last executing test programs: 8m52.832417178s ago: executing program 0 (id=41): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) exit(0x200020000ffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 8m51.867833432s ago: executing program 0 (id=51): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x1) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) splice(r0, 0x0, r3, 0x0, 0xcc0, 0xc) 8m51.806308374s ago: executing program 0 (id=53): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x8, 0x7, 0x370e, 0x120002, 0x2, 0x6de, 0x1, 0x8000000000000001, 0x2, 0x2, 0x4000000101, 0x100, 0x1], 0xffff1000, 0x105300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x8, 0x3, 0x0, 0x9, 0x6, 0x8a, 0xd, 0x9f, 0x9, 0x80, 0x8, 0x0, 0x6, 0x6, 0x79, 0xc, 0x5, 0xff, '\x00', 0xfc, 0x40007}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m51.631559798s ago: executing program 0 (id=55): syz_mount_image$exfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x7f, 0x1519, &(0x7f00000021c0)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock(&(0x7f000068d000/0x1000)=nil, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8m50.987449034s ago: executing program 0 (id=60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) setpgid(0x0, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 8m50.602558574s ago: executing program 0 (id=62): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000002c0)={0x15, 0x923, &(0x7f0000000580)="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"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000001800)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c900"}) 8m50.431691688s ago: executing program 32 (id=62): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000002c0)={0x15, 0x923, &(0x7f0000000580)="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"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000001800)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c900"}) 8m46.462002376s ago: executing program 3 (id=86): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000200)="ebcec280898ac90955f75fb92949d4e8", 0x10}, {&(0x7f0000000640)="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", 0x3c6}], 0x2, &(0x7f00000016c0)}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8m46.262296681s ago: executing program 3 (id=87): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f0000000100)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='./cgroup\x00', 0x206420, 0x0, 0x7, 0x0, &(0x7f0000006380)) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fdatasync(r0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 8m44.403264847s ago: executing program 3 (id=92): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x209a, 0x1, 0x0, 0x3}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m43.535804408s ago: executing program 3 (id=95): ptrace$setregset(0x4205, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000010580)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_lower}, {@fat=@errors_remount}, {@fat=@nfs}, {@utf8}, {@rodir}, {@utf8}, {@utf8}, {@shortname_win95}, {@shortname_win95}]}, 0x0, 0x2b0, &(0x7f0000010700)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 8m42.553831193s ago: executing program 3 (id=97): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") r0 = inotify_init1(0x800) inotify_add_watch(r0, 0x0, 0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f00000003c0)='./bus\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x4000890) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 8m41.946762678s ago: executing program 3 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 8m41.623655646s ago: executing program 33 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 7m0.527867527s ago: executing program 4 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) 6m59.437666973s ago: executing program 4 (id=721): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000300)) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x2, 0x1ffff, 0x3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) write$UHID_INPUT(r0, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006e090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1db44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x35e}}, 0x1006) 6m57.437701493s ago: executing program 4 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 6m56.372106669s ago: executing program 4 (id=732): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000004018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x64}}, 0x8804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6m56.173582574s ago: executing program 4 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 6m54.956542424s ago: executing program 4 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffffffffffe7b, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 6m38.56759815s ago: executing program 34 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffffffffffe7b, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 14.878912272s ago: executing program 7 (id=2141): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140), 0x1, 0x50d, &(0x7f0000001bc0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) write$FUSE_IOCTL(r1, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff000) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f0000000100)=[0x3ff, 0x7fff]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) write$vga_arbiter(r5, &(0x7f0000000340)=ANY=[], 0x15) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000008ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 13.780425838s ago: executing program 1 (id=2144): socket$nl_rdma(0x10, 0x3, 0x14) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000010000004000"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'netdevsim0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 13.228546342s ago: executing program 5 (id=2146): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x1c, 0x2, 0x7}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 12.12153122s ago: executing program 5 (id=2148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c0000080000010026bd70007ddbdf250a142004fc04000a00100000080010000100000008", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8], 0x1, 0x320, &(0x7f0000000500)="$eJzs3ctqFE0UB/B/1cxkOl/mi52LCC6jAd2Ixo24GZF5BUFciCYZIThE1AjqxhlxJaJ7976CD+FG8QV05ULcCsnGkqqu7ulL9SWXSRv9/0Ds6e7qOn2p6XMGpUBE/6yrvS/vLn7TfwTQQAN4eRmQADygCeA4TniPNrc2tgb99aIDNUwL7CgIBC1FZp+1zb75e5RcrduZFpavPzXRia+jyVBKXfmaWvdd1hQM1caMfgcJtO3oNNu9Q4+s2KjKTo7neTiBWI4SsY1tPMZs3XEQEVG99Pt/FLwp9Xu+Y/N3KYFlYOT9qe//av7PrPlZSxyHSRVujb3/TZWlhL6/x8ymcb1nSji9XYZVYpWeW6nPUwhysESCKdxV5bjkM7HI6Tsbg/65tXuDdYnn6FqxBotRD5Z+QkuiXXLUpgUqnLtwZpRBWLKlz2ElJ/6FPfZYIJPuJm6I+CA+iZvCx1usR/lfUwkdrQnYT92pIP7z+f3NmFZ6L9ivjW63K82BQnOmk5PJO5V/luYp8NwVCcILO4fkDwR+WZym1XyqVXB2F5wN2lGrBWerlfBTTl+LiVb6bKKnOT/Kg6Ge5W0Rr8V1sYQfeI9eLP+XOr5lZEdm7CaMR41YDgaaueLB+Uy5u2uaY/qZN8cQNzrJNdFVbOeFvqMEfxLap/AevsIqLmH24ZOndxuDQf+BXrjtWLjfida0XgDOfWpewHC8pg1lZHYOvwMTzaftygkFdvZAD6gHYunOepQdypWPPwnhgD2wLiDrf7SKno3ex9SDVLqgGtXGjmrvLWYvL55fag8HzObL9Hca3/S6I6Ga6LxLBPWfyeRtvm/yNZ0tXGvnVyNhkelK2UziaI+odI4dVUBeov28WfovmUaXVEAzNo9x1HFDZGou/e7P1FynzgCnq/fo2ziPhvz03xI9fMYt/v5PRERERERERERERERERERERERERHTU7P5/GkzvslWL/7KciIiIiIiIiIiIiIiIiIiIiIiIiIiIiGifovl/Ec7/i2rz/6anl7Lz/3oomf93NRtDZv7fN5sQQ4Dz/xJN1u8AAAD//8IjdsA=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd496c71746da16b1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast1}, 0x9}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) write$snddsp(0xffffffffffffffff, &(0x7f0000000200)="a3", 0x1) 10.394383742s ago: executing program 7 (id=2149): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffc28c554a, 0x0, 0x40, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) fcntl$setpipe(r0, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) 10.245962176s ago: executing program 5 (id=2151): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) sched_rr_get_interval(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200000102200009040201010102"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') lseek(r3, 0x1000000, 0x0) sendto$inet(r3, &(0x7f00000003c0)="978d1dc701bbe4d6e62e59d65ef161865ba236d0777dbd47c3ff5335ced5b57ecd638bd353b5ce586b520a713f74b044a876f3753afb98ce29d38bad0cb0c8abfd2e133b706c99a72e5773d3fca47904ea9e38a4b81c8074ef6c865a54cffd6e0741a7e28bfb16f6c60116", 0x6b, 0x90, &(0x7f0000000440)={0x2, 0x4e22, @loopback}, 0x10) listen(r2, 0x74) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) socket(0x1e, 0x4, 0xfffffff7) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x23, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.245497466s ago: executing program 1 (id=2152): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r3, &(0x7f0000000800)="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", 0x370, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') syz_fuse_handle_req(r5, &(0x7f0000000cc0)="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", 0x2000, 0x0) lseek(r5, 0xffffffffffffffff, 0x1) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x236, &(0x7f0000000000)="$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") 7.461687675s ago: executing program 1 (id=2155): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xc, 0x10, 0x4, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x20, 0x40, 0xba, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x5c, 0x0, 0x2, 0x2}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") r2 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8c0042, 0x47) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, r4, 0x1, 0x70bd2a, 0x25dfdbff, {0x1b}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r7 = syz_init_net_socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNDEL(r7, 0x400443c9, &(0x7f0000000280)={@none}) 7.359922517s ago: executing program 5 (id=2157): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xef, 0x8, 0x6, 0xf, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x1}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x20008800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f1", 0x1}], 0x1}, 0x24024024) 7.359634837s ago: executing program 7 (id=2158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r4, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x2208004, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000280), 0x2010042, &(0x7f00000000c0)={[{@subsystem='memory'}]}) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) mount(0x0, 0x0, 0x0, 0x40078, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x5e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x30, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) 7.090276254s ago: executing program 5 (id=2169): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, 0x0, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 6.705501174s ago: executing program 6 (id=2160): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f00000047c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x180, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa00}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x549}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe43}]}, @NFTA_CHAIN_USERDATA={0xa9, 0xc, "f006a21bb4b0c2c2de7a889750b1c71fefa0c88cf6e09f477915589f08bb4cc5fefc3d11c7f127bb4ef342a8191f647027c66e81e0c51fa1f53a1ae0aa67f5be6c2aaf8ef2d76bfd4c1bb5a9be0c72d96b1a2fd9d5ae87900679f9ec022c8af98d6059e1f5cd7d0394b9465fa9654c633b00ae0c64235c970851fbbbb3ff38bfbe25fcbefcaaadeb21c508bc77c16f2f96166aa3446246a7552a23a47e8475f516762abaeb"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x49, 0xc, "c2feb191018a54cbaac18c8fae1a0f210ec1ca6089abccf808a93027a6d84c0130237ad43731c0b51c934e24e34ff949d061a5d4c6a9ca399173df376611a393b74ab37750"}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1d4}}, 0x20000800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x3}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.509537043s ago: executing program 7 (id=2161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040010) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008453, &(0x7f0000000080), 0x0, 0x53c, &(0x7f0000000a40)="$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") r4 = socket(0x11, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d1", 0x7}], 0x1}}], 0x1, 0x24044015) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000013c0)={@fallback, 0x37, 0x0, 0x5, &(0x7f00000012c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001400), 0x0, 0x0, 0x0}, 0x40) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) readlinkat(r7, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000016c0)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYRES64=r4, @ANYRES64=r5], 0x20) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r9 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r9, 0x330f, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) 5.112176933s ago: executing program 6 (id=2162): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r0, &(0x7f0000000600), 0x0, 0x1, 0xfffffffb, 0x1a) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) syz_pidfd_open(r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={0xffffffffffffffff, 0x0, 0x3b, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) socket(0x8, 0xa, 0xca) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x4}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000100)={0x23, 0x30}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.711604903s ago: executing program 6 (id=2163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, 0x0, 0x814) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x80, 0x20, 0x8, 0xabb8, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x66, 0x0, 0xe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x3, 0x23}]}}}}}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) 4.619096365s ago: executing program 5 (id=2174): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c808}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r3, 0x0, 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0>', 0x2, 0xfffffffffffffffc) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) 4.550547697s ago: executing program 2 (id=2164): get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000129000/0x8000)=nil, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x2, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x5, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0xaf, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4cf, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = timerfd_create(0x0, 0x800) timerfd_gettime(r4, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000000640)=ANY=[], 0x0) 4.305289643s ago: executing program 1 (id=2165): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0xf00, 0x1000) openat(0xffffffffffffff9c, 0x0, 0xa41, 0x1bf) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r3, 0x0, 0x44080) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) 3.604383001s ago: executing program 6 (id=2166): syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$inet_tcp(0x2, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sched_setscheduler(r0, 0x5, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 3.60230076s ago: executing program 2 (id=2167): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000840)={'bond0\x00'}) sendmsg$nl_route(r2, 0x0, 0x40001) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=@newqdisc={0x90, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x0, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0xa], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}, @TCA_STAB={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 3.553296412s ago: executing program 2 (id=2168): r0 = socket$inet6(0xa, 0x2, 0xea60) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() kcmp(r3, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000001340)={0x70b45530, {{0xa, 0x4e22, 0xa, @loopback, 0x8}}}, 0x88) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0xc4800, 0x0) write$hidraw(r6, &(0x7f0000000340), 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100), 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x6, 0x0, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000080)) 3.297591348s ago: executing program 2 (id=2170): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVNsZAPDvTv5YY2LSUrHVFgItVrGdmESjQilmVRAtbS100T8Sk5iISSaYCagUahCLFCpddGFx1Y1ddBO6K9IiFB681Vu4eG8hCm/1njyfPHkuXOVxJ3d0jGPyYmLuY/z94DL3nEnmfHc+7p1zhnPPBPDW6o6IIxHRFBHFiOjM6gvZFpcWt/TvTvXPj6dbEgsLJx4lkUTE0f758eprJdnjluwFvpU+XInY2/xyuzMXLp4dmpgYPZeVe8qT0z0zFy7+6Mzk0Njo2OjUwMGDhw8dGDhweP2OdfP26ze//fdjd669M/fdbVuGJ9N427Pnao9jvXRHd/aetERH7RNJxKn1bixnX8s7AFbtk8LOW3nHAABsvELW92+u9P87oykWO+v37/72cWf8sS3v+AAAAIC1W1hoyh4BAACAxpUY+wMAAECDq84DONo/P17dNmruwYOfblRLvMrDwYjoWsx/9f7uxWean93T2/KG7u/9w9OI7uh48tFPvvH/dIs3dB82X03zH+YdAXlq3Z93BORpxy/yjoA8vXc17wi4NBcRt4/U6f8na+7ztS8pJ0vKxwfT/t9fZmrr9P/eHr88kXcE5OlnA3lHQJ5uPMo7Am4PRsS+et//FSrr91Vtjoi26tp+6+RQe/r5/+/7tXUvf/4XHqxjkyzxcDDixzVrO56qyX+mqykrdVS+KmxJTp+ZGN0XEVsjYne0bErLvcu00Ttw46/16r/zJM3/P5Pq93/plrZf/S4wi+NB86YX/29kqDy01uNm0cO5iB3N9fL/vP+fZLl+Xf8tXftzvfqBPZV1RXctn3/epIV/ROyqe/4/H60ly67P2lO5HPRULwp1/OuDz67Uq//+79P8n90j//lJz/+25fNfuf4/W693ZvVtXP7fzSf16p/eSvP/t0uvc/1vTX5VCbA1qzs/VC6f641oTY69XN+3+pgbVfX9qL5faf53f6/+53+1/5dk60J3RcTXX6PNuXvTd+rVXy+k+b/xO+d/ftL8j6xw/icvnP+r35l//4c/qNf2zqtp/rt+vfL5v78SzO6sRv9vZV82QXnHCQAAAAAAAMD6KFTu00kKxWf7hUKxuDjP95vRVpgozZT3ni7NTo0s3s/TFS2F6lSvzpr5oL3Z/JBquW9JuT+bO3K1c3OlXBwuTYzkffAAAADQ4Noj7v3m8n+2b3nF+D91tzPvKAEAAIC1SMf/HffaKst5fW6cDwAAAA0pHf8//tOn74bxPwAAADSs2vE/AAAA0Nh+fvx4ui1Uf/dvqjR25uz49OG+fcXJ2eHicOncdHGsVBqrrNg3ufLrTZRK0719MXu+pzw6U+6ZuXDx5GRpdqp8svK7sSdHWzbgmICVFbd+vC3vGAAAgI2zlt/1t2PHTqPu5H1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLb4IAAD//wws/WY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000001000)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000480)={[{@barrier}, {@user_xattr}, {@quota}, {@abort}]}, 