last executing test programs: 15.011859273s ago: executing program 4 (id=957): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, 0x0}, 0x20) 10.45197426s ago: executing program 2 (id=964): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_aout(r1, 0x0, 0xffffffdb) 9.244461667s ago: executing program 3 (id=966): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000341200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.948282301s ago: executing program 1 (id=967): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') 8.886389486s ago: executing program 2 (id=968): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000400000000000009072e272f181d98681ab31ac7f6a98df444cf02ee278adfe0f30dc64b941dd610d43248944561342fee6789884c6e1bffbd79d7ffc14656696ab0134ec589276eee34ea4a0da457d059d4af12cf5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r8, r7, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r9, 0x5437, 0x200000000000000) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) 8.886238766s ago: executing program 3 (id=969): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) 8.776705355s ago: executing program 1 (id=970): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x22, 0x2, 0x2) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mknod$loop(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0) 8.703246191s ago: executing program 3 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x581}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}]}, 0x48}}, 0x8000) 6.567113723s ago: executing program 3 (id=973): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0xa0, &(0x7f0000000200)="$eJzs0TuKAkEUBdDbPTDMJL2BCWYHrkHXYmhopAi6IbfiEkyNDExNSqRt8BcZ+IFzoKBeXQouvNV++ZcmKfOklLJIqxyNJ9NRbtXd5ftOyGfplvmT5L9p5+0g6SepTvl6Nxt25+vye/WKzgAAwGPq9K7ns4fN7/MbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXQwAAAP//6JwZpA==") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) 6.566313623s ago: executing program 0 (id=974): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r0, 0x0, 0xffffffff}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) write$tun(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="604e28ec01da21fffe8000000000000000000000000000bb200100000000000000000000000000003c040402bc700900fc000000000000000000000000000001200000000000000000000000000000010204040200200101fe880000000000000000000000000001ff0100000000000000000000000000010804000000000000c2040000000805020000c20480000000c204000000090502000cc204000000022c08020500000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000000000000000000001ff0100000000000000000000000000012b0c000000000000c910fe80000000000000000000000000003607280000000008042a740700000000000000000000000000008008000000000000000900000000000000c910fe8000000000000000000000000000aa040110c90000000000000000000000000000000000000000000001"], 0x202) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @bcast, @bcast]}, 0x40) 6.273228736s ago: executing program 1 (id=975): syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file1\x00', 0xc20d, &(0x7f0000003240)=ANY=[], 0x1, 0x360, &(0x7f0000000400)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000100000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x40}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r6) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd000000}) 5.996020249s ago: executing program 4 (id=976): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1200) 5.287745075s ago: executing program 1 (id=977): socketpair$unix(0x1, 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$kcm(0x21, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x207, 0xa, 0x4}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r7, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0xc0, 0xda, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x1ff, 0x1, 0x1, {0x22, 0x243}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x24}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xb, 0x4, 0x6}}]}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x17e, &(0x7f0000000780)={0x5, 0xf, 0x17e, 0x3, [@generic={0x7e, 0x10, 0x4, "5f077a79dd930903715d6a999dcb250632f84a514f36df8289f3ac7e7ad9b49dcd4d1516247c5d7d539ef74d88cae9b83469f53f8a5e7dfc9c5ed349c48c8a99a585a5e29e023716fc4e5bbf1bfd76215235fdb79ecc057bd4b44923d2f96fd41b4a1c21f64a60f9e19ec51e413bc46a01532685890b44c443317b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0xa, 0x1}, @generic={0xf1, 0x10, 0xa, "57d2b17f5de941cdb6efd9a46beef20fba844a773afaec0eba102324c39cdef1aa78d14a89cc3c3fdfac770b4a215baa8d93a627dcee441b7167ae3b387312a02f476ad32d2c46b491c7b78783e1777c3c62ddf40e24fd8c70ae2b6d6ab8d02a077546ce11881f031e83f354e3cf50462fcee9a5dc1fa1f40d7bb3d62c740073c94e1f1fab27f005f63d8d82f07222efc9f8b24cce946d015a7252bb54934cd6e1179db252246f15c73da0b6f0a42dfb0171b7d9672497b238e5ac1f79a0dc91c24658ab699320539f693b811031a1541052a44d400a999e5d44c054039b2c221d5c30f235a50f7fa27ab64a0b0b"}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1007}}]}) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000100)='security.', 0x0, &(0x7f0000000480)='+.\x00', 0x0]}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 5.23718265s ago: executing program 2 (id=978): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffa8, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.23463318s ago: executing program 0 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) listen(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000027c0000000039a0040008000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 5.2255312s ago: executing program 3 (id=980): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') 4.848007461s ago: executing program 2 (id=981): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_aout(r1, 0x0, 0xffffffdb) 4.126916389s ago: executing program 0 (id=982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.749315899s ago: executing program 4 (id=983): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.603911081s ago: executing program 0 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) 2.916420706s ago: executing program 4 (id=985): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x22, 0x2, 0x2) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mknod$loop(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0) 2.069030394s ago: executing program 0 (id=986): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, 0x0}, 0x20) 2.066973525s ago: executing program 2 (id=987): syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file1\x00', 0xc20d, &(0x7f0000003240)=ANY=[], 0x1, 0x360, &(0x7f0000000400)="$eJzs3c9rM0UYwPEnaZI3yUubHERRkA72opeljZ7FIC0IAUvbiK0gbNuNhqxJyYZqRGx78irePQkeSm8WPBS0/0Av3vQigrdeBA/2oK7sr2azSZo2Jsa3/X6gZDIzz+5OZlKeTbvZy7c//6BWsbSK3pJ4WklMRORKJC9xCcT8x7hbTknYobz0+Pcfn1/fLKe9CrVS3Hi5oJSam//uw08yfrezR3KRf/fyt8KvF09fPHv598b7VUtVLVVvtJSuths/t/Rt01C7VaumKbVqGrplqGrdMppe+zf+dszG3l5b6fXd2exe07Aspdfbqma0VauhWs220t/Tq3WlaZqazQqGKR+vrenFEYN3xnwwmJBms6jPiEimp6V8PJUDAgAAUxXN/+NOSj9K/r8lc6XS8ppyOnfy/5MXzluP3zqd8/P/s1S//P+Vn7xtdeX/zulEJ/9veOcHleH5/5dyh/y/NyN6WEbO//MTOBiMZj7VUxXreubk/1n//es6eudk0S2Q/wMAAAAAAAAAAAAAAAAAAAAA8CS4su2cbdu54DH46VxC4D/HvTRo/h+JSNqZfZv5v8/WN7ck7V6458yx+dl+eb/sPfodzkXEFOMvO8pZG8GVR8qRl+/NAz/+YL8847YUK1J14mVJcpJ311Mo3rZX3igtLymPH399mVI2HF+QnDwVjv/WXZ1OfKE73t9/Sl5cCMVrkpMfdqQhpuy6kZ39f7qk1OtvliLxGbefiPzyn08KAAAAAABjpqlrfc/fNW1Qu/ctI8WK+zGRIYuSkz/7n98v9j0/T+SeS0x79AAAAAAAPAxW++OaLnGj6RZMs18hIwObxlBIdNUkRaRv51SkJnnTlmdCI7zt8aTEu4PJvx3XV8Grepeo4B8pnAO/bvLvqCLhzkHd8C0H43drYonRpyl2KO4COAw3xeUW4YnIwVvzToXq23lh4HaOokMOPjZKDXidZbV3O/EbVkKyp8aOjbYAnvni6z/G9wZ59dSf7Y+Gdz4yDftAbjMpkYKzi96m5ER/6QAAAACYik7SH9S8Fm4O30gkfLMc/nIPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAYTeQr/SKFaY8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+L/4JwAA///tT/As") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000100000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x40}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r6) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd000000}) 1.005899089s ago: executing program 3 (id=988): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000400000000000009072e272f181d98681ab31ac7f6a98df444cf02ee278adfe0f30dc64b941dd610d43248944561342fee6789884c6e1bffbd79d7ffc14656696ab0134ec589276eee34ea4a0da457d059d4af12cf5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r8, r7, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r9, 0x5437, 0x200000000000000) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) 1.00449203s ago: executing program 4 (id=989): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) write$tun(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x202) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @bcast, @bcast]}, 0x40) 171.142447ms ago: executing program 1 (id=990): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="82efaa81fd9b", 0x6}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 155.634268ms ago: executing program 0 (id=991): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x7, 0x2, 0x10000, 0x4, 0x3, 0x5, 0x8, 0x7, 0x5, 0x6, 0x2, 0x1, 0x401, 0x1, 0x6, 0x101, 0x6, 0x7f, 0x3, 0x9, 0x3, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe62, 0x3, 0x2007f, 0x4085, 0xffffffff, 0xfffffff8]}) 85.809083ms ago: executing program 2 (id=992): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x200003, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f00000002c0)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES64=r0]) 54.511006ms ago: executing program 4 (id=993): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000002"], 0x1, 0x168, &(0x7f0000000580)="$eJzs28tO6lAUxvGvUK7nxhGdGAckDnQiFYgXZvooBCohFiXiBGJieBTfTxN9AWuoUNMyMCHSKv3/Rvtjpey1STasCQKQWBVVZMhQZhp28qX7shF3SwAi4kp6dQEkU/o57g4AxOPpXBpIeny5ayudWZgPpvWzeT2VDdTMaX0ibZuzupFTPjxfPEh78+eNgqRC8P0nUtGvFxf3n0j7u/P9f+m3/uiv/qmk/9qY1Tv+81tfNBUByWCoGs6BF1K66Dn2oZ8zXq75Oevleig3/JzzcrV97XRWdQQAS0p9cv/Toftvhu4/gJ9rOBpfthzHvlnHRVaR7PX+Sbrudzgyi8QsTK10i7i/mQCsmnXbH1jD0fig12917a59VT+tN48bR7WTpuVN/lZw/gewPj5+9OPuBAAAAAAAAAAAAAAALKuszbhbAAAAABCRKP6oFPcZAQAAAAAAAAAAAAAAAAAAgHXxFgAA//+ezCIL") ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffffff, 0x0, 0x81000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) 0s ago: executing program 1 (id=994): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x80048a, &(0x7f0000000280)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708"], 0x7, 0x2ac, &(0x7f0000000a40)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.105243][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.113995][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.123890][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.132834][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.141914][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.150373][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.168115][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.179473][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.189739][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.200127][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.209007][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.219777][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.229252][ T4185] device veth0_vlan entered promiscuous mode [ 75.248886][ T4194] device veth0_vlan entered promiscuous mode [ 75.266214][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.280845][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.292114][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.312187][ T4194] device veth1_vlan entered promiscuous mode [ 75.326535][ T4186] device veth0_macvtap entered promiscuous mode [ 75.337148][ T4185] device veth1_vlan entered promiscuous mode [ 75.345020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.354686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.363972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.373556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.383146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.401503][ T4186] device veth1_macvtap entered promiscuous mode [ 75.442448][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.453001][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.462247][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.471530][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.482448][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.491332][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.500110][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.526450][ T4185] device veth0_macvtap entered promiscuous mode [ 75.546289][ T4194] device veth0_macvtap entered promiscuous mode [ 75.560823][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.579147][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.593241][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.603561][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.614223][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.623744][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.632605][ T4184] device veth0_vlan entered promiscuous mode [ 75.642054][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.659630][ T4185] device veth1_macvtap entered promiscuous mode [ 75.671385][ T4194] device veth1_macvtap entered promiscuous mode [ 75.681321][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.690597][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.701045][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.709931][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.727829][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.753956][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.764019][ T4184] device veth1_vlan entered promiscuous mode [ 75.776333][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.791193][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.811865][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.820418][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.841524][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.852571][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.861875][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.872096][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.895034][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.905936][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.919594][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.933987][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.945471][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.963667][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.976053][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.995036][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.007035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.016099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.025783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.035205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.052114][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.063098][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.075390][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.090704][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.103509][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.120269][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.134917][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.151230][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.168336][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.179887][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.190923][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.200828][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.213278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.222437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.232014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.241517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.258318][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.269913][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.279741][ T4249] Bluetooth: hci1: command 0x040f tx timeout [ 76.280336][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.286399][ T4249] Bluetooth: hci0: command 0x040f tx timeout [ 76.301792][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.302060][ T4249] Bluetooth: hci4: command 0x040f tx timeout [ 76.317600][ T4249] Bluetooth: hci2: command 0x040f tx timeout [ 76.324157][ T4249] Bluetooth: hci3: command 0x040f tx timeout [ 76.362469][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.372850][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.474204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.484169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.494215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.503565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.514599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.523681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.535450][ T4184] device veth0_macvtap entered promiscuous mode [ 76.573268][ T4187] device veth0_vlan entered promiscuous mode [ 76.590447][ T4184] device veth1_macvtap entered promiscuous mode [ 76.610036][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.619733][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.623054][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.639197][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.649836][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.660495][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.671372][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.683079][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.695434][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.707784][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.719761][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.731374][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.742250][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.752924][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.764846][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.778426][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.786585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.795357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.803797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.812797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.822464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.832838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.848121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.879519][ T4187] device veth1_vlan entered promiscuous mode [ 76.888632][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.901584][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.911040][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.922033][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.974865][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.988092][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.007395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.057580][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.066260][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.087736][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.095820][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.103001][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.111802][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.114088][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.129447][ T4187] device veth0_macvtap entered promiscuous mode [ 77.151811][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.161389][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.170503][ T1288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.193496][ T1288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.210770][ T4187] device veth1_macvtap entered promiscuous mode [ 77.221663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.235989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.289724][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.303800][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.314471][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.329653][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.343097][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.355773][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.372760][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.383591][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.403085][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.413552][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.435707][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.447914][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.457157][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.498293][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.509496][ T4302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.513405][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.538513][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.551678][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.563254][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.574955][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.591043][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.600318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.609676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.620513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.629585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.640117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.658716][ T4302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.665110][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.675838][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.705701][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.716543][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.725854][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.735076][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.781749][ T4299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.804073][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.933747][ T1288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.948928][ T1288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.003196][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.094866][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.145552][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.202274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.220011][ T1288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.257541][ T1288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.321709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.358402][ T3578] Bluetooth: hci3: command 0x0419 tx timeout [ 78.366318][ T3578] Bluetooth: hci2: command 0x0419 