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1033.109365][ T5853] usb 6-1: config 0 descriptor?? [ 1033.117155][ T5853] usb 6-1: bad CDC descriptors [ 1033.375681][ T23] usb 6-1: USB disconnect, device number 12 [ 1034.048718][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1035.088756][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1035.618903][T10072] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1035.802270][T10072] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1035.820546][T10072] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1035.859764][T10072] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1035.879040][T10072] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1035.909688][T10072] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1035.932926][T10072] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1035.944502][T10072] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1035.974173][T10072] usb 6-1: Product: syz [ 1035.992351][T10072] usb 6-1: Manufacturer: syz [ 1036.034238][T10072] cdc_wdm 6-1:1.0: skipping garbage [ 1036.065128][T10072] cdc_wdm 6-1:1.0: skipping garbage [ 1036.098959][T10072] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1036.104960][T10072] cdc_wdm 6-1:1.0: Unknown control protocol [ 1036.128840][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1036.350054][ T5793] usb 6-1: USB disconnect, device number 13 [ 1036.428683][T10072] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1036.608931][T10072] usb 2-1: Using ep0 maxpacket: 32 [ 1036.620570][T10072] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1036.658147][T10072] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1036.671022][T10072] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1036.688635][T10072] usb 2-1: Product: syz [ 1036.692908][T10072] usb 2-1: Manufacturer: syz [ 1036.697543][T10072] usb 2-1: SerialNumber: syz [ 1036.719257][T10072] usb 2-1: config 0 descriptor?? [ 1036.739682][T12421] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1036.769934][T10072] hub 2-1:0.0: bad descriptor, ignoring hub [ 1036.775916][T10072] hub: probe of 2-1:0.0 failed with error -5 [ 1037.158910][T10072] usb 2-1: USB disconnect, device number 18 [ 1037.178726][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1038.208769][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1038.388681][T10072] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1038.433885][T12417] loop2: detected capacity change from 0 to 32768 [ 1038.588888][T10072] usb 2-1: Using ep0 maxpacket: 16 [ 1038.622112][T10072] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1038.639968][T10072] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1038.687509][T10072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.725728][T10072] usb 2-1: config 0 descriptor?? [ 1038.918930][T12417] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 1039.146348][T10072] hid (null): unknown global tag 0xd [ 1039.158702][T10072] hid (null): unknown global tag 0xa7 [ 1039.179035][T10072] hid (null): global environment stack underflow [ 1039.196889][ T5784] ocfs2: Unmounting device (7,2) on (node local) [ 1039.226787][T10072] hid (null): unknown global tag 0xc [ 1039.247082][T10072] hid (null): invalid report_count -1607100 [ 1039.253313][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1039.376330][T10072] usb 2-1: USB disconnect, device number 19 [ 1040.288674][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1040.409930][T12438] loop0: detected capacity change from 0 to 32768 [ 1040.454154][T12438] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1363 (12438) [ 1040.538705][T10072] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1040.662044][T12438] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1040.703119][T12438] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1040.758775][T12438] BTRFS info (device loop0): turning on sync discard [ 1040.758859][ T23] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1040.773249][T12438] BTRFS info (device loop0): doing ref verification [ 1040.780120][T10072] usb 2-1: Using ep0 maxpacket: 8 [ 1040.797101][T10072] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1040.808598][T10072] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1040.828637][T12438] BTRFS info (device loop0): disabling tree log [ 1040.843619][T10072] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1040.858627][T12438] BTRFS info (device loop0): enabling ssd optimizations [ 1040.885836][T10072] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1040.899198][T12438] BTRFS info (device loop0): using spread ssd allocation scheme [ 1040.906884][T12438] BTRFS info (device loop0): not using ssd optimizations [ 1040.918842][T10072] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1040.953128][T10072] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1040.968698][T12438] BTRFS info (device loop0): not using spread ssd allocation scheme [ 1040.988710][T10072] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1041.022158][T12438] BTRFS info (device loop0): using free space tree [ 1041.058705][T10072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.087667][T12438] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1041.110102][ T23] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1041.138866][ T23] usb 6-1: config 1 has no interface number 0 [ 1041.158742][ T23] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1041.209121][T12438] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1041.223334][T12438] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1041.224316][ T23] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1041.269905][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.277973][ T23] usb 6-1: Product: syz [ 1041.338729][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1041.338774][ T23] usb 6-1: Manufacturer: syz [ 1041.348687][T10072] usb 2-1: GET_CAPABILITIES returned 0 [ 1041.357028][T12438] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1041.357904][T12438] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1041.376672][T10072] usbtmc 2-1:16.0: can't read capabilities [ 1041.390563][ T23] usb 6-1: SerialNumber: syz [ 1041.491098][T12438] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1041.500153][T12438] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1041.633278][T12438] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1041.642512][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1041.722889][T12438] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1041.729167][T12452] usbtmc 2-1:16.0: Unable to send data, error -71 [ 1041.753967][T12438] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1041.839527][T12438] BTRFS error (device loop0): open_ctree failed: -12 [ 1041.897532][T10107] usb 2-1: USB disconnect, device number 20 [ 1042.242203][ T8735] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (8735) [ 1042.368700][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1042.464735][ T23] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1042.511775][ T23] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1042.599093][ T23] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1042.658242][T12475] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 1042.701020][ T23] aqc111 6-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 7a:3a:b9:a8:18:6a [ 1042.776986][T12478] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1042.802859][ T23] usb 6-1: USB disconnect, device number 14 [ 1043.409281][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1044.448706][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1044.734749][ T23] aqc111 6-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1045.003199][ T28] audit: type=1400 audit(1751720821.262:270): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12474 comm="syz.0.1372" [ 1045.199752][ T23] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1045.209325][ T23] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1045.219131][ T23] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1045.488697][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1045.608462][T12489] loop0: detected capacity change from 0 to 256 [ 1045.699796][T12489] exfat: Deprecated parameter 'namecase' [ 1046.160880][T12489] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1046.528684][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1047.142416][T12516] hsr0: entered allmulticast mode [ 1047.568738][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1048.068725][T12526] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 1048.115622][T12510] loop0: detected capacity change from 0 to 40427 [ 1048.157836][T12526] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1048.608674][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1048.842879][ T28] audit: type=1400 audit(1751720824.562:271): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12525 comm="syz.1.1386" [ 1048.868769][T12510] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 1048.877197][T12510] F2FS-fs (loop0): Image doesn't support compression [ 1048.974056][T12510] F2FS-fs (loop0): Image doesn't support compression [ 1049.008896][T12510] F2FS-fs (loop0): invalid crc value [ 1049.021912][T12510] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1049.099798][T12510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1049.144956][ T28] audit: type=1800 audit(1751720825.432:272): pid=12510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1380" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 1049.241454][ T5785] syz-executor: attempt to access beyond end of device [ 1049.241454][ T5785] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1049.294932][ T5785] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1049.648692][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1050.688733][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1051.728711][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1052.055376][T12559] loop2: detected capacity change from 0 to 4096 [ 1052.114171][T12566] loop0: detected capacity change from 0 to 512 [ 1052.143576][T12566] EXT4-fs: Ignoring removed mblk_io_submit option [ 1052.194381][T12566] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.1395: corrupted in-inode xattr: overlapping e_value [ 1052.220198][T12566] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1395: couldn't read orphan inode 15 (err -117) [ 1052.284550][T12559] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1052.322469][T12566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.468430][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.528443][T12559] ntfs3: loop2: Failed to load $Extend (-22). [ 1052.534781][T12559] ntfs3: loop2: Failed to initialize $Extend. [ 1052.768724][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1053.808694][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1054.848689][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1055.000603][T12588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1400'. [ 1055.011371][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.367141][T12588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1400'. [ 1055.386728][T12589] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1400'. [ 1055.400273][T12583] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1400'. [ 1055.888698][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1055.904839][T12605] binder: 12604:12605 ioctl 400c620e 200000000000 returned -22 [ 1056.225588][T12612] loop2: detected capacity change from 0 to 22 [ 1056.236063][T12612] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1056.347491][T12612] romfs: bad initial checksum on dev loop2. [ 1056.928699][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1057.272251][ T8735] udevd[8735]: incorrect romfs checksum on /dev/loop2 [ 1057.968677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1058.219529][T12626] loop0: detected capacity change from 0 to 8192 [ 1058.249398][T12626] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1058.273995][T12626] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1058.339027][T12626] REISERFS (device loop0): using ordered data mode [ 1058.363133][T12626] reiserfs: using flush barriers [ 1058.398651][T12626] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1058.460388][T12626] REISERFS (device loop0): checking transaction log (loop0) [ 1058.701592][T12626] REISERFS (device loop0): Using tea hash to sort names [ 1058.719101][T12626] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1059.008687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1059.193610][T12651] loop0: detected capacity change from 0 to 22 [ 1059.203822][T12651] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1059.288267][T12651] romfs: bad initial checksum on dev loop0. [ 1060.048683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1061.088813][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1062.128728][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1062.658684][T12654] loop2: detected capacity change from 0 to 32768 [ 1063.168689][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1063.381778][T12654] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop2": -EINTR [ 1064.208664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1064.523915][T12683] loop2: detected capacity change from 0 to 32768 [ 1064.541329][T12683] XFS: ikeep mount option is deprecated. [ 1064.565889][T12684] loop0: detected capacity change from 0 to 32768 [ 1064.596800][T12680] loop5: detected capacity change from 0 to 32768 [ 1064.616120][T12684] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1064.630260][T12680] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1431 (12680) [ 1064.643172][ T3487] (kworker/u4:8,3487,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 1064.651477][T12683] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1064.727702][T12680] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1064.738625][ T23] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1064.772650][T12680] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1064.813386][T12680] BTRFS info (device loop5): turning on sync discard [ 1064.845726][T12680] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1064.857074][T12680] BTRFS info (device loop5): max_inline at 0 [ 1064.872248][T12680] BTRFS info (device loop5): enabling disk space caching [ 1064.888582][T12680] BTRFS info (device loop5): turning on flush-on-commit [ 1064.895597][T12680] BTRFS info (device loop5): setting datasum, datacow enabled [ 1064.912155][T12684] (syz.0.1432,12684,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 1064.922827][T12684] (syz.0.1432,12684,0):ocfs2_orphan_del:2382 ERROR: status = -117 [ 1064.931437][T12680] BTRFS info (device loop5): force clearing of disk cache [ 1064.938852][T12684] (syz.0.1432,12684,0):ocfs2_orphan_del:2404 ERROR: status = -117 [ 1064.940524][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 1064.946692][T12684] (syz.0.1432,12684,0):ocfs2_remove_inode:676 ERROR: status = -117 [ 1064.951979][T12680] BTRFS info (device loop5): enabling ssd optimizations [ 1064.960334][T12684] (syz.0.1432,12684,0):ocfs2_wipe_inode:821 ERROR: status = -117 [ 1064.980337][T12684] (syz.0.1432,12684,0):ocfs2_delete_inode:1082 ERROR: status = -117 [ 1064.985267][T12683] XFS (loop2): Ending clean mount [ 1064.999768][T12680] BTRFS info (device loop5): turning off barriers [ 1065.008057][ T23] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1065.018370][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1065.023126][T12680] BTRFS info (device loop5): max_inline at 4096 [ 1065.034975][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1065.047067][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1065.057914][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.058272][T12680] BTRFS info (device loop5): disk space caching is enabled [ 1065.073264][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1065.088090][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.090481][T12683] XFS (loop2): Quotacheck needed: Please wait. [ 1065.195505][ T5785] (syz-executor,5785,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 1065.210098][ T5785] (syz-executor,5785,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 1065.227729][T12683] XFS (loop2): Quotacheck: Done. [ 1065.235778][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 1065.248710][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1065.313191][T12680] BTRFS info (device loop5): rebuilding free space tree [ 1065.326022][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 1065.351011][ T23] usbtmc 2-1:16.0: can't read capabilities [ 1065.420239][T12680] BTRFS info (device loop5): disabling free space tree [ 1065.437211][T12680] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1065.447578][T12680] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1065.568056][ T5784] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1065.604848][ T8428] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1065.666921][T12691] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 1065.671775][ T5853] usb 2-1: USB disconnect, device number 21 [ 1066.288663][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1067.328668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1068.368655][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1069.003997][T12746] loop0: detected capacity change from 0 to 32768 [ 