0xff, 0x511, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1e17}, 0x0) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000feb000/0x13000)=nil, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000004c0)) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000001040)=""/260) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000940)={0x1f, @none}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x1b4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001}) 1.834713504s ago: executing program 7 (id=2171): socket$inet_smc(0x2b, 0x1, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x1c0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x4080) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r6, 0x40045431, 0x0) sched_setscheduler(r0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.455973074s ago: executing program 6 (id=2172): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60", 0x1c}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.399314265s ago: executing program 2 (id=2173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decf7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.272583088s ago: executing program 1 (id=2175): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) getsockopt$inet_buf(r2, 0x0, 0x2f, 0x0, &(0x7f00000003c0)) syz_open_pts(r1, 0x8182) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, 0x0, 0x0) sendto$l2tp(r5, &(0x7f0000000280)="e5786a0d0000000000", 0x9, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002240), 0x0, 0x44) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 831.531539ms ago: executing program 7 (id=2176): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x206, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[]) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 551.013776ms ago: executing program 2 (id=2177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 388.50869ms ago: executing program 6 (id=2178): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000080), 0x81, 0xbe0, &(0x7f0000000440)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aGQXAMW8soIrX8gKTiSBVkl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDkqVd/bBWGln+fOBp3ps3M+/71Ug778HuBvDMGsh+pBFHI+JSElGo708jorta642o1I5bmJ8d+WF+diSJxcXnvk0iiYhH87MjjWsl9e2heqM3Ij77dxK/fXXtuJPTM+PD5XJpot4+OXX1xsnJ6Zm/jV0dvlK6Urp26sw/hk4PnRk8O9S2XH/86vzd7//0368rP7338+3v3ngnifPRV+9bmUc9620biIGl38lKnREx3Ibr7wUd9XxW5pl0bnBSusNBAQDQUrpiDvf7KERHLE/eCvHx57kGBwAAALTFYkfEIgAAALDPJdb/AAAAsM813gfwaH52pFHyfUfC7np4ISL6a/kv1EutpzMq1W1vdEXEwUdJrPxYa1I7bdsGIuLBl2c/zEo0+RzyTqvMRcQfmt3/pJp/f/2T0KvzTyNisA3jD6xqP035n2/D+HnnD8Cz6d6F2oNs7fMvXZr/RJPnX2eTZ9eTyPv515j/LayZ/y3n39Fi/vf/TY5x6923brbqy/L/593/fNAo2fjZdltJbcHDuYg/djbLP1nKP2mR/6UNrp1E7RKFX26WWh2Td/6Lb0ccj+b5NyTrfz/RydGxcmmw9rPpGHOfDr3favy888/u/8EW+a9z/3uzfTceu1LrL/V54eLFO636Ns4//aY7eb5a667veWl4amriVER38r+1+0+vn2/jmMY10rmIE39e//+/2d9/9ppQqf9tZJnP1bdZ+5VVY/7r9q2P1ss/W/vlef8vb/3+V/e9tskx/vLJ6yda9a1c/2YlG/9BUlsLN3F404kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsK+kEdEXSVqMiKRaT9NiMeJQRPwuDqbl65NTfx29/uK1y1lfRH90paNj5dJgRBRq7SRrn6rWl9unV7X/HhFHIuLNwoFquzhyvXw57+QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYcigi+iJJixGRRsRCIU2LxbyjAgAAANquP+8AAAAAgB1n/Q8AAAD7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zIsXv3k4ionDtQLZnuel9XrpEBOy3NOwAgNx15BwDkpjPvAIDcbHGNb7oA+1CyQX9vy56etscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN51/Oi9+0lEVM4dqJZMd72vq+kZx3YxOmAnpXkHAOSmY73Ozt2LA9h9T/wvfri9cQC7r/kaH3iWJBv09y4fU3m8p2ftwesuKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mvVVS5IWIyKt1tO0WIw4HBH90ZWMjpVLgxHxm4j4otDVk7V78g4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtpucnhkfLpdLE09SSbZ3erNKJdp8QZWnsvLy3ghjdyvJ3gijVsn7lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDxMTs+MD5fLpYnJvCMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jY5PTM+XC6XJjZRubOVg1dU8s4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/BoAAP//YD0Mhw==") setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x24, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, &(0x7f0000001040)={0x2, 0xff32}) sched_setscheduler(r0, 0x1, &(0x7f0000001140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) r6 = geteuid() mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x200000, &(0x7f00000012c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESHEX=0xee00, @ANYBLOB=',mask=^MAY_WRITE,subj_type=@,fscontext=user_u,fowner<', @ANYRESDEC=r6, @ANYBLOB=',fsname=,fowner=', @ANYRESDEC=0xee00, @ANYBLOB="2c6d61736b3d4d5d595f415040454e442c000d8306fb31d9a4f851b15a67913541179d6720e28e3e8c631f8fca835fac52"]) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r7 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x2000000000006) 0s ago: executing program 1 (id=2179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, 0x0, 0x814) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x80, 0x20, 0x8, 0xabb8, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x66, 0x0, 0xe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x3, 0x23}]}}}}}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) kernel console output (not intermixed with test programs): 131.052747][ T5633] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.069051][ T5633] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.079730][ T5633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.092508][ T6450] syz.4.473 (6450) used greatest stack depth: 19120 bytes left [ 131.121043][ T4188] XFS (loop4): Unmounting Filesystem [ 131.453002][ T5633] usb 6-1: GET_CAPABILITIES returned 0 [ 131.458562][ T5633] usbtmc 6-1:16.0: can't read capabilities [ 131.817368][ T5633] usb 6-1: USB disconnect, device number 6 [ 132.095504][ T4413] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 132.593924][ T4732] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.067228][ T4732] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 133.101887][ T4732] usb 5-1: config 0 has no interface number 0 [ 133.191031][ T4732] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.505497][ T4237] gspca_sonixj: reg_r err -71 [ 133.510287][ T4237] sonixj: probe of 2-1:0.0 failed with error -71 [ 133.526744][ T4237] usb 2-1: USB disconnect, device number 4 [ 133.613167][ T4732] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 133.623696][ T4732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.640802][ T4732] usb 5-1: Product: syz [ 133.645019][ T4732] usb 5-1: Manufacturer: syz [ 133.649747][ T4732] usb 5-1: SerialNumber: syz [ 133.665966][ T4732] usb 5-1: config 0 descriptor?? [ 134.413041][ T4732] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 134.653892][ T6577] loop1: detected capacity change from 0 to 64 [ 134.889027][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.563626][ T6582] udc-core: couldn't find an available UDC or it's busy [ 135.612240][ T6582] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 135.883019][ T5635] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 135.908461][ T4732] usb 5-1: USB disconnect, device number 9 [ 135.926294][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 135.943130][ T4732] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 136.142928][ T5635] usb 6-1: Using ep0 maxpacket: 16 [ 136.316411][ T5635] usb 6-1: unable to get BOS descriptor or descriptor too short [ 136.358441][ T6586] loop1: detected capacity change from 0 to 32768 [ 136.403033][ T5635] usb 6-1: config 6 has an invalid interface number: 221 but max is 0 [ 136.419113][ T5635] usb 6-1: config 6 has no interface number 0 [ 136.440685][ T5635] usb 6-1: config 6 interface 221 altsetting 8 has a duplicate endpoint with address 0x8B, skipping [ 136.465272][ T5635] usb 6-1: config 6 interface 221 has no altsetting 0 [ 136.527041][ T6586] XFS (loop1): Mounting V5 Filesystem [ 136.765332][ T5635] usb 6-1: New USB device found, idVendor=2100, idProduct=9e63, bcdDevice=38.6a [ 136.768711][ T6586] XFS (loop1): Ending clean mount [ 136.782518][ T5635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.790544][ T5635] usb 6-1: Product: syz [ 136.805699][ T5635] usb 6-1: Manufacturer: syz [ 136.814116][ T5635] usb 6-1: SerialNumber: syz [ 137.450491][ T5635] ftdi_sio 6-1:6.221: FTDI USB Serial Device converter detected [ 137.622745][ T5635] usb 6-1: Detected FT-X [ 137.648613][ T5635] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 137.670346][ T5635] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 137.702777][ T5635] ftdi_sio 6-1:6.221: GPIO initialisation failed: -71 [ 137.725362][ T5635] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 137.755522][ T5635] usb 6-1: USB disconnect, device number 7 [ 137.815202][ T5635] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 137.844095][ T6621] netlink: 132 bytes leftover after parsing attributes in process `syz.6.528'. [ 137.849665][ T5635] ftdi_sio 6-1:6.221: device disconnected [ 137.880494][ T6618] loop4: detected capacity change from 0 to 4096 [ 137.994301][ T6618] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 138.166033][ T6626] binder: 6625:6626 ioctl c0306201 200000001440 returned -14 [ 138.186409][ T4187] XFS (loop1): Unmounting Filesystem [ 138.252315][ T144] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 138.273104][ T4188] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 138.324255][ T4188] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 138.372569][ T4188] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 139.027130][ T1262] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 139.133079][ T4188] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 139.616898][ T6650] tipc: Started in network mode [ 139.752056][ T6650] tipc: Node identity ac14140f, cluster identity 4711 [ 139.818831][ T6650] tipc: New replicast peer: 255.255.255.255 [ 139.829727][ T6650] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 139.838592][ T6650] tipc: Enabled bearer , priority 10 [ 139.966689][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 140.118602][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 140.269986][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 140.423817][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 140.510567][ T6660] overlayfs: failed to clone upperpath [ 140.573335][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 140.736148][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 140.898189][ T4237] tipc: Node number set to 2886997007 [ 141.049930][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 141.212217][ T5792] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 141.342335][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 141.656775][ T5792] usb 6-1: unable to get BOS descriptor or descriptor too short [ 141.667084][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 141.775687][ T5792] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 141.793352][ T5792] usb 6-1: config 64 has no interface number 0 [ 141.828017][ T5792] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 141.878535][ T5792] usb 6-1: config 64 interface 44 has no altsetting 0 [ 141.916469][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 142.104837][ T5792] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 142.125074][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.171247][ T5792] usb 6-1: Product: syz [ 142.175441][ T5792] usb 6-1: Manufacturer: syz [ 142.214016][ T5792] usb 6-1: SerialNumber: syz [ 142.720466][ T6674] udc-core: couldn't find an available UDC or it's busy [ 142.723620][ T4237] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 142.731432][ T6674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 142.870675][ T5792] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 142.899670][ T5792] usb 6-1: USB disconnect, device number 8 [ 143.172998][ T4237] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 143.194691][ T4237] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 143.216109][ T4731] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.433208][ T4237] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.450972][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.465274][ T4237] usb 5-1: Product: syz [ 143.476531][ T4237] usb 5-1: Manufacturer: syz [ 143.481406][ T4237] usb 5-1: SerialNumber: syz [ 143.529312][ T6707] syz.6.553 sent an empty control message without MSG_MORE. [ 143.664540][ T4731] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 143.676550][ T4731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.698213][ T4731] usb 2-1: config 0 descriptor?? [ 143.759467][ T4731] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 145.057922][ T4731] gspca_cpia1: usb_control_msg 01, error -71 [ 145.064130][ T4731] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 145.082737][ T4731] usb 2-1: USB disconnect, device number 5 [ 145.231342][ T4237] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 145.242095][ T4237] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 145.259315][ T6760] loop5: detected capacity change from 0 to 8 [ 145.397548][ T6760] SQUASHFS error: zlib decompression failed, data probably corrupt [ 145.405780][ T6760] SQUASHFS error: Failed to read block 0x9b: -5 [ 145.412185][ T6760] SQUASHFS error: Unable to read metadata cache entry [99] [ 145.419560][ T6760] SQUASHFS error: Unable to read inode 0x127 [ 145.477738][ T4237] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 145.545067][ C1] net_ratelimit: 2 callbacks suppressed [ 145.545084][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 145.605081][ T4237] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 146.180739][ T4237] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 146.239422][ T4237] usb 5-1: USB disconnect, device number 10 [ 146.287980][ T4237] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 146.479233][ T6767] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 146.479373][ T6768] netlink: 'syz.1.569': attribute type 2 has an invalid length. [ 146.488556][ T6767] pit: kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 146.508041][ T6767] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 146.671802][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 147.301049][ T6767] pit: kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 147.420220][ T6767] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 147.499091][ T6767] pit: kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 147.729936][ T6796] loop1: detected capacity change from 0 to 32768 [ 147.798055][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 147.973715][ T6803] binder: BINDER_SET_CONTEXT_MGR already set [ 147.979727][ T6803] binder: 6802:6803 ioctl 4018620d 200000000240 returned -16 [ 148.924612][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 149.050875][ T6817] loop4: detected capacity change from 0 to 2048 [ 149.180947][ T6817] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 149.690209][ T6817] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback. [ 149.948708][ T6817] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #15: comm syz.4.584: inline data xattr refers to an external xattr inode [ 150.028327][ T6831] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 150.050336][ T6817] EXT4-fs (loop4): Remounting filesystem read-only [ 150.057170][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 150.126580][ T6831] EXT4-fs (loop4): Remounting filesystem read-only [ 151.158938][ T6866] loop1: detected capacity change from 0 to 4096 [ 151.382753][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 151.452716][ T6866] EXT4-fs (loop1): Test dummy encryption mode enabled [ 151.504987][ T6866] EXT4-fs (loop1): Test dummy encryption mode enabled [ 151.623535][ T6866] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 151.903332][ T4237] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.315128][ T4237] usb 5-1: config 0 has no interfaces? [ 152.401830][ T4237] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.416740][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.459968][ T4237] usb 5-1: SerialNumber: syz [ 152.477638][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 152.501458][ T4237] usb 5-1: config 0 descriptor?? [ 152.769754][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 152.780605][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 152.791424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 152.802257][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 152.813097][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 152.880971][ T5792] usb 5-1: USB disconnect, device number 11 [ 153.202844][ T6902] loop5: detected capacity change from 0 to 32768 [ 153.271099][ T6902] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.610 (6902) [ 153.290916][ T6902] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 153.299637][ T6902] BTRFS info (device loop5): turning on sync discard [ 153.306398][ T6902] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 153.315810][ T6902] BTRFS info (device loop5): use zstd compression, level 3 [ 153.323267][ T6902] BTRFS info (device loop5): turning on async discard [ 153.330019][ T6902] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 153.340609][ T6902] BTRFS info (device loop5): trying to use backup root at mount time [ 153.348793][ T6902] BTRFS info (device loop5): enabling auto defrag [ 153.355282][ T6902] BTRFS info (device loop5): using free space tree [ 153.361776][ T6902] BTRFS info (device loop5): has skinny extents [ 153.365655][ T4732] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.604395][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 153.667682][ T1262] BTRFS warning (device loop5): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 153.723629][ T6902] BTRFS warning (device loop5): failed to read root (objectid=2): -5 [ 153.724024][ T6921] loop4: detected capacity