tx timeout [ 78.408130][ T3578] Bluetooth: hci4: command 0x0419 tx timeout [ 78.449724][ T3578] Bluetooth: hci0: command 0x0419 tx timeout [ 78.487380][ T3578] Bluetooth: hci1: command 0x0419 tx timeout [ 78.729362][ T4327] netlink: 'syz.4.5': attribute type 20 has an invalid length. [ 79.258722][ T4325] netlink: 'syz.1.7': attribute type 5 has an invalid length. [ 79.333339][ T4325] device ip6erspan0 entered promiscuous mode [ 79.467015][ T4256] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 79.686643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.695724][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 79.705547][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 79.719249][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.879358][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.895305][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 80.367198][ T4256] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.417616][ T4256] usb 4-1: config 0 has no interfaces? [ 80.597703][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.607740][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.617565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.626698][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.727642][ T4256] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 80.797003][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.846253][ T4256] usb 4-1: Product: syz [ 80.862731][ T4256] usb 4-1: Manufacturer: syz [ 80.872743][ T4256] usb 4-1: SerialNumber: syz [ 80.898537][ T4256] usb 4-1: config 0 descriptor?? [ 81.068971][ T4349] netlink: 'syz.0.15': attribute type 4 has an invalid length. [ 81.609224][ T4332] udc-core: couldn't find an available UDC or it's busy [ 81.616418][ T4332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.695061][ T4310] usb 4-1: USB disconnect, device number 2 [ 84.744084][ T4349] syz.0.15 (4349) used greatest stack depth: 19976 bytes left [ 86.000450][ T4388] 9pnet_virtio: no channels available for device syz [ 86.976937][ T4235] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.092803][ T1107] cfg80211: failed to load regulatory.db [ 87.118163][ T4398] binder_alloc: 4396: binder_alloc_buf, no vma [ 87.276970][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 87.438012][ T4235] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 87.453730][ T4235] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 87.505025][ T4235] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.596912][ T4235] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 87.648741][ T4235] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 89.156926][ T4235] usb 4-1: config 168 interface 0 has no altsetting 0 [ 89.187204][ T4411] 9pnet: Insufficient options for proto=fd [ 89.353610][ T4411] Zero length message leads to an empty skb [ 89.359912][ T4235] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 89.377260][ T4235] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 89.489159][ T4235] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 89.562567][ T4235] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 89.621475][ T4235] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 89.724307][ T4235] usb 4-1: config 168 interface 0 has no altsetting 0 [ 89.836952][ T4235] usb 4-1: unable to read config index 2 descriptor/start: -71 [ 89.874506][ T4235] usb 4-1: can't read configurations, error -71 [ 89.882561][ T4418] tipc: Failed to remove unknown binding: 66,1,1/0:2584231245/2584231247 [ 89.885560][ T4423] tipc: Failed to remove unknown binding: 66,1,1/0:3055181042/3055181044 [ 89.904976][ T4418] tipc: Failed to remove unknown binding: 66,1,1/0:2584231245/2584231247 [ 89.906619][ T4423] tipc: Failed to remove unknown binding: 66,1,1/0:3055181042/3055181044 [ 92.042651][ T4355] Set syz1 is full, maxelem 65536 reached [ 93.888006][ T4444] process 'syz.0.43' launched './file0' with NULL argv: empty string added [ 93.992127][ T4452] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.618934][ T4273] Bluetooth: hci5: Frame reassembly failed (-84) [ 95.657185][ T4471] Bluetooth: hci5: Frame reassembly failed (-84) [ 97.636791][ C1] sched: RT throttling activated [ 97.673870][ T4256] Bluetooth: hci5: command 0x1003 tx timeout [ 97.706001][ T4448] Bluetooth: hci5: Frame reassembly failed (-84) [ 98.496926][ T4235] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.764117][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 98.917277][ T4235] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.086920][ T4256] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.137355][ T4235] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 99.146544][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.166918][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.167150][ T4235] usb 4-1: Product: syz [ 99.196909][ T4235] usb 4-1: Manufacturer: syz [ 99.201556][ T4235] usb 4-1: SerialNumber: syz [ 99.219722][ T4235] usb 4-1: config 0 descriptor?? [ 99.278226][ T4235] comedi comedi5: Wrong number of endpoints [ 99.284423][ T4235] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 99.326924][ T4256] usb 1-1: Using ep0 maxpacket: 8 [ 99.409197][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 99.447086][ T4256] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.460706][ T4256] usb 1-1: config 0 has no interface number 0 [ 99.478490][ T4256] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.499215][ T4256] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 99.518587][ T4256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.526817][ T4235] usb 4-1: USB disconnect, device number 5 [ 99.539246][ T13] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 99.557217][ T4256] usb 1-1: config 0 descriptor?? [ 99.563912][ T13] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 99.582228][ T13] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 99.594323][ T13] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.608708][ T13] usb 2-1: config 1 interface 0 has no altsetting 0 [ 99.644226][ T4256] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 99.697047][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.708361][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.718637][ T13] usb 2-1: SerialNumber: syz [ 99.735841][ T4256] Bluetooth: hci5: command 0x1001 tx timeout [ 99.742490][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 99.750293][ T4496] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 99.758103][ T4496] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 100.115440][ T4505] netlink: 44 bytes leftover after parsing attributes in process `syz.3.61'. [ 100.183601][ T4496] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 100.199983][ T4496] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 100.712238][ T13] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 100.833743][ T4507] loop2: detected capacity change from 0 to 1024 [ 100.952078][ T4496] udc-core: couldn't find an available UDC or it's busy [ 100.971163][ T4507] ======================================================= [ 100.971163][ T4507] WARNING: The mand mount option has been deprecated and [ 100.971163][ T4507] and is ignored by this kernel. Remove the mand [ 100.971163][ T4507] option from the mount to silence this warning. [ 100.971163][ T4507] ======================================================= [ 101.022800][ T4496] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 101.062914][ T4256] usb 1-1: USB disconnect, device number 2 [ 101.225137][ T4507] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.834257][ T4262] Bluetooth: hci5: command 0x1009 tx timeout [ 101.966862][ C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 68! [ 101.997462][ C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 7c! [ 102.021563][ C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 36! [ 102.036847][ C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 90! [ 102.081070][ T4539] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 102.194653][ T4256] usb 2-1: USB disconnect, device number 2 [ 102.225525][ T4256] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 102.493421][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): rose3: link becomes ready [ 102.642893][ T4553] tipc: Failed to remove unknown binding: 66,1,1/0:1401766115/1401766117 [ 102.652880][ T4553] tipc: Failed to remove unknown binding: 66,1,1/0:1401766115/1401766117 [ 103.192839][ T4566] tipc: Failed to remove unknown binding: 66,1,1/0:3712560624/3712560626 [ 103.257308][ T4566] tipc: Failed to remove unknown binding: 66,1,1/0:3712560624/3712560626 [ 103.283854][ T4256] kernel write not supported for file /snd/midiC2D0 (pid: 4256 comm: kworker/0:4) [ 104.220175][ T4585] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 105.402967][ T4599] loop2: detected capacity change from 0 to 512 [ 105.630900][ T4599] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.786993][ T4599] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.849647][ T4599] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.79: corrupted inode contents [ 105.904456][ T4599] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #2: comm syz.2.79: mark_inode_dirty error [ 106.750013][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 106.760278][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:7 Not tainted 5.15.189-syzkaller #0 [ 106.768644][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.768926][ T4599] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.79: corrupted inode contents [ 106.778849][ T4202] Workqueue: hci2 hci_rx_work [ 106.778941][ T4202] Call Trace: [ 106.778955][ T4202] [ 106.778969][ T4202] dump_stack_lvl+0x168/0x230 [ 106.778999][ T4202] ? show_regs_print_info+0x20/0x20 [ 106.812330][ T4202] ? load_image+0x3b0/0x3b0 [ 106.816973][ T4202] sysfs_create_dir_ns+0x252/0x280 [ 106.822216][ T4202] ? __lock_acquire+0x7c60/0x7c60 [ 106.827467][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 106.832196][ T4202] ? le_conn_complete_evt+0xcbc/0x1590 [ 106.837800][ T4202] ? hci_event_packet+0xe05/0x12f0 [ 106.843121][ T4202] ? process_one_work+0x863/0x1000 [ 106.848459][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 106.853762][ T4202] kobject_add_internal+0x662/0xd00 [ 106.859078][ T4202] kobject_add+0x152/0x210 [ 106.863597][ T4202] ? kobject_init+0x1d0/0x1d0 [ 106.868539][ T4202] ? klist_children_get+0x50/0x50 [ 106.873595][ T4202] ? get_device_parent+0x121/0x3f0 [ 106.878967][ T4202] device_add+0x483/0xfb0 [ 106.883502][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 106.888468][ T4202] le_conn_complete_evt+0xcbc/0x1590 [ 106.893807][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 106.899039][ T4202] ? __mutex_trylock_common+0x14f/0x250 [ 106.904604][ T4202] hci_le_meta_evt+0x289/0x3b80 [ 106.909585][ T4202] ? hci_event_packet+0x36d/0x12f0 [ 106.914704][ T4202] ? hci_event_packet+0x2e2/0x12f0 [ 106.919910][ T4202] ? __lock_acquire+0x7c60/0x7c60 [ 106.925148][ T4202] ? hci_remote_host_features_evt+0x280/0x280 [ 106.931236][ T4202] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 106.936893][ T4202] ? mark_lock+0x94/0x320 [ 106.941265][ T4202] ? mutex_unlock+0x10/0x10 [ 106.945958][ T4202] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 106.951961][ T4202] ? lock_chain_count+0x20/0x20 [ 106.957000][ T4202] ? __rwlock_init+0x140/0x140 [ 106.962011][ T4202] hci_event_packet+0xe05/0x12f0 [ 