1069.037697][T12746] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.1445 (12746) [ 1069.171018][T12746] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1069.204464][T12746] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1069.215045][T12746] BTRFS info (device loop0): setting nodatacow, compression disabled [ 1069.224621][T12746] BTRFS info (device loop0): turning on flush-on-commit [ 1069.232859][T12746] BTRFS info (device loop0): using free space tree [ 1069.408674][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1069.546672][T12746] BTRFS info (device loop0): enabling ssd optimizations [ 1069.678736][T12746] BTRFS info (device loop0): auto enabling async discard [ 1070.448687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1070.910335][ T5785] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1071.488662][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1072.528688][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1073.568683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1074.558285][T12843] netlink: 'syz.2.1468': attribute type 9 has an invalid length. [ 1074.608684][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1074.728938][T12843] netlink: 'syz.2.1468': attribute type 9 has an invalid length. [ 1074.737910][T12838] loop5: detected capacity change from 0 to 32768 [ 1074.769404][T12838] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1467 (12838) [ 1074.834913][T12838] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1074.858716][T12838] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1074.898883][T12838] BTRFS info (device loop5): allowing degraded mounts [ 1074.905752][T12838] BTRFS info (device loop5): setting nodatasum [ 1074.970314][T12838] BTRFS info (device loop5): disabling tree log [ 1074.984840][T12838] BTRFS info (device loop5): using free space tree [ 1075.090387][T12838] BTRFS info (device loop5): auto enabling async discard [ 1075.250109][ T28] audit: type=1800 audit(1751720851.552:273): pid=12838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1467" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1075.334081][ T8428] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1075.648690][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1075.701176][T12876] loop2: detected capacity change from 0 to 1024 [ 1075.723498][ T8735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop5 scanned by udevd (8735) [ 1075.755549][T12876] hfsplus: unable to find HFS+ superblock [ 1075.902535][ T8726] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1076.688709][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1077.177455][T12889] loop0: detected capacity change from 0 to 22 [ 1077.187788][T12889] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1077.219694][T12889] romfs: bad initial checksum on dev loop0. [ 1077.728899][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1078.768680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1079.808643][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1080.002638][ T8687] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1080.848661][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1081.888649][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1082.928663][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1083.968707][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1084.072933][T12968] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 1084.108729][T12968] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1084.205168][ T28] audit: type=1400 audit(1751720860.502:274): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12967 comm="syz.2.1500" [ 1085.008672][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1085.999943][T12979] loop2: detected capacity change from 0 to 131072 [ 1086.058687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1086.134615][T12979] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1086.364162][T12979] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1086.416328][T12979] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 1086.433129][ T28] audit: type=1800 audit(1751720862.732:275): pid=12979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1504" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 1087.088659][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1087.754229][T12999] loop5: detected capacity change from 0 to 512 [ 1087.761798][T12999] EXT4-fs: Ignoring removed orlov option [ 1087.809445][T12999] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1087.820716][T12999] EXT4-fs error (device loop5): ext4_find_extent:936: inode #4: comm syz.5.1510: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 1087.853658][T12999] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 1087.865224][T12999] EXT4-fs warning (device loop5): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1087.881964][T12999] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1087.890043][T12999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1088.080562][ T8428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.128834][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1088.588829][T13008] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 1088.606260][T13008] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1088.807400][ T28] audit: type=1400 audit(1751720865.092:276): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=13007 comm="syz.0.1512" [ 1089.178627][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1089.584844][T13013] loop5: detected capacity change from 0 to 22 [ 1089.595115][T13013] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1089.612611][T13013] romfs: bad initial checksum on dev loop5. [ 1090.208672][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1091.248681][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1091.828626][ T8735] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1092.105247][T13019] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1092.288755][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1093.328692][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1094.284515][T13043] lo speed is unknown, defaulting to 1000 [ 1094.290674][T13043] lo speed is unknown, defaulting to 1000 [ 1094.296885][T13043] lo speed is unknown, defaulting to 1000 [ 1094.313024][T13043] infiniband syþ: RDMA CMA: cma_listen_on_dev, error -98 [ 1094.337383][T13043] lo speed is unknown, defaulting to 1000 [ 1094.344830][T13043] lo speed is unknown, defaulting to 1000 [ 1094.351886][T13043] lo speed is unknown, defaulting to 1000 [ 1094.359119][T13043] lo speed is unknown, defaulting to 1000 [ 1094.368708][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1094.400736][T10107] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1094.621804][T10107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.650300][T10107] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1094.659790][T10107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.671516][T10107] usb 2-1: config 0 descriptor?? [ 1095.108890][T10107] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 1095.156852][T10107] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input13 [ 1095.408682][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1095.449563][T10107] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1095.618285][T13061] macsec0: entered promiscuous mode [ 1095.618691][T10072] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1095.649919][T13061] macsec0: left promiscuous mode [ 1095.664053][T10107] usb 2-1: USB disconnect, device number 22 [ 1095.681485][T13059] fido_id[13059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1095.761034][T13065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1527'. [ 1095.847246][T10072] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.879441][T10072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.919559][T10072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.946860][T10072] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1096.069707][T10072] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1096.094839][T10072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.109938][T10072] usb 3-1: config 0 descriptor?? [ 1096.448671][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1096.930034][T13058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.013491][T13058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.269637][T10072] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 1097.313255][T10072] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input14 [ 1097.488378][T10072] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1097.500627][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1097.578324][T10072] usb 3-1: USB disconnect, device number 14 [ 1097.755187][T13083] fido_id[13083]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1097.893082][T13075] loop5: detected capacity change from 0 to 32768 [ 1097.908360][T13075] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.1530 (13075) [ 1097.932970][T13075] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1097.944149][T13075] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1097.970792][T13075] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1097.981556][T13075] BTRFS info (device loop5): turning on flush-on-commit [ 1097.988900][T13075] BTRFS info (device loop5): using free space tree [ 1098.215500][T13075] BTRFS info (device loop5): enabling ssd optimizations [ 1098.222713][T13075] BTRFS info (device loop5): auto enabling async discard [ 1098.528745][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1098.756890][T13109] siw: device registration error -23 [ 1098.979664][ T8428] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1099.573932][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1100.238729][ T54] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1100.504078][ T54] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1100.551955][ T54] usb 6-1: not running at top speed; connect to a high speed hub [ 1100.608679][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1100.640483][ T54] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1100.674154][ T54] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1100.727152][ T54] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1100.751019][ T54] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1100.770362][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.790162][ T54] usb 6-1: Product: syz [ 1100.794399][ T54] usb 6-1: Manufacturer: syz [ 1100.808915][ T54] usb 6-1: SerialNumber: syz [ 1101.648687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1102.688679][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1102.999976][ T54] usb 6-1: 0:2 : does not exist [ 1103.052720][ T54] usb 6-1: USB disconnect, device number 15 [ 1103.630163][T13165] trusted_key: syz.5.1553 sent an empty control message without MSG_MORE. [ 1103.729079][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1103.741833][ T8735] udevd[8735]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1103.915545][T13175] loop5: detected capacity change from 0 to 256 [ 1104.038058][T13175] 9pnet: p9_errstr2errno: server reported unknown error aaaaaa [ 1104.397108][T13185] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:5 [ 1104.558945][ T28] audit: type=1400 audit(1751720880.862:277): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=13184 comm="syz.2.1560" [ 