change from 0 to 512 [ 153.738831][ T4404] BTRFS warning (device loop5): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 153.793538][ T6902] BTRFS warning (device loop5): couldn't read tree root [ 153.801446][ T6902] BTRFS error (device loop5): parent transid verify failed on 5255168 wanted 5 found 7 [ 153.809983][ T4732] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 153.811574][ T6902] BTRFS warning (device loop5): couldn't read tree root [ 153.864093][ T6902] BTRFS info (device loop5): enabling ssd optimizations [ 153.871604][ T6902] BTRFS info (device loop5): clearing free space tree [ 153.879543][ T6902] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.889752][ T6902] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.946853][ T6902] BTRFS info (device loop5): creating free space tree [ 153.949252][ T6921] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.612: iget: bad i_size value: 38620345925642 [ 153.956128][ T6902] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.968473][ T6921] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.612: couldn't read orphan inode 15 (err -117) [ 153.976085][ T6902] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.000583][ T6921] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 154.084169][ T4732] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 154.145630][ T4732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.160672][ T4732] usb 2-1: Product: syz [ 154.169013][ T4732] usb 2-1: Manufacturer: syz [ 154.176142][ T4732] usb 2-1: SerialNumber: syz [ 154.284159][ T4732] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 154.290227][ T6932] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.612: bg 0: block 5: invalid block bitmap [ 154.425837][ T6932] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 628 with error 28 [ 154.473899][ T6932] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.473899][ T6932] [ 154.509775][ T6932] EXT4-fs (loop4): Total free blocks count 0 [ 154.546850][ T6932] EXT4-fs (loop4): Free/Dirty block details [ 154.552867][ T6932] EXT4-fs (loop4): free_blocks=0 [ 154.637473][ T6932] EXT4-fs (loop4): dirty_blocks=628 [ 154.642731][ T6932] EXT4-fs (loop4): Block reservation details [ 154.648963][ T6932] EXT4-fs (loop4): i_reserved_data_blocks=628 [ 154.730994][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 154.769040][ T4732] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.540748][ T6932] EXT4-fs (loop4): shut down requested (0) [ 155.601696][ T4732] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 155.613526][ T4732] usb 2-1: media controller created [ 155.635931][ T4732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.723485][ T6949] device syzkaller0 entered promiscuous mode [ 155.857081][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 155.885991][ T4732] usb 2-1: USB disconnect, device number 6 [ 156.246970][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 156.309252][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.316723][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.556125][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 156.709523][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.734610][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.744612][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 156.759615][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.774693][ T7] usb 5-1: config 0 descriptor?? [ 156.827664][ T7] hub 5-1:0.0: USB hub found [ 156.983537][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 158.199888][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 158.803313][ T7] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 158.822140][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 158.857231][ T7007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.907244][ T7004] loop5: detected capacity change from 0 to 2048 [ 158.939920][ T7007] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.950623][ T7007] team0: Port device macvlan2 added [ 158.997348][ T7004] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 159.013910][ T7004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.043980][ T7] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1 [ 159.067619][ T7] hid-generic: probe of 0003:046D:C31C.0006 failed with error -22 [ 159.151773][ T7020] device syzkaller0 entered promiscuous mode [ 159.323294][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 159.394291][ T4732] usb 5-1: USB disconnect, device number 12 [ 160.156564][ T7049] loop5: detected capacity change from 0 to 128 [ 160.275112][ T7050] loop4: detected capacity change from 0 to 4096 [ 160.320767][ T7050] __ntfs_error: 24 callbacks suppressed [ 160.320782][ T7050] ntfs: (device loop4): parse_options(): The mft_zone_multiplier option requires an argument. [ 160.325749][ T7049] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.439124][ T7049] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.471653][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 161.587142][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 163.087734][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 163.326447][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.657'. [ 163.551883][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.659'. [ 163.905440][ T7090] device vlan2 entered promiscuous mode [ 163.961159][ T7090] device syz_tun entered promiscuous mode [ 164.337869][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 164.748588][ T7116] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by ""[7116] [ 165.730979][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 165.742712][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.669'. [ 165.856522][ T4404] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 166.591216][ C1] sched: RT throttling activated [ 166.862399][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 167.077273][ T7153] netlink: 10 bytes leftover after parsing attributes in process `syz.5.676'. [ 167.187310][ T7151] loop4: detected capacity change from 0 to 4096 [ 167.294050][ T7166] netlink: 40 bytes leftover after parsing attributes in process `syz.6.681'. [ 167.308990][ T7167] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 167.998604][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 168.000168][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 169.095306][ T7189] loop5: detected capacity change from 0 to 64 [ 169.115270][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 169.129834][ T7187] loop1: detected capacity change from 0 to 2048 [ 169.214365][ T7189] hfs: request for non-existent node 131072 in B*Tree [ 169.222904][ T7189] hfs: request for non-existent node 131072 in B*Tree [ 169.243248][ T7189] hfs: request for non-existent node 131072 in B*Tree [ 169.308110][ T7189] hfs: request for non-existent node 131072 in B*Tree [ 169.361211][ T7187] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.375900][ T7199] hfs: request for non-existent node 131072 in B*Tree [ 169.382708][ T7199] hfs: request for non-existent node 131072 in B*Tree [ 169.472029][ T7189] hfs: request for non-existent node 131072 in B*Tree [ 169.480216][ T7189] hfs: request for non-existent node 131072 in B*Tree [ 169.506802][ T7189] hfs: request for non-existent node 131072 in B*Tree [ 169.518332][ T7189] hfs: request for non-existent node 131072 in B*Tree [ 169.545220][ T7189] hfs: request for non-existent node 131072 in B*Tree [ 169.568347][ T7189] hfs: request for non-existent node 131072 in B*Tree [ 169.629663][ T7199] hfs: request for non-existent node 12 in B*Tree [ 169.646078][ T7199] hfs: request for non-existent node 12 in B*Tree [ 169.668867][ T7189] hfs: request for non-existent node 13 in B*Tree [ 169.700428][ T7189] hfs: request for non-existent node 13 in B*Tree [ 169.725586][ T7189] hfs: request for non-existent node 14 in B*Tree [ 169.748703][ T7189] hfs: request for non-existent node 14 in B*Tree [ 170.242244][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 170.310906][ T7235] device syzkaller0 entered promiscuous mode [ 171.368386][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 171.882179][ T7251] loop1: detected capacity change from 0 to 1024 [ 172.495210][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 172.851837][ T7272] loop4: detected capacity change from 0 to 4096 [ 172.946441][ T7272] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 173.079715][ T5792] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 173.621302][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 174.748178][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 174.940049][ T5792] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 174.950142][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.958256][ T5792] usb 6-1: Product: syz [ 174.962450][ T5792] usb 6-1: Manufacturer: syz [ 174.967152][ T5792] usb 6-1: SerialNumber: syz [ 175.885130][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 175.937322][ T5792] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 176.968366][ T5792] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 176.985675][ T5792] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 177.001215][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 177.010028][ T5792] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 177.019686][ T5792] lan78xx: probe of 6-1:1.0 failed with error -71 [ 177.135560][ T5792] usb 6-1: USB disconnect, device number 9 [ 178.127334][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 178.243673][ T7332] loop5: detected capacity change from 0 to 64 [ 178.317946][ T7339] IPVS: dh: FWM 3 0x00000003 - no destination available [ 178.332315][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 178.334509][ T7335] loop1: detected capacity change from 0 to 256 [ 179.295386][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 179.351188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 179.372862][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 179.394525][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 180.087968][ T4729] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 180.380383][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 180.489427][ T4729] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 180.508000][ T4729] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.534544][ T4729] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.683378][ T4729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.713551][ T4729] usb 2-1: config 0 descriptor?? [ 180.775769][ T7383] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 181.507239][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 181.511564][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 181.550312][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 181.552599][ T4729] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 181.565244][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 181.662251][ T7391] device syzkaller0 entered promiscuous mode [ 181.713865][ T7391] tipc: Started in network mode [ 181.719875][ T7391] tipc: Node identity 080211000001, cluster identity 4711 [ 181.776535][ T7391] tipc: Enabled bearer , priority 0 [ 182.938823][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 182.962999][ T4729] tipc: Node number set to 134418688 [ 183.119730][ T4399] usb 2-1: USB disconnect, device number 7 [ 183.808686][ T7429] loop1: detected capacity change from 0 to 8192 [ 184.015591][ T7429] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 184.078715][ T7429] REISERFS (device loop1): using ordered data mode [ 184.106902][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 184.135290][ T7429] reiserfs: using flush barriers [ 184.148515][ T7429] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.165715][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.766'. [ 184.184330][ T7429] REISERFS (device loop1): checking transaction log (loop1) [ 184.185792][ T7439] device bond0 entered promiscuous mode [ 184.200363][ T7439] device team0 entered promiscuous mode [ 184.215725][ T7439] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 184.230175][ T7439] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 184.243811][ T7439] device hsr1 entered promiscuous mode [ 184.254301][ T7439] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 184.406956][ T7429] REISERFS (device loop1): Using tea hash to sort names [ 184.435053][ T7429] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 185.233045][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 185.712972][ T7473] comedi comedi2: das16m1: I/O port conflict (0x2,16) [ 186.359954][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 187.390594][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 187.429725][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 187.486079][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 187.494071][ T7481] netlink: 'syz.2.777': attribute type 4 has an invalid length. [ 187.511773][ T7481] netlink: 152 bytes leftover after parsing attributes in process `syz.2.777'. [ 187.579932][ T7481] .`: renamed from bond0 [ 188.612936][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 189.609329][ T7521] loop5: detected capacity change from 0 to 2048 [ 189.739119][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 189.840983][ T7521] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 189.896269][ T7521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.244299][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 190.312144][ T7542] bridge1: port 1(dummy0) entered blocking state [ 190.341078][ T7542] bridge1: port 1(dummy0) entered disabled state [ 190.385300][ T7542] device dummy0 entered promiscuous mode [ 190.419125][ T7543] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 190.451119][ T7543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.799'. [ 190.489307][ T7543] bridge1: port 1(dummy0) entered blocking state [ 190.495875][ T7543] bridge1: port 1(dummy0) entered forwarding state [ 190.525495][ T7543] bridge1: port 1(dummy0) entered disabled state [ 190.835264][ T4237] tipc: Resetting bearer [ 190.865989][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 192.002956][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 192.635340][ T7557] device syzkaller0 entered promiscuous mode [ 193.119059][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 193.964512][ T7574] fuse: Bad value for 'fd' [ 194.245182][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 194.609512][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.812'. [ 194.644203][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.812'. [ 194.695226][ T7591] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 194.753863][ T7591] overlayfs: failed to look up (tracing) for ino (-66) [ 195.618482][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 195.840500][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.818'. [ 195.857925][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.818'. [ 195.887926][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.818'. [ 195.922024][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.818'. [ 196.758171][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 196.795357][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.402796][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.609988][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.632870][ T7620] chnl_net:caif_netlink_parms(): no params data found [ 197.687040][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.717932][ T7636] overlayfs: failed to clone upperpath [ 197.895876][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 198.053194][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.070937][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.090289][ T7620] device bridge_slave_0 entered promiscuous mode [ 198.141375][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.155393][ T4729] Bluetooth: hci2: command 0x0406 tx timeout [ 198.172184][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.194201][ T7620] device bridge_slave_1 entered promiscuous mode [ 198.218633][ T9] tipc: Disabling bearer [ 198.243369][ T9] tipc: Left network mode [ 198.333263][ T7620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.400246][ T7620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.519922][ T7620] team0: Port device team_slave_0 added [ 198.569376][ T7620] team0: Port device team_slave_1 added [ 198.578394][ T4729] Bluetooth: hci1: command 0x0409 tx timeout [ 199.022056][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 199.445039][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.452145][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.512066][ T7670] loop1: detected capacity change from 0 to 256 [ 199.608177][ T7670] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 199.619365][ T7620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.632622][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.639714][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.675960][ T7620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.713423][ T5612] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 199.932690][ T7620] device hsr_slave_0 entered promiscuous mode [ 199.983092][ T7620] device hsr_slave_1 entered promiscuous mode [ 200.059500][ T7620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.077525][ T7620] Cannot create hsr debugfs directory [ 200.137957][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 200.204564][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 200.266101][ T7690] device syzkaller0 entered promiscuous mode [ 200.832224][ T4732] Bluetooth: hci1: command 0x041b tx timeout [ 201.137867][ T7620] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 201.230388][ T7708] IPVS: dh: FWM 3 0x00000003 - no destination available [ 