106.967173][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 106.972551][ T4202] ? rcu_lock_release+0x20/0x20 [ 106.977443][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 106.982767][ T4202] hci_rx_work+0x255/0xa10 [ 106.987217][ T4202] process_one_work+0x863/0x1000 [ 106.992281][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 106.998028][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 107.003326][ T4202] ? _raw_spin_lock_irq+0xab/0xe0 [ 107.008528][ T4202] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 107.014146][ T4202] ? wq_worker_running+0x97/0x170 [ 107.019372][ T4202] worker_thread+0xaa8/0x12a0 [ 107.024361][ T4202] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 107.030300][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 107.035695][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 107.041005][ T4202] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 107.047013][ T4202] kthread+0x436/0x520 [ 107.051086][ T4202] ? rcu_lock_release+0x20/0x20 [ 107.055934][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 107.060536][ T4202] ret_from_fork+0x1f/0x30 [ 107.064974][ T4202] [ 107.073404][ T4202] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.087084][ T4202] Bluetooth: hci2: failed to register connection device [ 107.391047][ T4628] loop1: detected capacity change from 0 to 512 [ 107.670137][ T4640] loop3: detected capacity change from 0 to 1024 [ 107.692582][ T4628] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.84: bg 0: block 248: padding at end of block bitmap is not set [ 107.940253][ T4640] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.954673][ T4628] Quota error (device loop1): write_blk: dquota write failed [ 108.006409][ T4628] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 108.018619][ T4650] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 108.208836][ T4628] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.84: Failed to acquire dquot type 1 [ 108.364610][ T4628] EXT4-fs (loop1): 1 truncate cleaned up [ 108.408233][ T4628] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.430617][ T4628] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.264956][ T4666] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 111.412093][ T4691] loop3: detected capacity change from 0 to 1024 [ 111.560868][ T4691] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.204093][ T4707] overlayfs: './file2' not a directory [ 112.869612][ T4721] kernel profiling enabled (shift: 17) [ 114.332319][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready [ 114.878758][ T4751] overlayfs: failed to resolve './file2': -2 [ 114.892393][ T4751] overlayfs: failed to clone upperpath [ 114.998027][ T4754] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 117.075076][ T4790] loop4: detected capacity change from 0 to 1024 [ 117.191030][ T4790] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.351963][ T4790] overlayfs: failed to resolve './file2': -2 [ 117.576901][ T4804] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 118.434701][ T4809] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 118.808487][ C0] hrtimer: interrupt took 56038 ns [ 120.522626][ T4836] loop3: detected capacity change from 0 to 1024 [ 120.578720][ T4837] tipc: Failed to remove unknown binding: 66,1,1/0:779790740/779790742 [ 120.623472][ T4837] tipc: Failed to remove unknown binding: 66,1,1/0:779790740/779790742 [ 120.956283][ T4849] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 121.371510][ T4836] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.712469][ T4836] overlayfs: failed to resolve './file2': -2 [ 123.216185][ T4874] tipc: Failed to remove unknown binding: 66,1,1/0:1428869236/1428869238 [ 123.236986][ T4874] tipc: Failed to remove unknown binding: 66,1,1/0:1428869236/1428869238 [ 123.285480][ T4883] tipc: Failed to remove unknown binding: 66,1,1/0:564095590/564095592 [ 123.318395][ T4883] tipc: Failed to remove unknown binding: 66,1,1/0:564095590/564095592 [ 124.206313][ T4897] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 125.292495][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 125.310654][ T4911] overlayfs: failed to clone upperpath [ 126.272843][ T4933] tipc: Failed to remove unknown binding: 66,1,1/0:2256448944/2256448946 [ 126.292278][ T4933] tipc: Failed to remove unknown binding: 66,1,1/0:2256448944/2256448946 [ 126.531939][ T4938] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 126.633145][ T4941] tipc: Failed to remove unknown binding: 66,1,1/0:2796543060/2796543062 [ 126.642109][ T4941] tipc: Failed to remove unknown binding: 66,1,1/0:2796543060/2796543062 [ 127.559544][ T4953] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 127.607154][ T4955] loop3: detected capacity change from 0 to 1024 [ 127.906670][ T4955] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.291993][ T4979] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 130.712233][ T5000] loop4: detected capacity change from 0 to 1024 [ 130.814750][ T5000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.476822][ T5019] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 132.128691][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): rose4: link becomes ready [ 133.221431][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.231824][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.717143][ T5048] overlayfs: failed to clone upperpath [ 133.812749][ T5054] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 134.516888][ T5064] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 135.842789][ T5085] loop0: detected capacity change from 0 to 1024 [ 135.935838][ T5085] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.406182][ T5117] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 138.655349][ T5134] tipc: Failed to remove unknown binding: 66,1,1/0:2078936914/2078936916 [ 138.951088][ T5134] tipc: Failed to remove unknown binding: 66,1,1/0:2078936914/2078936916 [ 140.313536][ T5150] overlayfs: failed to clone upperpath [ 140.920427][ T5169] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 142.417324][ T2300] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 142.770702][ T2300] usb 3-1: Using ep0 maxpacket: 16 [ 143.062457][ T2300] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 143.095370][ T2300] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 143.125740][ T2300] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 143.144676][ T2300] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.212664][ T2300] usb 3-1: config 1 interface 0 has no altsetting 0 [ 143.281445][ T5191] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 143.351639][ T2300] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.371345][ T2300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.391655][ T2300] usb 3-1: SerialNumber: syz [ 143.437473][ T5184] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.444630][ T5184] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.582085][ T5193] loop3: detected capacity change from 0 to 1024 [ 143.735614][ T5193] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.827118][ T5193] overlayfs: missing 'lowerdir' [ 143.887525][ T5184] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.897449][ T5184] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 144.362522][ T2300] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 144.503367][ T5203] tipc: Failed to remove unknown binding: 66,1,1/0:2666858797/2666858799 [ 144.516450][ T5203] tipc: Failed to remove unknown binding: 66,1,1/0:2666858797/2666858799 [ 144.561795][ T5184] udc-core: couldn't find an available UDC or it's busy [ 144.577524][ T5184] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 145.056076][ T5214] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 146.335140][ T4262] usb 3-1: USB disconnect, device number 2 [ 146.388406][ T4262] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 147.943348][ T5244] loop3: detected capacity change from 0 to 1024 [ 148.050706][ T5244] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.210815][ T5244] overlayfs: missing 'lowerdir' [ 150.285400][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.335197][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.375656][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.640056][ T5307] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 152.330107][ T5320] loop4: detected capacity change from 0 to 1024 [ 152.571080][ T5320] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.624031][ T5320] overlayfs: missing 'lowerdir' [ 152.671492][ T5329] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 153.504716][ T5331] loop2: detected capacity change from 0 to 4096 [ 153.573672][ T5331] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 153.636367][ T5331] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 153.670754][ T5331] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 153.678773][ T5331] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 153.686648][ T5331] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 153.694799][ T5331] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 153.704280][ T5331] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 153.712238][ T5331] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 153.720203][ T5331] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 153.728388][ T5331] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 154.986083][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.012848][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.031868][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.125088][ T5352] tipc: Failed to remove unknown binding: 66,1,1/0:4136847213/4136847215 [ 155.161334][ T5352] tipc: Failed to remove unknown binding: 66,1,1/0:4136847213/4136847215 [ 156.020125][ T5363] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 156.027214][ T5363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 156.036640][ T5363] vhci_hcd vhci_hcd.0: Device attached [ 156.337038][ T3578] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 156.877908][ T5364] vhci_hcd: connection reset by peer [ 157.666894][ T4728] vhci_hcd: stop threads [ 157.672670][ T4728] vhci_hcd: release socket [ 157.887936][ T4728] vhci_hcd: disconnect device [ 159.055582][ T5387] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 159.520342][ T4190] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.326827][ T4190] usb 3-1: Using ep0 maxpacket: 16 [ 161.147190][ T4190] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 161.167722][ T4190] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 161.178418][ T4190] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 161.189688][ T4190] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 161.204142][ T4190] usb 3-1: config 1 interface 0 has no altsetting 0 [ 161.474741][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.516938][ T4190] usb 3-1: string descriptor 0 read error: -71 [ 161.524406][ T4190] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.535824][ T4190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.544910][ T3578] vhci_hcd: vhci_device speed not set [ 161.550715][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.551667][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.597271][ T4190] usb 3-1: can't set config #1, error -71 [ 161.614185][ T4190] usb 3-1: USB disconnect, device number 3 [ 161.819739][ T5410] tipc: Failed to remove