1104.768651][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1105.808666][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1105.898682][T10072] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1106.848690][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1107.888637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1108.928688][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1109.968693][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1111.008788][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1112.048648][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1113.088729][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1114.128677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1115.168659][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1116.208683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1117.248664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1118.288662][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1119.328642][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1120.368641][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1121.408689][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1122.448647][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1123.488619][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1124.528681][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1125.568640][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1126.608649][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1127.648657][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1128.688654][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1129.728645][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1130.768644][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1131.808629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1132.848678][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1133.888656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1134.928655][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1135.968661][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1137.008687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1138.048636][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1139.088642][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1140.128653][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1141.168642][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1142.208635][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1143.248655][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1144.288637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1145.328692][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1146.368636][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1147.408632][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1148.448639][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1149.488630][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1150.528700][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1151.568652][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1152.608614][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1153.648626][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1154.688644][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1155.728621][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1156.768622][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1157.808671][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1158.848627][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1159.888661][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1160.928675][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1161.968650][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1163.008607][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1164.048606][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1165.088605][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1166.128683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1167.168601][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1168.208612][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1169.248609][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1170.288628][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1171.328637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1172.368602][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1173.408621][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1174.448630][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1175.488617][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1176.528598][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1177.575289][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1178.608644][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1179.648614][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1180.688603][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1181.728629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1182.768605][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1183.808635][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1184.848601][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1185.888608][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1186.928673][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1187.968603][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1189.008609][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1190.048617][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1191.088606][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1192.128620][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1193.168705][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1194.208584][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1195.248618][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1196.288598][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1197.328601][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1198.368651][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1199.408594][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