201.264289][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 201.267998][ T7620] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 201.327777][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.6.845'. [ 201.345880][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.6.845'. [ 201.369508][ T7706] device ip6gretap0 entered promiscuous mode [ 201.377163][ T7706] device syz_tun entered promiscuous mode [ 201.383594][ T7706] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 201.391166][ T7706] Cannot create hsr debugfs directory [ 201.407640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 201.460808][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.575428][ T7620] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 201.806336][ T7620] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.369565][ T9] device hsr_slave_0 left promiscuous mode [ 202.390848][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 202.521552][ T9] device hsr_slave_1 left promiscuous mode [ 202.630705][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.745986][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.096812][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.108237][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.114222][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 203.247100][ T9] device bridge_slave_1 left promiscuous mode [ 203.253339][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.336382][ T9] device bridge_slave_0 left promiscuous mode [ 203.375791][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.517368][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 203.931773][ T9] device veth1_macvtap left promiscuous mode [ 204.012300][ T9] device veth0_macvtap left promiscuous mode [ 204.018487][ T9] device veth1_vlan left promiscuous mode [ 204.024293][ T9] device veth0_vlan left promiscuous mode [ 204.585681][ T9] team0 (unregistering): Port device team_slave_1 removed [ 204.605080][ T9] team0 (unregistering): Port device team_slave_0 removed [ 204.618815][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.632610][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.643857][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 204.698904][ T9] bond0 (unregistering): Released all slaves [ 204.763096][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'. [ 204.805215][ T7752] bridge1: port 1(veth5) entered blocking state [ 204.815825][ T7752] bridge1: port 1(veth5) entered disabled state [ 204.825084][ T7752] device veth5 entered promiscuous mode [ 204.832846][ T7753] bridge1: port 2(veth0_to_bond) entered blocking state [ 204.840154][ T7753] bridge1: port 2(veth0_to_bond) entered disabled state [ 204.847819][ T7753] device veth0_to_bond entered promiscuous mode [ 204.856536][ T7753] bridge1: port 2(veth0_to_bond) entered blocking state [ 204.863555][ T7753] bridge1: port 2(veth0_to_bond) entered forwarding state [ 204.898444][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.6.858'. [ 204.955492][ T7767] sch_fq: defrate 0 ignored. [ 205.051800][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.150023][ T7784] batman_adv: batadv0: Adding interface: dummy0 [ 205.160944][ T7784] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.337126][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 205.770398][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 205.875839][ T7784] batman_adv: batadv0: Interface activated: dummy0 [ 205.911458][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.926282][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.976441][ T7794] batadv0: mtu less than device minimum [ 206.021600][ T7794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.034104][ T7794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.046569][ T7794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.058974][ T7794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.071376][ T7794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.083761][ T7794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.181465][ T7620] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.598207][ T7620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.608701][ T7620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.628020][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.637517][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.712708][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.719873][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.766902][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.845330][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.853894][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.861063][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.362455][ C0] hrtimer: interrupt took 32857 ns [ 207.492853][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.551911][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.765569][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.799003][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.921479][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.209951][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.437667][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.636645][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.680801][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.733621][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.798760][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.814013][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.837639][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.149879][ C1] net_ratelimit: 15 callbacks suppressed [ 209.149894][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 209.368891][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.873910][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.887518][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.190363][ T7875] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 210.287221][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 211.214579][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 211.402926][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 212.532243][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 212.615694][ T7904] loop1: detected capacity change from 0 to 256 [ 212.697707][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.718737][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.454496][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.485885][ T25] audit: type=1800 audit(1780673852.244:52): pid=7904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.885" name="file1" dev="loop1" ino=1048645 res=0 errno=0 [ 213.509200][ T7904] exFAT-fs (loop1): hint_cluster is invalid (17) [ 213.516980][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.548035][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.559129][ T7904] exFAT-fs (loop1): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 213.581322][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.617296][ T7904] exFAT-fs (loop1): Filesystem has been set read-only [ 213.627961][ T7620] device veth0_vlan entered promiscuous mode [ 213.652870][ T7620] device veth1_vlan entered promiscuous mode [ 213.659294][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 213.685650][ T7904] exFAT-fs (loop1): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 213.761680][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.784371][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.816903][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.858645][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.889908][ T7620] device veth0_macvtap entered promiscuous mode [ 213.923438][ T7620] device veth1_macvtap entered promiscuous mode [ 214.031517][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.063911][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.130640][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.189845][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.231694][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.276037][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.322924][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.435588][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.463387][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.498130][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.530380][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.565870][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.593357][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.625135][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.646997][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.659191][ T7935] vxcan0: tx drop: invalid sa for name 0x00000000000ffffc [ 214.681546][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.698349][ T7620] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.720960][ T7620] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.782632][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 214.793039][ T4729] Bluetooth: hci4: command 0x0406 tx timeout [ 214.874357][ T7620] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.883380][ T7620] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.895233][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.918761][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.208155][ T5612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.257357][ T5612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.275839][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.286839][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.305431][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.374930][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.909080][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 217.035541][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 217.790012][ T7938] loop1: detected capacity change from 0 to 32768 [ 217.851421][ T7938] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.892 (7938) [ 217.921832][ T7938] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 217.955690][ T7938] BTRFS info (device loop1): turning on sync discard [ 218.009464][ T7938] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 218.055918][ T7938] BTRFS info (device loop1): use zstd compression, level 3 [ 218.105850][ T7938] BTRFS info (device loop1): turning on async discard [ 218.134837][ T7938] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 218.172903][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 218.222402][ T7938] BTRFS info (device loop1): trying to use backup root at mount time [ 218.269472][ T7938] BTRFS info (device loop1): enabling auto defrag [ 218.311265][ T7938] BTRFS info (device loop1): using free space tree [ 218.344010][ T7938] BTRFS info (device loop1): has skinny extents [ 218.946697][ T7938] BTRFS error (device loop1): open_ctree failed: -12 [ 218.964153][ T6329] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (6329) [ 219.207565][ T8020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.288563][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 220.425908][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 221.029499][ T8039] loop7: detected capacity change from 0 to 128 [ 221.256676][ T8039] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.544271][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 221.877748][ T8039] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.218589][ T8054] xt_socket: unknown flags 0x4c [ 222.492001][ T8057] loop1: detected capacity change from 0 to 1024 [ 222.668192][ T8057] EXT4-fs (loop1): Ignoring removed orlov option [ 222.679092][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 222.839356][ T8057] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 223.895217][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 224.098567][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'. [ 224.967456][ T8084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.018620][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 225.033922][ T8089] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.044703][ T8089] device macvlan2 entered promiscuous mode [ 225.050547][ T8089] device bond0 entered promiscuous mode [ 225.085373][ T8089] team0: Port device macvlan2 added [ 225.226295][ T8100] device syzkaller0 entered promiscuous mode [ 226.221545][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 226.257995][ T8114] loop7: detected capacity change from 0 to 256 [ 226.424714][ T8114] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 226.658572][ T8123] binder: 8120:8123 ioctl c0306201 200000001440 returned -14 [ 226.965830][ T8131] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 227.347517][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 227.660203][ T8134] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 227.821007][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.933'. [ 227.986426][ T4391] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 227.998822][ T8144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.027383][ T8153] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.527898][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 228.810277][ T8153] team0: Port device macvlan2 added [ 228.924773][ T8158] loop7: detected capacity change from 0 to 128 [ 228.931266][ T4391] usb 2-1: Using ep0 maxpacket: 32 [ 229.109432][ T8158] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.120831][ T4391] usb 2-1: config 120 has no interfaces? [ 229.161471][ T8158] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.298039][ T4391] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b [ 229.318454][ T4391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.367250][ T4391] usb 2-1: Product: syz [ 229.376435][ T8175] device bond2 entered promiscuous mode [ 229.381800][ T4391] usb 2-1: Manufacturer: syz [ 229.434521][ T4391] usb 2-1: SerialNumber: syz [ 229.527548][ T8175] device bridge1 entered promiscuous mode [ 229.584053][ T8175] bond2: (slave bridge1): making interface the new active one [ 229.625013][ T8175] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 229.687147][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 229.859110][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'. [ 230.337112][ T4391] r8152-cfgselector 2-1: Unknown version 0x0000 [ 230.353896][ T4391] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 230.824458][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 231.750860][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.951'. [ 231.788883][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.952'. [ 231.940238][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 232.667329][ T8231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.976901][ T8237] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 233.077526][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 233.224182][ T8237] team0: Port device macvlan2 added [ 234.193256][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 235.019043][ T8267] loop1: detected capacity change from 0 to 1024 [ 235.164349][ T8267] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 235.196461][ T8267] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 235.196461][ T8267] [ 235.330527][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 235.373962][ T4398] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 235.633883][ T4398] usb 8-1: Using ep0 maxpacket: 32 [ 236.457068][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 236.620320][ T4398] usb 8-1: config 120 has no interfaces? [ 236.793497][ T4398] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b [ 236.802573][ T4398] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.825224][ T4398] usb 8-1: Product: syz [ 236.836099][ T4398] usb 8-1: Manufacturer: syz [ 236.840740][ T4398] usb 8-1: SerialNumber: syz [ 237.171981][ T4398] r8152-cfgselector 8-1: Unknown version 0x0000 [ 237.179750][ T4398] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 237.486429][ T4398] Bluetooth: hci1: command 0x0405 tx timeout [ 237.572759][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 237.762865][ T8326] netlink: 16 bytes leftover after parsing attributes in process `syz.5.984'. [ 237.778741][ T8326] device bond0 entered promiscuous mode [ 237.784375][ T8326] device bond_slave_0 entered promiscuous mode [ 237.791485][ T8326] device bond_slave_1 entered promiscuous mode [ 237.798680][ T8326] device team0 entered promiscuous mode [ 237.805029][ T8326] device team_slave_0 entered promiscuous mode [ 237.812418][ T8326] device team_slave_1 entered promiscuous mode [ 237.818744][ T8326] device macvlan2 entered promiscuous mode [ 237.824909][ T8326] device bond1 entered promiscuous mode [ 237.836344][ T8326] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 237.844269][ T8326] Cannot create hsr debugfs directory [ 237.850564][ T8326] device hsr1 entered promiscuous mode [ 237.856671][ T8326] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 237.864158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 237.872664][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.7.970'. [ 237.882690][ T8330] bond0: (slave bond_slave_1): Releasing backup interface [ 237.891038][ T8330] device bond_slave_1 left promiscuous mode [ 237.909212][ T8331] device veth1_to_hsr entered promiscuous mode [ 237.933404][ T8331] team0: Port device macvlan2 added [ 237.941206][ T8327] device syzkaller0 entered promiscuous mode [ 237.963696][ T8327] tipc: Enabled bearer , priority 0 [ 237.979044][ T8322] tipc: Resetting bearer [ 238.023666][ T8322] tipc: Disabling bearer [ 239.121254][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 239.251797][ T8357] loop1: detected capacity change from 0 to 8 [ 239.335952][ T8357] SQUASHFS error: zlib decompression failed, data probably corrupt [ 