unknown binding: 66,1,1/0:774560522/774560524 [ 161.860433][ T5410] tipc: Failed to remove unknown binding: 66,1,1/0:774560522/774560524 [ 163.403694][ T5423] loop2: detected capacity change from 0 to 512 [ 163.504417][ T5423] EXT4-fs (loop2): Ignoring removed nobh option [ 163.626412][ T5423] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.311: iget: bad i_size value: 38620345925642 [ 163.708452][ T5423] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.311: couldn't read orphan inode 15 (err -117) [ 163.750840][ T5423] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 166.143199][ T5434] loop4: detected capacity change from 0 to 32768 [ 166.210387][ T3578] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 166.363526][ T5439] loop2: detected capacity change from 0 to 32768 [ 166.370852][ T5434] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 166.408673][ T5439] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.316 (5439) [ 166.476896][ T3578] usb 1-1: Using ep0 maxpacket: 16 [ 166.529131][ T5439] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 166.553265][ T5439] BTRFS info (device loop2): using free space tree [ 166.561055][ T5439] BTRFS info (device loop2): has skinny extents [ 166.597775][ T3578] usb 1-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 166.619797][ T3578] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 166.631415][ T3578] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 166.645815][ T3578] usb 1-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.664158][ T3578] usb 1-1: config 1 interface 0 has no altsetting 0 [ 166.690747][ T4187] ocfs2: Unmounting device (7,4) on (node local) [ 166.747137][ T3578] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.780438][ T3578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.789037][ T3578] usb 1-1: SerialNumber: syz [ 166.807254][ T5448] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 166.815960][ T5448] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 166.915103][ T5439] BTRFS info (device loop2): enabling ssd optimizations [ 167.252489][ T5482] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 167.283146][ T5448] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.428256][ T5448] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.941205][ T3578] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 168.182855][ T5448] udc-core: couldn't find an available UDC or it's busy [ 168.227768][ T5448] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 169.132721][ T21] usb 1-1: USB disconnect, device number 3 [ 169.150711][ T21] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 171.523003][ T5525] loop3: detected capacity change from 0 to 32768 [ 172.446952][ T5525] (syz.3.330,5525,0):ocfs2_initialize_super:2313 ERROR: status = -12 [ 172.476694][ T5525] (syz.3.330,5525,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 172.748888][ T5562] loop2: detected capacity change from 0 to 1024 [ 172.917903][ T5562] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.054755][ T5562] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 173.159014][ T5562] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.307956][ T5508] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.612754][ T5508] usb 1-1: Using ep0 maxpacket: 16 [ 173.807350][ T5508] usb 1-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 173.902878][ T5508] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 174.069559][ T5508] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 174.205555][ T5508] usb 1-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.314228][ T5590] loop2: detected capacity change from 0 to 64 [ 174.345777][ T5508] usb 1-1: config 1 interface 0 has no altsetting 0 [ 174.502993][ T5508] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.527699][ T5508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 174.570792][ T5508] usb 1-1: SerialNumber: syz [ 174.612086][ T5590] attempt to access beyond end of device [ 174.612086][ T5590] loop2: rw=1, want=66, limit=64 [ 174.627732][ T5571] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.645414][ T5571] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.653006][ T5590] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 174.677052][ T5590] attempt to access beyond end of device [ 174.677052][ T5590] loop2: rw=1, want=67, limit=64 [ 174.688922][ T5590] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 174.702576][ T5590] attempt to access beyond end of device [ 174.702576][ T5590] loop2: rw=1, want=68, limit=64 [ 174.717988][ T5590] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 174.727170][ T5590] attempt to access beyond end of device [ 174.727170][ T5590] loop2: rw=1, want=69, limit=64 [ 174.740122][ T5590] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 174.755200][ T5590] attempt to access beyond end of device [ 174.755200][ T5590] loop2: rw=1, want=73, limit=64 [ 174.778119][ T5590] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 174.791859][ T5590] attempt to access beyond end of device [ 174.791859][ T5590] loop2: rw=1, want=74, limit=64 [ 174.803937][ T5590] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 174.834816][ T5590] attempt to access beyond end of device [ 174.834816][ T5590] loop2: rw=1, want=77, limit=64 [ 174.876874][ T5590] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 174.907670][ T5590] attempt to access beyond end of device [ 174.907670][ T5590] loop2: rw=1, want=78, limit=64 [ 174.929276][ T5599] loop4: detected capacity change from 0 to 128 [ 174.946808][ T5590] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 174.955595][ T5590] attempt to access beyond end of device [ 174.955595][ T5590] loop2: rw=1, want=119, limit=64 [ 175.187906][ T5571] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 175.195523][ T5571] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 175.324343][ T5601] netlink: 48 bytes leftover after parsing attributes in process `syz.4.347'. [ 175.351687][ T5601] attempt to access beyond end of device [ 175.351687][ T5601] loop4: rw=3, want=144, limit=128 [ 175.991643][ T5508] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 176.051375][ T5607] udc-core: couldn't find an available UDC or it's busy [ 176.062806][ T5607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 176.608583][ T5508] usb 1-1: USB disconnect, device number 4 [ 176.919740][ T5508] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 177.159837][ T5615] loop3: detected capacity change from 0 to 128 [ 177.475498][ T5615] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.487015][ T5615] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.132812][ T5625] loop0: detected capacity change from 0 to 1024 [ 179.119805][ T5625] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.255187][ T5640] loop2: detected capacity change from 0 to 2048 [ 179.271918][ T5641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 179.289277][ T5625] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 179.356182][ T5625] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 179.366925][ T5641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 179.447263][ T5638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 179.491255][ T5640] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 1344: 0x46 != 0x00 [ 179.540165][ T5640] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 180.476566][ T5668] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 180.640711][ T5650] loop3: detected capacity change from 0 to 40427 [ 180.821106][ T5650] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 180.882460][ T5650] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 180.897025][ T5685] loop4: detected capacity change from 0 to 164 [ 180.958580][ T5650] F2FS-fs (loop3): invalid crc value [ 181.116475][ T5693] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 181.123391][ T5693] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.133697][ T5693] vhci_hcd vhci_hcd.0: Device attached [ 181.427178][ T21] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 181.545432][ T5650] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.832718][ T5694] vhci_hcd: connection reset by peer [ 181.839724][ T4887] vhci_hcd: stop threads [ 181.849665][ T4887] vhci_hcd: release socket [ 181.948873][ T4887] vhci_hcd: disconnect device [ 182.688532][ T5650] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 182.711658][ T5714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.370'. [ 183.168145][ T5714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.370'. [ 183.178201][ T5650] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 183.227560][ T5711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.370'. [ 183.300489][ T5716] loop2: detected capacity change from 0 to 1024 [ 183.361980][ T5718] loop4: detected capacity change from 0 to 128 [ 183.772498][ T5716] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.876363][ T5729] netlink: 48 bytes leftover after parsing attributes in process `syz.4.374'. [ 184.195361][ T5716] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 184.280504][ T5716] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 184.354516][ T5733] device wlan0 entered promiscuous mode [ 184.479524][ T5733] device wlan0 left promiscuous mode [ 185.239965][ T5752] tipc: Failed to remove unknown binding: 66,1,1/0:4112099700/4112099702 [ 185.249103][ T5752] tipc: Failed to remove unknown binding: 66,1,1/0:4112099700/4112099702 [ 186.200170][ T5774] loop3: detected capacity change from 0 to 512 [ 186.301778][ T5774] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 186.374909][ T5774] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.450454][ T5774] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6 [ 186.467185][ T5774] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 186.487596][ T5780] loop4: detected capacity change from 0 to 1024 [ 186.495428][ T5774] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.388: Failed to acquire dquot type 1 [ 186.607918][ T21] vhci_hcd: vhci_device speed not set [ 186.935645][ T1244] hfsplus: b-tree write err: -5, ino 4 [ 189.861591][ T5802] loop0: detected capacity change from 0 to 32768 [ 190.236119][ T5813] tipc: Failed to remove unknown binding: 66,1,1/0:3656712123/3656712125 [ 190.301135][ T5813] tipc: Failed to remove unknown binding: 66,1,1/0:3656712123/3656712125 [ 191.014712][ T5829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.407'. [ 191.098629][ T5829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.407'. [ 191.158085][ T5827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.407'. [ 192.397009][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 192.404777][ T5844] loop4: detected capacity change from 0 to 256 [ 193.156874][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 193.706972][ T21] usb 1-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 193.740508][ T21] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 193.754883][ T21] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 193.765537][ T21] usb 1-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.780463][ T21] usb 1-1: config 1 interface 0 has no altsetting 0 [ 193.976972][ T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.987399][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 193.995455][ T21] usb 1-1: SerialNumber: syz [ 194.027172][ T5838] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 