1200.448601][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1201.488610][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1202.528581][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1203.568593][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1204.608588][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1205.648581][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1206.688580][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1207.728608][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1208.768609][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1209.808586][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1210.848589][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1211.888598][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1212.928593][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1213.968603][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1215.008580][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1216.048576][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1217.088581][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1218.128618][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1219.168569][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1220.208614][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1221.248596][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1222.288573][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1223.328597][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1224.368586][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1225.408611][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1226.448587][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1227.488580][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1228.528584][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1229.568587][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1230.608563][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1231.648580][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1232.688575][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1233.728592][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1234.768598][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1235.808644][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1236.848580][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1237.888601][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1238.928576][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1239.968563][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1241.008569][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1242.048565][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1243.088581][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1244.130496][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1244.138464][ C1] ------------[ cut here ]------------ [ 1244.146302][ C1] WARNING: CPU: 1 PID: 13188 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.156935][ C1] Modules linked in: [ 1244.160846][ C1] CPU: 1 PID: 13188 Comm: syz.5.1561 Not tainted 6.6.95-syzkaller #0 [ 1244.168917][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1244.178977][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.185327][ C1] Code: ff ff ff 48 c7 c7 a0 e4 ee 96 be 04 00 00 00 e8 5a 21 6e 00 48 89 df b8 01 00 00 00 87 05 cc be 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff c0 4f d3 8c 74 47 48 c7 c0 dc b2 4a 8e 48 c1 e8 03 [ 1244.204943][ C1] RSP: 0018:ffffc900001f0c58 EFLAGS: 00010046 [ 1244.211015][ C1] RAX: 0000000000000000 RBX: ffffffff8cd34fc0 RCX: ffffffff817025c6 [ 1244.218994][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd34fc0 [ 1244.227063][ C1] RBP: ffffc900001f0ed0 R08: 0000000000000003 R09: 0000000000000004 [ 1244.235071][ C1] R10: dffffc0000000000 R11: fffffbfff2dddc94 R12: 0000000000002904 [ 1244.243077][ C1] R13: 1ffff110171e7a6a R14: 0000000000000a06 R15: dffffc0000000000 [ 1244.251061][ C1] FS: 00007fe6403406c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1244.260006][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1244.266603][ C1] CR2: 00007fbb5bf7f2d8 CR3: 000000001ebce000 CR4: 00000000003506e0 [ 1244.274588][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1244.282591][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1244.290590][ C1] Call Trace: [ 1244.293893][ C1] [ 1244.296759][ C1] rcu_core+0x612/0x1720 [ 1244.301018][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1244.306407][ C1] ? ktime_get+0x7f/0x280 [ 1244.310746][ C1] ? ktime_get+0x7f/0x280 [ 1244.315099][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1244.320332][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1244.325543][ C1] ? sched_clock+0x3f/0x60 [ 1244.329965][ C1] ? sched_clock_cpu+0x75/0x430 [ 1244.334837][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1244.340861][ C1] ? lock_chain_count+0x20/0x20 [ 1244.345739][ C1] ? lapic_next_event+0x11/0x20 [ 1244.350728][ C1] handle_softirqs+0x280/0x820 [ 1244.355515][ C1] ? do_softirq+0xed/0x180 [ 1244.359943][ C1] ? do_softirq+0x180/0x180 [ 1244.364459][ C1] ? fpu__restore_sig+0x3ce/0x10e0 [ 1244.369585][ C1] do_softirq+0xed/0x180 [ 1244.373839][ C1] [ 1244.376795][ C1] [ 1244.379747][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1244.385131][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 1244.391119][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1244.396324][ C1] ? rcu_is_watching+0x15/0xb0 [ 1244.401097][ C1] __local_bh_enable_ip+0x178/0x1c0 [ 1244.406304][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1244.411161][ C1] ? rcu_is_watching+0x15/0xb0 [ 1244.415958][ C1] fpu__restore_sig+0x920/0x10e0 [ 1244.420909][ C1] ? fpu__restore_sig+0x3ce/0x10e0 [ 1244.426052][ C1] ? copy_fpstate_to_sigframe+0xbe0/0xbe0 [ 