239.344071][ T8357] SQUASHFS error: Failed to read block 0x9b: -5 [ 239.350426][ T8357] SQUASHFS error: Unable to read metadata cache entry [99] [ 239.357820][ T8357] SQUASHFS error: Unable to read inode 0x127 [ 240.259426][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 240.351374][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.6.987'. [ 240.372848][ T8360] device bond0 entered promiscuous mode [ 240.410658][ T8360] device bond_slave_0 entered promiscuous mode [ 240.444539][ T8360] device bond_slave_1 entered promiscuous mode [ 240.452824][ T8360] device team0 entered promiscuous mode [ 240.605790][ T8360] device team_slave_1 entered promiscuous mode [ 240.616887][ T8360] device macvlan2 entered promiscuous mode [ 240.622715][ T8360] device bond1 entered promiscuous mode [ 240.633004][ T8360] hsr2: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 240.646971][ T8360] device hsr2 entered promiscuous mode [ 240.656395][ T8360] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 241.064035][ T8363] bond0: (slave bond_slave_1): Releasing backup interface [ 241.401366][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 241.579424][ T8363] device bond_slave_1 left promiscuous mode [ 241.622799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr2: link becomes ready [ 242.396073][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.992'. [ 242.469474][ T8388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.512109][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 242.602768][ T8395] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 242.664998][ T8395] device macvlan3 entered promiscuous mode [ 242.670939][ T8395] device bond2 entered promiscuous mode [ 242.687298][ T8395] team0: Port device macvlan3 added [ 243.638673][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 244.126721][ T8437] loop7: detected capacity change from 0 to 256 [ 244.309118][ T25] audit: type=1800 audit(1780673880.697:53): pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1001" name="file1" dev="loop7" ino=1048665 res=0 errno=0 [ 244.311327][ T8437] exFAT-fs (loop7): hint_cluster is invalid (17) [ 244.362570][ T8437] exFAT-fs (loop7): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 244.380961][ T8437] exFAT-fs (loop7): Filesystem has been set read-only [ 244.434176][ T8437] exFAT-fs (loop7): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 244.611162][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1004'. [ 244.630868][ T8453] device bond0 entered promiscuous mode [ 244.638948][ T8453] device bond_slave_0 entered promiscuous mode [ 244.645264][ T8453] device bond_slave_1 entered promiscuous mode [ 244.661145][ T8453] device team0 entered promiscuous mode [ 244.667800][ T8453] device team_slave_0 entered promiscuous mode [ 244.677285][ T8453] device team_slave_1 entered promiscuous mode [ 244.704346][ T8453] device macvlan2 entered promiscuous mode [ 244.765122][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 244.784658][ T8453] device bond1 entered promiscuous mode [ 245.523281][ T8453] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 245.537921][ T8453] Cannot create hsr debugfs directory [ 245.551411][ T8453] device hsr1 entered promiscuous mode [ 245.706577][ T8453] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 245.745624][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 245.809071][ T8454] bond0: (slave bond_slave_1): Releasing backup interface [ 245.823724][ T8454] device bond_slave_1 left promiscuous mode [ 245.851954][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.861914][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.869505][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.891674][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 246.420788][ T8474] batman_adv: batadv0: Adding interface: dummy0 [ 246.439799][ T8474] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.500258][ T8474] batman_adv: batadv0: Interface activated: dummy0 [ 246.972627][ T8474] batadv0: mtu less than device minimum [ 247.018159][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 247.753925][ T8474] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.766467][ T8474] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.779075][ T8474] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.791505][ T8474] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.803813][ T8474] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 248.091560][ T8498] raw_sendmsg: syz.5.1018 forgot to set AF_INET. Fix it! [ 248.794678][ T4391] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 248.805383][ T4391] Bluetooth: hci0: Injecting HCI hardware error event [ 248.815188][ T146] Bluetooth: hci0: hardware error 0x00 [ 249.271490][ C1] net_ratelimit: 15 callbacks suppressed [ 249.271594][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 249.949671][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 250.105448][ T8562] vxcan0: tx drop: invalid sa for name 0x00000000000ffffc [ 250.397761][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 251.308727][ T8585] batman_adv: batadv0: Adding interface: dummy0 [ 251.344738][ T8585] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.384138][ T8585] batman_adv: batadv0: Interface activated: dummy0 [ 251.501826][ T8585] batadv0: mtu less than device minimum [ 251.524555][ T8585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.536926][ T8585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.549311][ T8585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.561630][ T8585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.574043][ T8585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.586439][ T8585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.598796][ T8585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.921534][ T4736] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 253.345931][ T7] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 253.354249][ T7] Bluetooth: hci3: Injecting HCI hardware error event [ 253.361625][ T4206] Bluetooth: hci3: hardware error 0x00 [ 253.484779][ T4736] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 253.493249][ T4736] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.540355][ T4736] usb 8-1: config 0 has no interface number 0 [ 253.546571][ T4736] usb 8-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.565871][ T8626] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1048'. [ 253.586214][ T8626] 8021q: VLANs not supported on ip6gre0 [ 253.593142][ T4736] usb 8-1: config 0 interface 41 has no altsetting 0 [ 253.769676][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1050'. [ 253.850471][ T8632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.998633][ T8634] device bond3 entered promiscuous mode [ 254.427675][ T8634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.509025][ T8634] team0: Port device bond3 added [ 254.546335][ T4736] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 254.631460][ T4736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.635029][ T8639] team0: Port device team_slave_1 removed [ 254.640136][ T4736] usb 8-1: Product: syz [ 254.650134][ T4736] usb 8-1: Manufacturer: syz [ 254.654834][ T4736] usb 8-1: SerialNumber: syz [ 254.664688][ T4736] usb 8-1: config 0 descriptor?? [ 254.697257][ T8639] bond3: (slave team_slave_1): Enslaving as an active interface with an up link [ 254.709740][ T4736] CoreChips: probe of 8-1:0.41 failed with error -22 [ 254.742290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 254.990465][ C1] net_ratelimit: 15 callbacks suppressed [ 254.990483][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 255.232370][ T8620] loop1: detected capacity change from 0 to 32768 [ 256.053953][ T8620] XFS (loop1): Mounting V5 Filesystem [ 256.116914][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 256.225490][ T8620] XFS (loop1): Ending clean mount [ 256.332846][ T8684] overlayfs: failed to clone upperpath [ 256.354142][ T4187] XFS (loop1): Unmounting Filesystem [ 256.401459][ T8684] mmap: syz.2.1060 (8684) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 256.429165][ T8687] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1061'. [ 256.458283][ T8687] 8021q: VLANs not supported on ip6gre0 [ 257.243476][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 258.075297][ T4237] usb 8-1: USB disconnect, device number 3 [ 258.328675][ T8724] loop1: detected capacity change from 0 to 4096 [ 258.369994][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 258.428756][ T8724] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 258.546475][ T25] audit: type=1326 audit(2000000001.744:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.5.1072" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74b544ce59 code=0x0 [ 259.323146][ T4237] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 259.337432][ T4237] Bluetooth: hci2: Injecting HCI hardware error event [ 259.345127][ T4202] Bluetooth: hci2: hardware error 0x00 [ 259.373556][ T8755] loop7: detected capacity change from 0 to 256 [ 259.397627][ T8755] exfat: Deprecated parameter 'utf8' [ 259.436966][ T8755] exfat: Bad value for 'errors' [ 259.496492][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 260.622991][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 262.261052][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 263.396155][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 263.875210][ T8828] loop1: detected capacity change from 0 to 2048 [ 263.961354][ T8801] loop7: detected capacity change from 0 to 32768 [ 264.084503][ T8837] device team_slave_1 entered promiscuous mode [ 264.217968][ T8839] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.522718][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 264.634930][ T8801] XFS (loop7): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 265.079305][ T25] audit: type=1800 audit(2000000007.773:55): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1102" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 265.120833][ T8801] XFS (loop7): Metadata corruption detected at xfs_dinode_verify+0x2c9/0xd60, inode 0x1803 dinode [ 265.237512][ T8801] XFS (loop7): Unmount and run xfs_repair [ 265.280598][ T8801] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 265.331765][ T8801] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 265.375512][ T8801] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.431814][ T8801] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 265.470593][ T8801] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 265.518966][ T8801] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.561519][ T8801] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 265.605212][ T8801] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 265.643706][ T8801] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 265.653014][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 265.761912][ T7620] XFS (loop7): Unmounting Filesystem [ 266.434044][ T8866] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1112'. [ 266.449706][ T8868] device syzkaller0 entered promiscuous mode [ 266.775625][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 267.922075][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 267.992235][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.204703][ T4736] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 268.213333][ T4736] Bluetooth: hci4: Injecting HCI hardware error event [ 268.224250][ T4206] Bluetooth: hci4: hardware error 0x00 [ 268.806349][ T8897] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 269.047973][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 269.818365][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 269.899608][ T8904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.938584][ T8911] device bond2 entered promiscuous mode [ 270.042552][ T8911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.054565][ T8921] binder: BINDER_SET_CONTEXT_MGR already set [ 270.064260][ T8921] binder: 8920:8921 ioctl 4018620d 200000000280 returned -16 [ 270.065220][ T8911] team0: Port device bond2 added [ 270.130382][ T8904] team0: Port device team_slave_1 removed [ 270.164124][ T8904] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 270.173431][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 270.183694][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 270.637995][ T8951] device syzkaller0 entered promiscuous mode [ 271.281634][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 271.339412][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 271.365968][ T8954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.471156][ T8954] device macvlan3 entered promiscuous mode [ 271.506310][ T8954] bond3: (slave vti0): refused to change device type [ 271.623762][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1145'. [ 272.418994][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 272.879060][ T25] audit: type=1800 audit(2000000014.974:56): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1152" name="/" dev="fuse" ino=1 res=0 errno=0 [ 272.917963][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 273.197577][ T9010] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 273.210368][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.217844][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.337077][ T9012] tipc: Enabling of bearer rejected, already enabled [ 273.351098][ T9012] netem: change failed [ 273.374152][ T25] audit: type=1326 audit(2000000015.426:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.1.1161" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c22e59 code=0x7ffc0000 [ 273.406337][ T25] audit: type=1326 audit(2000000015.426:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.1.1161" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c22e59 code=0x7ffc0000 [ 273.433875][ T25] audit: type=1326 audit(2000000015.463:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.1.1161" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c22e59 code=0x7ffc0000 [ 273.488467][ T25] audit: type=1326 audit(2000000015.463:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.1.1161" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c22e59 code=0x7ffc0000 [ 273.517361][ T25] audit: type=1326 audit(2000000015.463:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.1.1161" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7faee9c22e59 code=0x7ffc0000 [ 273.542604][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 273.560738][ T25] audit: type=1326 audit(2000000015.463:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.1.1161" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c22e59 code=0x7ffc0000 [ 273.589770][ T25] audit: type=1326 audit(2000000015.463:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.1.1161" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c22e59 code=0x7ffc0000 [ 273.592041][ T25] audit: type=1326 audit(2000000015.463:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.1.1161" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c22e59 code=0x7ffc0000 [ 273.593673][ T25] audit: type=1326 audit(2000000015.463:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.1.1161" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c22e59 code=0x7ffc0000 [ 273.912317][ T9028] loop7: detected capacity change from 0 to 512 [ 273.994840][ T9028] EXT4-fs (loop7): Ignoring removed oldalloc option [ 274.061180][ T9028] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 274.661254][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 275.562965][ T9063] netem: change failed [ 275.573933][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1177'. [ 275.585643][ T9061] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1177'. [ 275.600585][ T9061] device geneve2 entered promiscuous mode [ 275.787700][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 275.998988][ T9085] loop1: detected capacity change from 0 to 1024 [ 276.056102][ T9085] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.065819][ T9087] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1187'. [ 276.205111][ T9085] EXT4-fs warning (device loop1): ext4_rmdir:3243: inode #11: comm syz.1.1186: empty directory 'file0' has too many links (111) [ 276.914196][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 279.631453][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 280.444819][ T9125] device syzkaller0 entered promiscuous mode [ 280.726983][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 281.854307][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 282.046572][ T9143] overlayfs: failed to clone lowerpath [ 282.146763][ T9153] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 282.990861][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 284.106560][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 284.139399][ T9181] device bridge2 entered promiscuous mode [ 284.166703][ T9181] team0: Port device bridge2 added [ 284.827117][ T9184] device bridge3 entered promiscuous mode [ 284.871553][ T9184] team0: Port device bridge3 added [ 284.886516][ T25] kauditd_printk_skb: 25 callbacks suppressed [ 284.886633][ T25] audit: type=1800 audit(2000000026.061:91): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1216" name="bus" dev="ramfs" ino=48020 res=0 errno=0 [ 284.901509][ T9181] bridge0: port 3(team0) entered blocking state [ 284.984273][ T9181] bridge0: port 3(team0) entered disabled state [ 285.233086][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 285.638246][ T9205] loop1: detected capacity change from 0 to 256 [ 285.744802][ T9205] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.785210][ T9205] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 285.806299][ T9205] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 285.915069][ T9219] device syzkaller0 entered promiscuous