194.045883][ T5838] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 194.347170][ T21] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 194.401653][ T21] usb 1-1: USB disconnect, device number 5 [ 194.605830][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.613359][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.051084][ T5874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 195.077072][ T5874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 195.107287][ T5871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 195.662218][ T5885] loop2: detected capacity change from 0 to 128 [ 196.015128][ T5895] netlink: 48 bytes leftover after parsing attributes in process `syz.2.427'. [ 196.677779][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 196.686972][ T5499] Bluetooth: hci0: command 0x0406 tx timeout [ 196.721727][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 196.780900][ T5897] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 196.787770][ T5897] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.811042][ T5897] vhci_hcd vhci_hcd.0: Device attached [ 196.858593][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 196.968786][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 197.020539][ T5899] vhci_hcd: connection closed [ 197.021611][ T4887] vhci_hcd: stop threads [ 197.111283][ T4887] vhci_hcd: release socket [ 197.218418][ T4887] vhci_hcd: disconnect device [ 197.685719][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'. [ 197.706438][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'. [ 197.716569][ T5910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'. [ 198.245923][ T5907] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 198.381439][ T5907] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 199.031291][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 199.262840][ T5937] tipc: Failed to remove unknown binding: 66,1,1/0:3537243664/3537243666 [ 199.275138][ T5937] tipc: Failed to remove unknown binding: 66,1,1/0:3537243664/3537243666 [ 201.279405][ T5965] loop4: detected capacity change from 0 to 8 [ 201.738232][ T5965] SQUASHFS error: Unable to read directory block [631:72] [ 202.062018][ T5983] tipc: Failed to remove unknown binding: 66,1,1/0:1070454439/1070454441 [ 202.071062][ T5983] tipc: Failed to remove unknown binding: 66,1,1/0:1070454439/1070454441 [ 203.381444][ T6000] loop3: detected capacity change from 0 to 1024 [ 203.699738][ T6000] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.711208][ T5508] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 203.735616][ T6000] overlayfs: missing 'workdir' [ 204.006942][ T5508] usb 5-1: Using ep0 maxpacket: 16 [ 204.157253][ T5508] usb 5-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 204.182315][ T5508] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 204.196951][ T5508] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 204.217097][ T5508] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.246596][ T5508] usb 5-1: config 1 interface 0 has no altsetting 0 [ 204.369677][ T5508] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.430253][ T5508] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.450359][ T5508] usb 5-1: SerialNumber: syz [ 204.487346][ T6003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 204.503657][ T6003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 204.545969][ T6027] loop3: detected capacity change from 0 to 128 [ 204.800045][ T6016] loop0: detected capacity change from 0 to 32768 [ 204.925572][ T6031] netlink: 48 bytes leftover after parsing attributes in process `syz.3.475'. [ 204.964100][ T6003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 205.078321][ T6003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 205.318402][ T6016] XFS (loop0): Mounting V5 Filesystem [ 205.671968][ T6047] tipc: Failed to remove unknown binding: 66,1,1/0:1409396804/1409396806 [ 205.687134][ T5508] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 205.699199][ T6047] tipc: Failed to remove unknown binding: 66,1,1/0:1409396804/1409396806 [ 205.710249][ T6016] XFS (loop0): Ending clean mount [ 205.800427][ T6016] XFS (loop0): Quotacheck needed: Please wait. [ 205.885037][ T6003] udc-core: couldn't find an available UDC or it's busy [ 205.907863][ T6003] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 206.043686][ T5498] usb 5-1: USB disconnect, device number 2 [ 206.084335][ T5498] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 206.116377][ T6057] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 206.302303][ T6016] XFS (loop0): Quotacheck: Done. [ 206.701007][ T4194] XFS (loop0): Unmounting Filesystem [ 206.730312][ T6069] loop4: detected capacity change from 0 to 1024 [ 206.812704][ T6069] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.921329][ T6069] overlayfs: missing 'workdir' [ 209.237492][ T5498] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 209.506886][ T5498] usb 3-1: Using ep0 maxpacket: 16 [ 209.647147][ T5498] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 209.689660][ T5498] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 209.733782][ T5498] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 209.794572][ T5498] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 209.880143][ T5498] usb 3-1: config 1 interface 0 has no altsetting 0 [ 209.987030][ T5498] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.005408][ T5498] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.040417][ T5498] usb 3-1: SerialNumber: syz [ 210.097454][ T6110] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.104709][ T6110] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.180931][ T6143] loop0: detected capacity change from 0 to 1024 [ 210.275123][ T6143] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.361471][ T6143] overlayfs: missing 'workdir' [ 210.553899][ T6110] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.573156][ T6110] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.926443][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 210.935975][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 210.948550][ T6169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 211.059696][ T5498] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 211.252412][ T6110] udc-core: couldn't find an available UDC or it's busy [ 211.264985][ T6110] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 211.275379][ T5498] usb 3-1: USB disconnect, device number 4 [ 211.387219][ T5498] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 212.249880][ T6188] loop3: detected capacity change from 0 to 1024 [ 212.393219][ T6188] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.737121][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 212.847199][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 212.857577][ T6210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 214.687847][ T6242] tipc: Failed to remove unknown binding: 66,1,1/0:543672917/543672919 [ 214.697014][ T6242] tipc: Failed to remove unknown binding: 66,1,1/0:543672917/543672919 [ 215.723301][ T6263] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 216.094070][ T6266] loop4: detected capacity change from 0 to 1024 [ 216.632637][ T6266] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.743000][ T6283] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 217.749659][ T6283] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 217.757554][ T6283] vhci_hcd vhci_hcd.0: Device attached [ 217.880441][ T6284] vhci_hcd: connection closed [ 217.881452][ T144] vhci_hcd: stop threads [ 218.412224][ T144] vhci_hcd: release socket [ 218.430705][ T144] vhci_hcd: disconnect device [ 219.724615][ T6303] tipc: Failed to remove unknown binding: 66,1,1/0:709425968/709425970 [ 219.768482][ T6303] tipc: Failed to remove unknown binding: 66,1,1/0:709425968/709425970 [ 219.906895][ T5499] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 220.258938][ T6316] overlayfs: failed to clone upperpath [ 220.282291][ T6319] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 220.286940][ T5499] usb 1-1: config 64 has an invalid interface number: 19 but max is 0 [ 220.288944][ T6319] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.306245][ T6319] vhci_hcd vhci_hcd.0: Device attached [ 220.500873][ T6322] overlayfs: failed to clone upperpath [ 220.597539][ T5519] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 221.039516][ T6320] vhci_hcd: connection reset by peer [ 221.045943][ T4410] vhci_hcd: stop threads [ 221.054785][ T4410] vhci_hcd: release socket [ 221.095191][ T4410] vhci_hcd: disconnect device [ 221.551969][ T5499] usb 1-1: config 64 has no interface number 0 [ 221.562029][ T5499] usb 1-1: config 64 interface 19 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 221.572369][ T5499] usb 1-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.582665][ T5499] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 221.591914][ T5499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.621489][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.548'. [ 221.641456][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.548'. [ 221.657128][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.548'. [ 221.657541][ T5499] usb 1-1: probing VID:PID(2201:012C) [ 221.704082][ T5499] usb 1-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 221.711043][ T5499] usb 1-1: vub300 ignoring EndPoint(0) 02 [ 221.712939][ T6312] loop2: detected capacity change from 0 to 32768 [ 221.717411][ T5499] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 221.738066][ T5499] vub300: probe of 1-1:64.19 failed with error -22 [ 221.798381][ T5499] usb 1-1: USB disconnect, device number 6 [ 221.859882][ T6312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.543 (6312) [ 221.884713][ T6334] loop0: detected capacity change from 0 to 8 [ 221.896279][ T6312] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 221.905942][ T6312] BTRFS info (device loop2): using free space tree [ 221.932131][ T6312] BTRFS info (device loop2): has skinny extents [ 222.844268][ T5901] BTRFS warning (device loop2): checksum verify failed on 5332992 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xb9439eb2b06c3b3e659c2be148ba5040d315efc34726de24081b456c9e702230 level 0 [ 222.900898][ T6312] BTRFS warning (device loop2): couldn't read tree root [ 223.360715][ T6312] BTRFS error (device loop2): open_ctree failed: -22 [ 223.929276][ T4297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4297) [ 224.348609][ T6373] tipc: Failed to remove unknown binding: 66,1,1/0:891156855/891156857 [ 224.357608][ T6373] tipc: Failed to remove unknown binding: 66,1,1/0:891156855/891156857 [ 226.266851][ T5519] vhci_hcd: vhci_device speed not set [ 226.945803][ T6401] loop3: detected capacity change from 0 to 1024 [ 227.042218][ T6403] tipc: Started in network mode [ 227.058381][ T6403] tipc: Node identity ac1414aa, cluster identity 4711 [ 227.059013][ T6401] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.074057][ T6389] loop4: detected capacity change from 0 to 32768 [ 227.084170][ T6403] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.093968][ T6403] tipc: Enabled bearer , priority 10 [ 227.143891][ T6389] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.560 (6389) [ 227.218425][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.291632][ T6389] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 