1244.431793][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1244.436849][ C1] ? __might_fault+0xc6/0x120 [ 1244.441587][ C1] ? __might_fault+0xaa/0x120 [ 1244.446282][ C1] __ia32_sys_rt_sigreturn+0x65d/0x7b0 [ 1244.451765][ C1] ? x64_setup_rt_frame+0xcd0/0xcd0 [ 1244.456996][ C1] ? lock_chain_count+0x20/0x20 [ 1244.461946][ C1] ? trace_sys_enter+0x1f/0x80 [ 1244.466726][ C1] do_syscall_64+0x55/0xb0 [ 1244.471153][ C1] ? clear_bhb_loop+0x40/0x90 [ 1244.475850][ C1] ? clear_bhb_loop+0x40/0x90 [ 1244.480539][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1244.486437][ C1] RIP: 0033:0x7fe63f58e929 [ 1244.490884][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.510497][ C1] RSP: 002b:00007fe6403400e8 EFLAGS: 00000246 [ 1244.516570][ C1] RAX: fffffffffffffffc RBX: 00007fe63f7b5fa8 RCX: 00007fe63f58e929 [ 1244.524547][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe63f7b5fa8 [ 1244.532525][ C1] RBP: 00007fe63f7b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.540499][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe63f7b5fac [ 1244.548475][ C1] R13: 0000000000000000 R14: 00007ffd14d38820 R15: 00007ffd14d38908 [ 1244.556458][ C1] [ 1244.559484][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1244.566760][ C1] CPU: 1 PID: 13188 Comm: syz.5.1561 Not tainted 6.6.95-syzkaller #0 [ 1244.574825][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1244.584884][ C1] Call Trace: [ 1244.588161][ C1] [ 1244.591009][ C1] dump_stack_lvl+0x16c/0x230 [ 1244.595705][ C1] ? show_regs_print_info+0x20/0x20 [ 1244.600909][ C1] ? load_image+0x3b0/0x3b0 [ 1244.605422][ C1] panic+0x2c0/0x710 [ 1244.609322][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1244.613837][ C1] __warn+0x2e0/0x470 [ 1244.617819][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.623546][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.629271][ C1] report_bug+0x2be/0x4f0 [ 1244.633611][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.639339][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.645065][ C1] ? rcu_check_gp_start_stall+0x2de/0x460 [ 1244.650808][ C1] handle_bug+0xcf/0x120 [ 1244.655059][ C1] exc_invalid_op+0x1a/0x50 [ 1244.659571][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1244.664434][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.670787][ C1] Code: ff ff ff 48 c7 c7 a0 e4 ee 96 be 04 00 00 00 e8 5a 21 6e 00 48 89 df b8 01 00 00 00 87 05 cc be 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff c0 4f d3 8c 74 47 48 c7 c0 dc b2 4a 8e 48 c1 e8 03 [ 1244.690391][ C1] RSP: 0018:ffffc900001f0c58 EFLAGS: 00010046 [ 1244.696456][ C1] RAX: 0000000000000000 RBX: ffffffff8cd34fc0 RCX: ffffffff817025c6 [ 1244.704429][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd34fc0 [ 1244.712397][ C1] RBP: ffffc900001f0ed0 R08: 0000000000000003 R09: 0000000000000004 [ 1244.720367][ C1] R10: dffffc0000000000 R11: fffffbfff2dddc94 R12: 0000000000002904 [ 1244.728337][ C1] R13: 1ffff110171e7a6a R14: 0000000000000a06 R15: dffffc0000000000 [ 1244.736315][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1244.742049][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1244.747775][ C1] rcu_core+0x612/0x1720 [ 1244.752019][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1244.757050][ C1] ? ktime_get+0x7f/0x280 [ 1244.761382][ C1] ? ktime_get+0x7f/0x280 [ 1244.765716][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1244.770920][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1244.776118][ C1] ? sched_clock+0x3f/0x60 [ 1244.780535][ C1] ? sched_clock_cpu+0x75/0x430 [ 1244.785398][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1244.791387][ C1] ? lock_chain_count+0x20/0x20 [ 1244.796241][ C1] ? lapic_next_event+0x11/0x20 [ 1244.801104][ C1] handle_softirqs+0x280/0x820 [ 1244.805876][ C1] ? do_softirq+0xed/0x180 [ 1244.810297][ C1] ? do_softirq+0x180/0x180 [ 1244.814805][ C1] ? fpu__restore_sig+0x3ce/0x10e0 [ 1244.819930][ C1] do_softirq+0xed/0x180 [ 1244.824176][ C1] [ 1244.827109][ C1] [ 1244.830039][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1244.835416][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 1244.841399][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1244.846604][ C1] ? rcu_is_watching+0x15/0xb0 [ 1244.851379][ C1] __local_bh_enable_ip+0x178/0x1c0 [ 1244.856583][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1244.861438][ C1] ? rcu_is_watching+0x15/0xb0 [ 1244.866212][ C1] fpu__restore_sig+0x920/0x10e0 [ 1244.871163][ C1] ? fpu__restore_sig+0x3ce/0x10e0 [ 1244.876283][ C1] ? copy_fpstate_to_sigframe+0xbe0/0xbe0 [ 1244.882023][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1244.887057][ C1] ? __might_fault+0xc6/0x120 [ 1244.891766][ C1] ? __might_fault+0xaa/0x120 [ 1244.896480][ C1] __ia32_sys_rt_sigreturn+0x65d/0x7b0 [ 1244.901988][ C1] ? x64_setup_rt_frame+0xcd0/0xcd0 [ 1244.907234][ C1] ? lock_chain_count+0x20/0x20 [ 1244.912151][ C1] ? trace_sys_enter+0x1f/0x80 [ 1244.916941][ C1] do_syscall_64+0x55/0xb0 [ 1244.921383][ C1] ? clear_bhb_loop+0x40/0x90 [ 1244.926074][ C1] ? clear_bhb_loop+0x40/0x90 [ 1244.930765][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1244.936693][ C1] RIP: 0033:0x7fe63f58e929 [ 1244.941120][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.960739][ C1] RSP: 002b:00007fe6403400e8 EFLAGS: 00000246 [ 1244.966839][ C1] RAX: fffffffffffffffc RBX: 00007fe63f7b5fa8 RCX: 00007fe63f58e929 [ 1244.974828][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe63f7b5fa8 [ 1244.982814][ C1] RBP: 00007fe63f7b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.990803][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe63f7b5fac [ 1244.998785][ C1] R13: 0000000000000000 R14: 00007ffd14d38820 R15: 00007ffd14d38908 [ 1245.006777][ C1] [ 1246.126192][ C1] Shutting down cpus with NMI [ 1246.131280][ C1] Kernel Offset: disabled [ 1246.136514][ C1] Rebooting in 86400 seconds..