mode [ 285.923682][ T9219] TC_ACT_REPEAT abuse ? [ 286.370394][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 287.616887][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 288.968142][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 289.467305][ T9277] netem: change failed [ 289.832036][ T9289] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1257'. [ 290.081401][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 290.742847][ T9298] loop7: detected capacity change from 0 to 256 [ 290.807881][ T9298] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 290.952668][ T9298] Dead loop on virtual device ip6_vti0, fix it urgently! [ 291.131915][ T9315] tipc: Enabling of bearer rejected, already enabled [ 291.193155][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 291.449732][ T4731] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 291.881512][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.938259][ T4731] usb 2-1: Using ep0 maxpacket: 16 [ 292.304992][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 292.476206][ T4731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.489450][ T4731] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.764677][ T4731] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 292.777411][ T4731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.809239][ T4731] usb 2-1: config 0 descriptor?? [ 292.852466][ T4731] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 293.238874][ T4235] usb 2-1: USB disconnect, device number 9 [ 293.272465][ T9350] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 293.416775][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 294.453019][ T9376] netlink: 'syz.1.1288': attribute type 11 has an invalid length. [ 294.528596][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 294.633740][ T9385] loop1: detected capacity change from 0 to 512 [ 294.681565][ T9385] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 294.720813][ T9385] EXT4-fs (loop1): orphan cleanup on readonly fs [ 294.752670][ T9385] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 294.826833][ T9385] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 294.878350][ T9385] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.1288: bad orphan inode 768 [ 294.918455][ T9385] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,delalloc,,errors=continue. Quota mode: writeback. [ 294.981706][ T9381] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 295.057212][ T9381] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 295.362748][ T9407] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7620] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9407] [ 295.641250][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 295.920240][ T9410] device bridge2 entered promiscuous mode [ 296.109124][ T9414] netlink: 'syz.5.1298': attribute type 1 has an invalid length. [ 296.482414][ T9415] loop7: detected capacity change from 0 to 32768 [ 296.752254][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 297.483562][ T9415] XFS (loop7): Mounting V5 Filesystem [ 298.083842][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 298.122336][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 298.601333][ T9415] XFS (loop7): Ending clean mount [ 298.779463][ T7620] XFS (loop7): Unmounting Filesystem [ 299.232549][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 300.355014][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 301.451566][ T9469] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.466831][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 302.578642][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 302.761226][ T9482] overlayfs: failed to clone lowerpath [ 302.847780][ T9482] overlayfs: failed to clone lowerpath [ 303.374383][ T9499] netlink: 'syz.1.1319': attribute type 10 has an invalid length. [ 303.416449][ T9499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1319'. [ 303.487346][ T4732] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 303.522734][ T9499] device geneve0 entered promiscuous mode [ 303.547203][ T9499] team0: Port device geneve0 added [ 303.679788][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 303.759736][ T4732] usb 8-1: Using ep0 maxpacket: 32 [ 304.460308][ T4732] usb 8-1: config 0 has no interfaces? [ 304.474866][ T4732] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 304.517191][ T4732] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.555068][ T4732] usb 8-1: config 0 descriptor?? [ 304.791586][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 304.867629][ T4732] usb 8-1: USB disconnect, device number 4 [ 305.903402][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 307.080413][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 308.198746][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1332'. [ 308.212956][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 308.500293][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1332'. [ 308.830957][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1332'. [ 309.190976][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1331'. [ 309.325455][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 310.436376][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 311.548229][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 312.200524][ T9573] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1339'. [ 312.279239][ T9576] netlink: 'syz.7.1340': attribute type 2 has an invalid length. [ 312.659910][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 312.804296][ T9586] netlink: 'syz.1.1341': attribute type 12 has an invalid length. [ 313.570483][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.631291][ T9594] loop1: detected capacity change from 0 to 512 [ 313.771746][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 313.773062][ T9594] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 314.883643][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 315.995427][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 317.107172][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 317.968209][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'. [ 318.219248][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 319.062827][ T9646] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 319.330864][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 319.363037][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 319.732497][ T9649] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 319.771069][ T9649] bond2 (unregistering): Released all slaves [ 320.442673][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 321.091033][ T9699] netlink: 'syz.7.1368': attribute type 10 has an invalid length. [ 321.099107][ T9699] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1368'. [ 321.118986][ T9699] batman_adv: batadv0: Interface deactivated: dummy0 [ 321.162637][ T9699] batman_adv: batadv0: Removing interface: dummy0 [ 321.461496][ T9699] bridge0: port 3(dummy0) entered blocking state [ 321.468110][ T9699] bridge0: port 3(dummy0) entered disabled state [ 321.481495][ T9699] device dummy0 entered promiscuous mode [ 321.500895][ T9699] bridge0: port 3(dummy0) entered blocking state [ 321.507390][ T9699] bridge0: port 3(dummy0) entered forwarding state [ 321.522288][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 321.554434][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 322.019485][ T9710] sch_tbf: burst 1023 is lower than device lo mtu (1550) ! [ 322.137648][ T9715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1373'. [ 322.181980][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1374'. [ 322.209241][ T9718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.280443][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'. [ 322.374746][ T9718] device bond1 entered promiscuous mode [ 322.455404][ T9730] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.1371'. [ 322.666290][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 322.812031][ T9718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.858436][ T9718] team0: Port device bond1 added [ 322.884069][ T9726] device team_slave_1 entered promiscuous mode [ 322.962087][ T9726] team0: Port device team_slave_1 removed [ 322.977541][ T9726] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 322.991638][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 324.146303][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 325.232074][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 325.561958][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1384'. [ 325.639713][ T9768] loop1: detected capacity change from 0 to 1024 [ 326.343823][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 326.968661][ T9780] ip6t_srh: unknown srh invflags 4000 [ 327.455747][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 327.728711][ T9786] loop1: detected capacity change from 0 to 8 [ 328.501636][ T9786] SQUASHFS error: Unable to read inode 0x11f [ 328.567497][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 328.984410][ T9798] ODEBUG: Out of memory. ODEBUG disabled [ 329.179946][ T9808] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1397'. [ 329.215946][ C1] Unknown status report in ack skb [ 329.223892][ T9796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.255706][ T4732] wlan1: authenticate with 08:02:11:00:00:00 [ 329.264056][ T9808] netlink: 'syz.6.1397': attribute type 12 has an invalid length. [ 329.280617][ T4732] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 329.324308][ T9796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.336366][ T4245] wlan1: authenticated [ 329.344308][ T7] mac80211_hwsim hwsim17 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 329.361203][ T9796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.363382][ T4245] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 329.439886][ T9813] netlink: 'syz.6.1400': attribute type 11 has an invalid length. [ 329.470814][ T9796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.491161][ T4245] wlan1: associated [ 329.507567][ T4245] wlan1: cannot understand ECSA IE operating class, 61, ignoring [ 329.534987][ T4245] wlan1: BSS 08:02:11:00:00:00 switches to unsupported channel (0 MHz), disconnecting [ 329.679329][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 329.818396][ T25] audit: type=1326 audit(2000000067.880:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.1.1410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faee9c22e59 code=0x0 [ 330.706880][ T4731] Bluetooth: hci1: command 0x0406 tx timeout [ 330.791151][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 332.881223][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 333.957148][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 333.964652][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.067370][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 335.452473][ T9898] netlink: 'syz.2.1418': attribute type 11 has an invalid length. [ 336.179182][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 336.579038][ T9934] loop1: detected capacity change from 0 to 512 [ 337.320829][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 337.810161][ T9934] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 338.647335][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 338.894588][ T4391] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 339.183284][ T4391] usb 8-1: Using ep0 maxpacket: 32 [ 339.311619][ T4391] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.322139][ T4391] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.498636][ T4391] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.514526][ T4391] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.659025][ T4391] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.683866][ T4391] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.771412][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 339.857568][ T25] audit: type=1326 audit(2000000077.421:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.2.1434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 340.296684][ T9969] xt_TCPMSS: Only works on TCP SYN packets [ 340.444985][ T25] audit: type=1326 audit(2000000077.421:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.2.1434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 340.621511][ T25] audit: type=1326 audit(2000000077.421:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.2.1434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 340.807975][ T25] audit: type=1326 audit(2000000077.421:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.2.1434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 340.883154][ T4391] usb 8-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 340.883158][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 340.883185][ T4391] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.947136][ T25] audit: type=1326 audit(2000000077.421:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.2.1434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 340.979973][ T4391] usb 8-1: Product: syz [ 340.988842][ T4391] usb 8-1: Manufacturer: syz [ 340.993824][ T4391] usb 8-1: SerialNumber: syz [ 341.033341][ T4391] usb 8-1: config 0 descriptor?? [ 341.062070][ T25] audit: type=1326 audit(2000000077.421:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.2.1434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 341.086085][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.119217][ T4391] cdc_acm 8-1:0.0: Zero length descriptor references [ 341.130713][ T4391] cdc_acm: probe of 8-1:0.0 failed with error -22 [ 341.144606][ T25] audit: type=1326 audit(2000000077.421:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.2.1434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 341.257295][ T25] audit: type=1326 audit(2000000077.421:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.2.1434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 341.362068][ T4391] usb 8-1: USB disconnect, device number 5 [ 341.379372][ T25] audit: type=1326 audit(2000000077.421:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.2.1434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 341.423427][ T25] audit: type=1326 audit(2000000077.421:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.2.1434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 341.994984][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 343.106709][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 343.655993][ T9988] Set syz0 is full, maxelem 0 reached [ 343.854989][ T4736] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 343.878151][T10005] device syzkaller0 entered promiscuous mode [ 344.111711][ T4736] usb 2-1: Using ep0 maxpacket: 8 [ 344.219013][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 344.411545][ T4736] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 344.472140][ T4736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.708415][ T4736] usb 2-1: Product: syz [ 344.713371][ T4736] usb 2-1: Manufacturer: syz [ 344.718075][ T4736] usb 2-1: SerialNumber: syz [ 344.741835][ T4736] usb 2-1: config 0 descriptor?? [ 344.935513][T10020] overlayfs: missing 'lowerdir' [ 345.020354][ T4736] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 345.093198][T10027] loop7: detected capacity change from 0 to 256 [ 345.137371][T10027] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 345.245085][T10031] overlayfs: failed to clone lowerpath [ 345.330385][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 345.341043][T10027] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 345.518662][T10027] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 346.442216][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 346.845995][T10042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.279503][T10054] netlink: 'syz.5.1462': attribute type 1 has an invalid length. [ 348.629588][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 348.745550][ T4736] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 348.757754][ T4736] usb 2-1: USB disconnect, device number 10 [ 348.864335][T10071] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 349.003737][T10071] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 349.831770][T10099] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[10103] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10099] [ 350.377927][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 350.490562][T10110] tipc: Started in network mode [ 350.498681][T10110] tipc: Node identity 080211000001, cluster identity 4711 [ 350.511666][T10110] tipc: Enabled bearer , priority 0 [ 350.561270][T10114] loop7: detected capacity change from 0 to 256 [ 350.588826][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 351.488238][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 351.664581][ T4391] tipc: Node number set to 134418688 [ 351.783138][T10132] device syzkaller0 left promiscuous mode [ 352.599981][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 353.711785][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 354.823645][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 355.696774][T10165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.935393][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 356.537178][T10172] netlink: 79 bytes leftover after parsing attributes in process `syz.7.1500'. [ 357.077348][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 357.699973][T10181] IPVS: dh: FWM 3 0x00000003 - no destination available [ 357.707518][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1500'. [ 357.722591][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1500'. [ 358.179869][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 358.642702][T10182] netlink: 'syz.7.1500': attribute type 11 has an invalid length. [ 