227.307284][ T6389] BTRFS error (device loop4): superblock checksum mismatch [ 227.356911][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.496915][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.526411][ T6389] BTRFS error (device loop4): open_ctree failed: -22 [ 227.583037][ T4297] udevd[4297]: incorrect btrfs checksum on /dev/loop4 [ 227.636964][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.776954][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.916911][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.056909][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.333807][ T4310] tipc: Node number set to 2886997162 [ 228.339787][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.606969][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.173306][ T5499] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 230.166861][ T5499] usb 3-1: Using ep0 maxpacket: 16 [ 230.287764][ T5499] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 230.309764][ T5499] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 230.323908][ T5499] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 230.341606][ T5499] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 230.356348][ T5499] usb 3-1: config 1 interface 0 has no altsetting 0 [ 231.187402][ T5499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.201678][ T5499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 231.237821][ T5499] usb 3-1: can't set config #1, error -71 [ 231.273377][ T6446] loop2: detected capacity change from 0 to 1024 [ 231.281336][ T5499] usb 3-1: USB disconnect, device number 5 [ 231.453805][ T6446] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.286884][ C0] net_ratelimit: 3 callbacks suppressed [ 232.286904][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.789654][ T6464] loop2: detected capacity change from 0 to 128 [ 232.803818][ T5519] kernel write not supported for file /input/mouse0 (pid: 5519 comm: kworker/1:12) [ 233.174143][ T6477] netlink: 48 bytes leftover after parsing attributes in process `syz.2.583'. [ 233.190278][ T6477] handle_bad_sector: 1 callbacks suppressed [ 233.190321][ T6477] attempt to access beyond end of device [ 233.190321][ T6477] loop2: rw=3, want=144, limit=128 [ 233.207507][ T6477] attempt to access beyond end of device [ 233.207507][ T6477] loop2: rw=2051, want=1041, limit=128 [ 233.326927][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.745517][ T5498] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 234.367489][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.504294][ T6482] loop2: detected capacity change from 0 to 1024 [ 234.566927][ T5498] usb 1-1: Using ep0 maxpacket: 16 [ 234.747716][ T5498] usb 1-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 234.759449][ T5498] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 234.804750][ T5498] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 234.841325][ T6482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.853483][ T6488] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 234.860145][ T6488] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.868093][ T6488] vhci_hcd vhci_hcd.0: Device attached [ 234.901370][ T5498] usb 1-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 235.015361][ T5498] usb 1-1: config 1 interface 0 has no altsetting 0 [ 235.167554][ T5498] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.206289][ T5498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.277110][ T5498] usb 1-1: SerialNumber: syz [ 235.396904][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.430722][ T6489] vhci_hcd: connection closed [ 235.433087][ T5901] vhci_hcd: stop threads [ 235.452061][ T6475] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 235.596886][ T5499] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 235.884529][ T6475] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 235.908146][ T5901] vhci_hcd: release socket [ 235.951569][ T5901] vhci_hcd: disconnect device [ 236.165827][ T5498] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 236.234371][ T5498] usb 1-1: USB disconnect, device number 7 [ 236.436901][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.629189][ T6509] loop3: detected capacity change from 0 to 128 [ 237.476971][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.869859][ T6508] loop4: detected capacity change from 0 to 32768 [ 237.990708][ T6503] loop0: detected capacity change from 0 to 32768 [ 238.060403][ T6508] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.597 (6508) [ 238.516894][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.663034][ T6503] XFS (loop0): Mounting V5 Filesystem [ 238.884229][ T6503] XFS (loop0): Ending clean mount [ 238.895940][ T6508] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 238.909353][ T6542] loop3: detected capacity change from 0 to 128 [ 238.917600][ T6503] XFS (loop0): Quotacheck needed: Please wait. [ 238.924647][ T6508] BTRFS info (device loop4): setting nodatacow, compression disabled [ 238.956947][ T6508] BTRFS info (device loop4): setting datacow [ 238.963085][ T6508] BTRFS info (device loop4): doing ref verification [ 239.020280][ T6503] XFS (loop0): Quotacheck: Done. [ 239.022566][ T6508] BTRFS info (device loop4): force clearing of disk cache [ 239.057284][ T6542] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 239.079563][ T6508] BTRFS info (device loop4): turning off barriers [ 239.107309][ T6508] BTRFS info (device loop4): enabling ssd optimizations [ 239.125781][ T6542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.150443][ T6508] BTRFS info (device loop4): using spread ssd allocation scheme [ 239.179308][ T6508] BTRFS info (device loop4): setting nodatacow, compression disabled [ 239.213400][ T6508] BTRFS info (device loop4): turning on sync discard [ 239.256967][ T6508] BTRFS info (device loop4): using free space tree [ 239.290371][ T6508] BTRFS info (device loop4): has skinny extents [ 239.556897][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.647072][ T6508] BTRFS error (device loop4): open_ctree failed: -12 [ 239.648541][ T4297] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (4297) [ 239.778605][ T4194] XFS (loop0): Unmounting Filesystem [ 240.596876][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.996977][ T5499] vhci_hcd: vhci_device speed not set [ 241.431154][ T6598] loop0: detected capacity change from 0 to 128 [ 241.636951][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.860541][ T6604] netlink: 48 bytes leftover after parsing attributes in process `syz.0.613'. [ 241.876122][ T6604] attempt to access beyond end of device [ 241.876122][ T6604] loop0: rw=3, want=144, limit=128 [ 241.887744][ T6604] attempt to access beyond end of device [ 241.887744][ T6604] loop0: rw=2051, want=1041, limit=128 [ 242.474412][ T6606] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 242.500829][ T6606] CIFS mount error: No usable UNC path provided in device string! [ 242.500829][ T6606] [ 242.511449][ T6606] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 242.686893][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.629014][ T6617] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 243.635771][ T6617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 243.643887][ T6617] vhci_hcd vhci_hcd.0: Device attached [ 243.716944][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.046966][ T6618] vhci_hcd: connection closed [ 244.049112][ T5901] vhci_hcd: stop threads [ 244.593992][ T5901] vhci_hcd: release socket [ 244.615640][ T5901] vhci_hcd: disconnect device [ 244.756883][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.882254][ T6629] loop0: detected capacity change from 0 to 128 [ 245.261480][ T6637] attempt to access beyond end of device [ 245.261480][ T6637] loop0: rw=3, want=144, limit=128 [ 245.272469][ T6637] attempt to access beyond end of device [ 245.272469][ T6637] loop0: rw=2051, want=1041, limit=128 [ 245.806867][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.017011][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.629'. [ 246.536861][ T5499] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 246.837368][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.979036][ T5499] usb 1-1: Using ep0 maxpacket: 32 [ 247.021110][ T6664] loop3: detected capacity change from 0 to 512 [ 247.198150][ T6664] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.209706][ T6664] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.217310][ T5499] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.236645][ T5499] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.876903][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.600559][ T5499] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.614095][ T5499] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 248.627281][ T5499] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.633935][ T5499] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 248.653181][ T5499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.677849][ T5499] usb 1-1: config 0 descriptor?? [ 248.917180][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.254045][ T5499] hid-thrustmaster 0003:044F:B65D.0001: item fetching failed at offset 3/5 [ 249.338460][ T5499] hid-thrustmaster 0003:044F:B65D.0001: parse failed with error -22 [ 249.401601][ T5499] hid-thrustmaster: probe of 0003:044F:B65D.0001 failed with error -22 [ 249.508250][ T5499] usb 1-1: USB disconnect, device number 8 [ 249.628552][ T6689] loop4: detected capacity change from 0 to 128 [ 249.706002][ T6691] loop2: detected capacity change from 0 to 128 [ 249.956907][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.978296][ T6693] attempt to access beyond end of device [ 249.978296][ T6693] loop4: rw=3, want=144, limit=128 [ 249.989251][ T6693] attempt to access beyond end of device [ 249.989251][ T6693] loop4: rw=2051, want=1041, limit=128 [ 250.826495][ T6698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.640'. [ 250.842914][ T6698] attempt to access beyond end of device [ 250.842914][ T6698] loop2: rw=3, want=144, limit=128 [ 250.855193][ T6698] attempt to access beyond end of device [ 250.855193][ T6698] loop2: rw=2051, want=1041, limit=128 [ 251.210798][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.262207][ T6697] loop3: detected capacity change from 0 to 1024 [ 251.591187][ T6697] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.287207][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.671915][ T6701] loop4: detected capacity change from 0 to 32768 [ 252.790356][ T6701] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 252.807038][ T6701] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 253.047525][ T6701] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 253.245047][ T1110] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 253.273860][ T1110] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 253.316966][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.123460][ T6733] loop3: detected capacity change from 0 to 128 [ 254.152218][ T6734] loop0: detected capacity change from 0 to 128 [ 254.366921][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.647710][ T6736] netlink: 48 bytes leftover after parsing attributes in process `syz.3.654'. [ 254.685183][ T6736] attempt to access beyond end of device [ 254.685183][ T6736] loop3: rw=3, want=144, limit=128 [ 254.696814][ T6736] attempt to access