359.018196][T10213] tipc: Enabled bearer , priority 0 [ 359.270992][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 359.763957][T10213] device syzkaller0 entered promiscuous mode [ 359.783638][T10213] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 359.808152][T10217] capability: warning: `syz.2.1516' uses deprecated v2 capabilities in a way that may be insecure [ 359.838826][T10213] tipc: Resetting bearer [ 360.098937][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 360.131476][T10229] sctp: failed to load transform for md5: -4 [ 360.143651][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 360.158517][T10232] sctp: failed to load transform for md5: -4 [ 360.164860][T10217] sctp: failed to load transform for md5: -2 [ 360.382792][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 360.489673][ T4391] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 360.502290][T10257] overlayfs: failed to clone upperpath [ 360.994773][ T4391] usb 2-1: unable to get BOS descriptor or descriptor too short [ 361.387605][ T4391] usb 2-1: config 2 has an invalid interface number: 101 but max is 0 [ 361.404013][ T4391] usb 2-1: config 2 has no interface number 0 [ 361.463185][ T4391] usb 2-1: config 2 interface 101 has no altsetting 0 [ 361.494611][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 362.606386][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 363.160766][T10277] syz.6.1529 (10277) used greatest stack depth: 17240 bytes left [ 363.271987][T10287] tipc: Enabling of bearer rejected, already enabled [ 363.306197][T10287] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 363.718214][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 364.064664][ T4391] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=27.4c [ 364.083022][ T4391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.219697][ T4391] usb 2-1: can't set config #2, error -71 [ 364.264281][ T4391] usb 2-1: USB disconnect, device number 11 [ 364.443150][T10321] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10321] [ 364.830012][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 366.263267][T10345] overlayfs: failed to clone lowerpath [ 366.690644][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 368.454137][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 368.726365][T10365] sctp: failed to load transform for md5: -2 [ 369.038798][T10378] tipc: Started in network mode [ 369.043755][T10378] tipc: Node identity 7e609ba344f3, cluster identity 4711 [ 369.056487][T10378] tipc: Enabled bearer , priority 0 [ 369.078641][T10375] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 369.079330][T10378] device syzkaller0 entered promiscuous mode [ 369.124469][T10378] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 369.157710][T10378] tipc: Resetting bearer [ 369.176856][T10374] tipc: Resetting bearer [ 369.192393][T10374] tipc: Disabling bearer [ 369.533974][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 370.645894][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 371.686259][T10403] loop7: detected capacity change from 0 to 64 [ 371.757559][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 372.553098][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1558'. [ 372.869358][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 373.422310][T10428] tipc: Enabling of bearer rejected, already enabled [ 373.981254][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 375.093030][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 376.574287][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 377.658889][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 378.770602][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 379.882380][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 380.953846][T10510] tipc: Enabling of bearer rejected, already enabled [ 380.994301][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 382.106032][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 383.218296][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 383.259903][T10541] loop7: detected capacity change from 0 to 2048 [ 383.471917][T10552] blk_update_request: I/O error, dev loop15, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.329795][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 384.879957][T10563] tipc: Enabling of bearer rejected, already enabled [ 384.901408][T10552] isofs_fill_super: bread failed, dev=loop15, iso_blknum=16, block=32 [ 385.441726][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 387.259227][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 388.349441][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 388.821016][T10579] loop7: detected capacity change from 0 to 32768 [ 389.461228][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 390.573067][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 390.988609][T10659] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1631'. [ 391.684846][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 393.062968][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 393.101257][T10668] overlayfs: missing 'lowerdir' [ 393.119814][T10677] tipc: Enabling of bearer rejected, already enabled [ 393.266039][T10677] syzkaller0: mtu less than device minimum [ 394.165318][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 395.277123][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 395.908260][T10712] PKCS7: Unknown OID: [4] 0.0 [ 395.913640][T10712] PKCS7: Only support pkcs7_signedData type [ 396.388736][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 397.500709][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 397.933075][T10737] binder: BINDER_SET_CONTEXT_MGR already set [ 397.981073][T10737] binder: 10730:10737 ioctl 4018620d 200000000040 returned -16 [ 398.612354][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 399.819976][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 399.961678][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.921527][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 402.033447][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 402.339814][T10785] syz.1.1664 (10785): drop_caches: 2 [ 402.763788][T10800] loop1: detected capacity change from 0 to 512 [ 402.840549][T10800] EXT4-fs (loop1): Ignoring removed nobh option [ 402.922054][T10800] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 402.940957][T10800] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1673: attempt to clear invalid blocks 1 len 1 [ 402.987098][T10800] EXT4-fs (loop1): Remounting filesystem read-only [ 402.994060][T10800] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 403.014665][T10800] EXT4-fs (loop1): Remounting filesystem read-only [ 403.021673][T10800] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1673: invalid indirect mapped block 1819239214 (level 0) [ 403.052281][T10800] EXT4-fs (loop1): Remounting filesystem read-only [ 403.058932][T10800] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1673: invalid indirect mapped block 1819239214 (level 1) [ 403.075407][T10800] EXT4-fs (loop1): Remounting filesystem read-only [ 403.083044][T10800] EXT4-fs (loop1): 1 truncate cleaned up [ 403.088751][T10800] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 403.145156][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 404.257038][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 404.409088][T10814] loop1: detected capacity change from 0 to 4096 [ 405.295561][T10825] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1681'. [ 405.321319][T10825] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1681'. [ 405.346268][T10814] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 405.368885][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 405.390167][T10814] ntfs3: loop1: Failed to load $Extend. [ 405.420476][T10821] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1679'. [ 405.443524][T10827] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1681'. [ 406.480714][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 407.592476][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 407.829838][T10847] PKCS7: Unknown OID: [4] 0.0 [ 407.834599][T10847] PKCS7: Only support pkcs7_signedData type [ 407.889408][T10844] loop1: detected capacity change from 0 to 512 [ 408.704406][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 409.268627][T10844] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 409.366772][T10844] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1685: invalid indirect mapped block 9 (level 0) [ 409.472347][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1691'. [ 409.508063][T10860] device dummy0 entered promiscuous mode [ 409.516399][T10860] device macvtap1 entered promiscuous mode [ 409.530679][T10860] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 409.540864][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 409.564986][T10844] EXT4-fs (loop1): 1 truncate cleaned up [ 409.586485][T10844] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 409.816116][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 410.204901][ T25] kauditd_printk_skb: 30 callbacks suppressed [ 410.204917][ T25] audit: type=1800 audit(2000000143.217:133): pid=10870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1685" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 410.927987][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 412.039762][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 413.151650][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 414.263408][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 415.375302][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 416.487042][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 417.371287][T10918] syz.1.1716 (10918): drop_caches: 2 [ 417.476236][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1711'. [ 417.591392][T10922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.599310][T10922] IPv6: NLM_F_CREATE should be set when creating new route [ 417.606674][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 417.615682][T10922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.682892][T10929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1711'. [ 417.758337][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1711'. [ 417.792903][T10930] tipc: Enabling of bearer rejected, already enabled [ 417.837166][T10914] kvm [10913]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x10000003c [ 417.847076][T10914] kvm [10913]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 417.858784][T10914] kvm [10913]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xf0b3 [ 417.871452][T10914] kvm [10913]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xe261, nop [ 418.710690][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 419.822538][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 420.934373][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 421.385404][T10965] loop7: detected capacity change from 0 to 512 [ 422.046214][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 422.141126][T10965] EXT4-fs (loop7): Ignoring removed nobh option [ 422.225744][T10965] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 422.284328][T10965] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.1722: attempt to clear invalid blocks 1 len 1 [ 422.313497][T10965] EXT4-fs (loop7): Remounting filesystem read-only [ 422.320165][T10965] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 422.335005][T10965] EXT4-fs (loop7): Remounting filesystem read-only [ 422.341622][T10965] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1722: invalid indirect mapped block 1819239214 (level 0) [ 422.357210][T10965] EXT4-fs (loop7): Remounting filesystem read-only [ 422.363758][T10965] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1722: invalid indirect mapped block 1819239214 (level 1) [ 422.385407][T10965] EXT4-fs (loop7): Remounting filesystem read-only [ 422.394082][T10965] EXT4-fs (loop7): 1 truncate cleaned up [ 422.399826][T10965] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 422.516258][T10976] tipc: Enabling of bearer rejected, already enabled [ 422.910347][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1726'. [ 423.158018][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 423.604933][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1726'. [ 423.624009][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1726'. [ 424.269964][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 425.401360][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 425.892636][T11017] loop7: detected capacity change from 0 to 512 [ 425.947279][T11017] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 426.711775][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 426.854217][ T25] audit: type=1326 audit(2000000158.735:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1739" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 427.225180][T11017] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 427.305733][ T25] audit: type=1326 audit(2000000158.763:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1739" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 427.340428][ T25] audit: type=1326 audit(2000000159.240:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1739" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 427.373574][T11017] EXT4-fs (loop7): 1 truncate cleaned up [ 427.568111][T11017] EXT4-fs (loop7): mounted filesystem without journal. Opts: data=journal,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 427.609973][ T25] audit: type=1326 audit(2000000159.240:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1739" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 427.992259][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 429.265708][ T25] audit: type=1326 audit(2000000159.250:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1739" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 429.281720][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 429.362182][ T25] audit: type=1326 audit(2000000159.250:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1739" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 430.373560][ T25] audit: type=1326 audit(2000000159.250:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1739" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fbf7b17fe59 code=0x7ffc0000 [ 430.427744][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 430.564342][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'. [ 430.642722][T11060] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.651617][T11060] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.660495][T11060] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.669245][T11060] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.539706][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 432.187321][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1752'. [ 432.239245][T11080] device dummy0 entered promiscuous mode [ 432.256005][T11080] device macvtap1 entered promiscuous mode [ 432.273158][T11080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 432.292202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 432.370742][T11088] loop7: detected capacity change from 0 to 4096 [ 432.435926][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 432.651231][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 433.053158][T11090] ip6t_srh: unknown srh invflags 4000 [ 433.153763][T11088] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 433.222932][T11088] ntfs3: loop7: Failed to load $Extend. [ 433.763132][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 434.874866][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 434.915817][T11129] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 434.976187][T11129] batman_adv: batadv0: Interface deactivated: dummy0 [ 435.003870][T11129] batman_adv: batadv0: Removing interface: dummy0 [ 435.011077][T11129] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 435.022447][T11129] device bridge_slave_0 left promiscuous mode [ 435.029979][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.040987][T11129] device bridge_slave_1 left promiscuous mode [ 435.060366][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.087315][T11129] bond0: (slave bond_slave_0): Releasing backup interface [ 435.135650][T11129] device bond_slave_0 left promiscuous mode [ 435.189097][T11129] device team_slave_0 left promiscuous mode [ 435.907598][T11129] team0: Port device team_slave_0 removed [ 435.940654][T11129] device team_slave_1 left promiscuous mode [ 435.986803][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 436.004020][T11129] team0: Port device team_slave_1 removed [ 436.055622][T11129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.104360][T11129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.126280][T11129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.222004][T11129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.279609][T11129] device macvlan2 left promiscuous mode [ 436.321814][T11129] device bond1 left promiscuous mode [ 436.462241][T11129] team0: Port device macvlan2 removed [ 436.945335][T11129] bond2: (slave bridge1): Releasing active interface [ 437.093409][T11129] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 437.098655][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 438.210451][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 439.260576][T11184] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1785'. [ 439.322309][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 440.434094][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 441.228514][T11206] loop7: detected capacity change from 0 to 8192 [ 441.411117][T11206] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 441.420439][T11206] REISERFS (device loop7): using ordered data mode [ 441.426937][T11206] reiserfs: using flush barriers [ 441.446210][T11206] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 441.467765][T11206] REISERFS (device loop7): checking transaction log (loop7) [ 441.489642][T11206] REISERFS (device loop7): Using r5 hash to sort names [ 441.497187][T11206] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 441.556516][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 441.570701][T11212] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 442.657696][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 443.769483][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 444.881477][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 445.913459][T11250] device bridge_slave_1 entered promiscuous mode [ 446.003838][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 446.556370][T11250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.566107][T11250] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 447.115695][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 448.548588][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 449.670948][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 450.352058][T11277] loop7: detected capacity change from 0 to 4096 [ 450.782511][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 450.801329][T11277] NILFS (loop7): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0 [ 450.811208][T11277] NILFS (loop7): error -5 getting root inode [ 450.819771][T11283] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 451.905078][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 452.234268][T11305] loop7: detected capacity change from 0 to 512 [ 452.564877][T11314] tipc: Enabling of bearer rejected, already enabled [ 452.656656][T11314] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 452.736045][T11305] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 452.768998][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1819'. [ 452.820430][T11321] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.829826][T11321] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.838653][T11321] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.847543][T11321] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.006139][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 453.816906][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1819'. [ 453.854432][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1819'. [ 454.118050][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 455.222949][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'. [ 455.232075][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 455.388772][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'. [ 455.416814][T11340] input: syz1 as /devices/virtual/input/input12 [ 455.519661][T11355] loop1: detected capacity change from 0 to 256 [ 455.571233][T11355] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 455.620529][T11355] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 455.657047][T11355] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 456.352394][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 457.067703][T11388] loop1: detected capacity change from 0 to 512 [ 457.086683][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1836'. [ 457.112333][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1836'. [ 457.170947][T11388] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1834: missing EA_INODE flag [ 457.213623][T11388] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1834: error while reading EA inode 12 err=-117 [ 457.453469][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 457.464998][T11401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.547909][T11388] EXT4-fs (loop1): 1 orphan inode deleted [ 458.554296][T11388] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000001,nogrpid,,errors=continue. Quota mode: writeback. [ 458.568632][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 459.378844][T11417] TC_ACT_REPEAT abuse ? [ 459.687892][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 459.973848][T11426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.319752][T11436] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 460.577778][T11435] capability: warning: `syz.1.1849' uses 32-bit capabilities (legacy support in use) [ 460.799709][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 461.900836][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 462.624880][T11457] tipc: Enabling of bearer rejected, already enabled [ 462.652670][T11457] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 462.683653][T11457] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 463.012749][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 463.512773][T11460] loop1: detected capacity change from 0 to 256 [ 464.678548][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 464.902080][T11475] overlayfs: failed to clone lowerpath [ 465.760068][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 468.315749][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 468.850838][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 469.039557][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 469.256065][ T4391] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 469.940234][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 470.025784][ T4391] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 470.054465][ T4391] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.136079][ T4391] usb 8-1: Product: syz [ 470.179536][ T4391] usb 8-1: Manufacturer: syz [ 470.226650][ T4391] usb 8-1: SerialNumber: syz [ 470.331018][ T4391] usb 8-1: config 0 descriptor?? [ 470.710159][ T4391] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 471.051919][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 472.163787][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 472.252414][T11515] tipc: Enabling of bearer rejected, failed to enable media [ 472.299641][T11517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1873'. [ 472.319915][T11517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1873'. [ 473.275541][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 473.671729][ T4391] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 473.761683][ T4391] usb 8-1: USB disconnect, device number 6 [ 474.301245][T11540] overlayfs: failed to clone upperpath [ 474.387594][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 475.499171][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 476.611133][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 477.722826][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 478.018988][T11555] loop7: detected capacity change from 0 to 32768 [ 478.133319][T11577] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 478.834750][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 478.985129][T11555] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.1887 (11555) [ 479.041548][T11555] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 479.068543][T11555] BTRFS info (device loop7): turning off barriers [ 479.081935][T11555] BTRFS info (device loop7): turning on async discard [ 479.107923][T11555] BTRFS info (device loop7): doing ref verification [ 479.125697][T11555] BTRFS info (device loop7): using free space tree [ 479.150527][T11555] BTRFS info (device loop7): has skinny extents [ 479.946533][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 480.997784][T11555] BTRFS error (device loop7): open_ctree failed: -12 [ 481.069148][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 482.170120][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 483.282043][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 483.809341][T11618] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1900'. [ 483.876010][T11618] bridge0: port 3(dummy0) entered disabled state [ 483.908093][T11618] device dummy0 left promiscuous mode [ 483.929114][T11618] bridge0: port 3(dummy0) entered disabled state [ 484.010579][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1906'. [ 484.404461][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 485.505718][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 486.617413][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 487.545944][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 487.729334][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 488.841051][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 489.612866][T11680] tipc: Enabled bearer , priority 0 [ 489.676899][T11681] device syzkaller0 entered promiscuous mode [ 489.753891][T11680] tipc: Resetting bearer [ 489.769060][T11676] tipc: Resetting bearer [ 489.782108][T11676] tipc: Disabling bearer [ 489.953012][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 491.064685][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 492.591001][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 493.634637][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1931'. [ 493.715994][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 494.827892][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 495.950301][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 497.062369][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 498.163814][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 498.240302][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1949'. [ 498.823698][T11792] loop1: detected capacity change from 0 to 1024 [ 498.882620][T11792] EXT4-fs (loop1): Ignoring removed nobh option [ 498.904769][T11792] EXT4-fs (loop1): inline encryption not supported [ 498.921360][T11792] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 498.974769][T11795] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:00:00:00:00:00 [ 498.991392][T11792] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 498.991392][T11792] [ 499.275130][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 500.124720][T11800] loop1: detected capacity change from 0 to 512 [ 500.397610][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 501.359525][T11814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1958'. [ 501.498863][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 502.621266][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 503.152316][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1965'. [ 503.733175][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 504.918395][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 506.042350][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 507.154085][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 508.266240][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 509.367036][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 510.489670][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 511.328267][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1980'. [ 511.951947][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 512.330034][T11942] loop1: detected capacity change from 0 to 2048 [ 512.452370][T11942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 512.542484][T11942] program syz.1.1989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.055335][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 513.857734][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1995'. [ 514.156422][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 514.371062][T11954] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1996'. [ 514.380068][T11954] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1996'. [ 514.401447][ T4206] block nbd0: Receive control failed (result -1) [ 515.279076][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 515.935510][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2000'. [ 516.390772][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 517.157617][T11980] tipc: Enabled bearer , priority 0 [ 517.343616][T11984] device syzkaller0 entered promiscuous mode [ 517.492030][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 517.583341][T11980] tipc: Resetting bearer [ 517.699271][T11988] tc_dump_action: action bad kind [ 517.757686][T11979] tipc: Resetting bearer [ 517.786445][T11979] tipc: Disabling bearer [ 517.855739][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2005'. [ 518.262018][T11990] netlink: 'syz.6.2005': attribute type 7 has an invalid length. [ 518.269810][T11990] netlink: 'syz.6.2005': attribute type 8 has an invalid length. [ 518.614394][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 519.726330][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 520.838055][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 521.949990][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 523.519420][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 524.590512][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 525.712970][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 526.814148][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 527.936675][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 529.037772][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 530.149591][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 530.907900][T12123] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 530.916794][T12123] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 531.272082][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 532.715394][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 533.171878][T12100] loop1: detected capacity change from 0 to 2048 [ 533.890982][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 533.968088][T12100] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 535.024647][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 538.559572][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 538.596325][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 538.615906][T12162] overlayfs: failed to clone upperpath [ 538.755571][T12175] Cannot find del_set index 1 as target [ 539.728543][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 540.850962][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 541.952316][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 543.063859][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 544.140398][T12219] IPv6: NLM_F_CREATE should be specified when creating new route [ 544.148351][T12219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 544.155642][T12219] IPv6: NLM_F_CREATE should be set when creating new route [ 544.186342][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 544.342322][T12221] x_tables: duplicate underflow at hook 1 [ 545.287601][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 546.399304][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 546.670324][T12231] futex_wake_op: syz.2.2069 tries to shift op by 144; fix this program [ 546.701475][T12231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2069'. [ 547.511324][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 548.633638][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 549.734876][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 550.857278][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 550.958202][T12263] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2076'. [ 550.967514][T12263] netlink: get zone limit has 8 unknown bytes [ 551.958521][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 552.023009][T12261] virtio-fs: tag not found [ 553.080918][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 553.934473][T12285] hub 8-0:1.0: USB hub found [ 553.945733][T12285] hub 8-0:1.0: 1 port detected [ 554.267090][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 555.551471][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 556.436779][T12295] loop7: detected capacity change from 0 to 32768 [ 556.662432][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 557.784884][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 558.354622][T12295] XFS (loop7): Mounting V5 Filesystem [ 558.610676][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2091'. [ 558.886009][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 559.231103][T12295] XFS (loop7): log mount failed [ 559.877346][T12336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2093'. [ 559.997771][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 561.109661][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 562.232077][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 562.494183][T12377] 9pnet_virtio: no channels available for device syz [ 562.784569][T12377] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2104'. [ 563.333378][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 563.522323][T12387] IPv6: sit2: Disabled Multicast RS [ 564.303383][T12387] loop7: detected capacity change from 0 to 2048 [ 564.445145][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 564.547048][T12268] loop7: p2 p3 p7 [ 566.068458][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 566.276289][T12387] loop7: p2 p3 p7 [ 566.532302][T12315] udevd[12315]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 566.953176][T12268] udevd[12268]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 567.017131][T12403] udevd[12403]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 567.181862][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 567.230501][T12315] udevd[12315]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 567.240949][T12403] udevd[12403]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 567.254501][T12408] fuse: Bad value for 'fd' [ 567.267142][T12268] udevd[12268]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 568.304457][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 569.405525][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 569.482496][T12426] loop7: detected capacity change from 0 to 40427 Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.