beyond end of device [ 254.696814][ T6736] loop3: rw=2051, want=1041, limit=128 [ 254.926439][ T6738] attempt to access beyond end of device [ 254.926439][ T6738] loop0: rw=3, want=144, limit=128 [ 254.941553][ T6738] attempt to access beyond end of device [ 254.941553][ T6738] loop0: rw=2051, want=1041, limit=128 [ 255.595942][ T6740] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 255.619197][ T6740] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 255.882033][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.907397][ T1110] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2633ms [ 255.919777][ T1110] gfs2: fsid=syz:syz.0: jid=0: Done [ 255.930112][ T6701] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 255.970851][ T6701] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 256.050740][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.057558][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.916972][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.956940][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.275597][ T6776] loop0: detected capacity change from 0 to 128 [ 258.393674][ T6778] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 258.996892][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.413926][ T6784] attempt to access beyond end of device [ 259.413926][ T6784] loop0: rw=3, want=144, limit=128 [ 259.425574][ T6784] attempt to access beyond end of device [ 259.425574][ T6784] loop0: rw=2051, want=1041, limit=128 [ 259.845077][ T6783] tipc: Failed to remove unknown binding: 66,1,1/0:3105225134/3105225136 [ 259.867320][ T6783] tipc: Failed to remove unknown binding: 66,1,1/0:3105225134/3105225136 [ 259.983177][ T6789] loop0: detected capacity change from 0 to 1024 [ 260.036884][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.213863][ T6789] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 261.508285][ T6820] loop2: detected capacity change from 0 to 128 [ 261.523552][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.960611][ T6835] attempt to access beyond end of device [ 261.960611][ T6835] loop2: rw=3, want=144, limit=128 [ 261.971828][ T6835] attempt to access beyond end of device [ 261.971828][ T6835] loop2: rw=2051, want=1041, limit=128 [ 262.571170][ T6830] tipc: Failed to remove unknown binding: 66,1,1/0:1455159270/1455159272 [ 262.597079][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.711726][ T6830] tipc: Failed to remove unknown binding: 66,1,1/0:1455159270/1455159272 [ 262.949583][ T6845] overlayfs: failed to clone upperpath [ 262.972960][ T6845] overlayfs: failed to clone upperpath [ 263.636923][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.676876][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.989435][ T6857] loop3: detected capacity change from 0 to 40427 [ 265.102030][ T6857] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 265.136562][ T6857] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 265.197478][ T6857] F2FS-fs (loop3): invalid crc value [ 265.398582][ T6857] F2FS-fs (loop3): Found nat_bits in checkpoint [ 265.716918][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.127822][ T5497] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 266.136968][ T5497] Bluetooth: hci3: Injecting HCI hardware error event [ 266.148907][ T4199] Bluetooth: hci3: hardware error 0x00 [ 266.483497][ T6857] F2FS-fs (loop3): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 266.766944][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.953963][ T6857] F2FS-fs (loop3): Failed to read root inode [ 267.358403][ T6889] overlayfs: failed to clone upperpath [ 267.414125][ T6893] overlayfs: failed to clone upperpath [ 267.739023][ T6901] tipc: Failed to remove unknown binding: 66,1,1/0:2696598156/2696598158 [ 267.751425][ T6901] tipc: Failed to remove unknown binding: 66,1,1/0:2696598156/2696598158 [ 267.796996][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.863170][ T6873] loop4: detected capacity change from 0 to 40427 [ 267.922401][ T6873] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x1ffff [ 268.393705][ T6908] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 268.836875][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.876905][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.470500][ T6931] loop0: detected capacity change from 0 to 512 [ 270.715667][ T6935] loop3: detected capacity change from 0 to 1024 [ 270.745670][ T6931] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 270.821084][ T6931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c11c, mo2=0102] [ 270.916902][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.978656][ T6935] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.992666][ T6931] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.712: corrupted in-inode xattr [ 271.073141][ T6931] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.712: couldn't read orphan inode 15 (err -117) [ 271.143708][ T6935] overlayfs: failed to resolve './file0': -2 [ 271.157142][ T6931] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,abort,debug,noload,grpid,noblock_validity,noquota,lazytime,usrjquota=,,errors=continue. Quota mode: none. [ 271.957011][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.996918][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.293633][ T6960] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 274.036931][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.998269][ T6962] loop0: detected capacity change from 0 to 32768 [ 275.036813][ T5497] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 275.076935][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.324349][ T5497] usb 3-1: Using ep0 maxpacket: 16 [ 275.520257][ T6982] loop3: detected capacity change from 0 to 1024 [ 275.577157][ T5497] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 275.718004][ T5497] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 275.728835][ T5497] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 275.749871][ T5497] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 276.116903][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.507650][ T5497] usb 3-1: config 1 interface 0 has no altsetting 0 [ 276.560732][ T6992] device rose0 entered promiscuous mode [ 276.567434][ T6992] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 276.567783][ T6982] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.587428][ T5497] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.596608][ T5497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 276.929648][ T5497] usb 3-1: SerialNumber: syz [ 276.987190][ T6971] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 276.994301][ T6971] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 277.156927][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.249778][ T6999] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 277.603831][ T6971] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 277.685908][ T6971] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 278.376780][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.513650][ T5497] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 278.713403][ T6971] udc-core: couldn't find an available UDC or it's busy [ 278.757253][ T6971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 278.801917][ T5497] usb 3-1: USB disconnect, device number 6 [ 278.822343][ T5497] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 279.396886][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.228980][ T7030] loop3: detected capacity change from 0 to 4096 [ 280.436939][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.770060][ T7040] loop0: detected capacity change from 0 to 128 [ 280.836337][ T7046] loop2: detected capacity change from 0 to 1024 [ 281.477241][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.509151][ T7046] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 282.521025][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.763994][ T7067] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 283.513007][ T7066] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1786702966/1786702968 [ 283.557395][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.681966][ T7066] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1786702966/1786702968 [ 284.596972][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.659692][ T7101] loop2: detected capacity change from 0 to 128 [ 284.957111][ T7106] attempt to access beyond end of device [ 284.957111][ T7106] loop2: rw=3, want=144, limit=128 [ 284.968392][ T7106] attempt to access beyond end of device [ 284.968392][ T7106] loop2: rw=2051, want=1041, limit=128 [ 285.636891][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.910256][ T7111] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 286.676885][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.942722][ T7122] loop4: detected capacity change from 0 to 1024 [ 287.502341][ T7122] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.536656][ T7132] loop2: detected capacity change from 0 to 128 [ 287.716934][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.934374][ T7138] attempt to access beyond end of device [ 287.934374][ T7138] loop2: rw=3, want=144, limit=128 [ 287.945532][ T7138] attempt to access beyond end of device [ 287.945532][ T7138] loop2: rw=2051, want=1041, limit=128 [ 288.648435][ T7142] loop0: detected capacity change from 0 to 1024 [ 288.756960][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.881629][ T7148] netlink: 'syz.2.768': attribute type 10 has an invalid length. [ 289.030110][ T7148] team0: Port device dummy0 added [ 289.510222][ T26] audit: type=1800 audit(1755266796.015:2): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.767" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 289.663532][ T4591] hfsplus: b-tree write err: -5, ino 4 [ 289.806929][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.016389][ T7158] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 290.836983][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.887231][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.240651][ T7179] loop2: detected capacity change from 0 to 1024 [ 292.419802][ T7179] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 292.632902][ T7179] overlayfs: './file2' not a directory [ 292.916879][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.398785][ T7179] overlayfs: failed to resolve './file1': -2 [ 293.956837][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.033846][ T7205] loop3: detected capacity change from 0 to 8 [ 294.996913][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.347232][ T7213] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 296.036878][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.576953][ T7221] tipc: Started in network mode [ 296.837457][ T7221] tipc: Node identity ac1414aa, cluster identity 4711 [ 296.914195][ T7221] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.931962][ T7221] tipc: Enabled bearer , priority 10 [ 297.046999][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.076940][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.186880][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.254685][ T7235] loop2: detected capacity change from 0 to 256 [ 297.326879][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.381539][ T7240] loop4: detected capacity change from 0 to 128 [ 297.424070][ T7239] loop2: detected capacity change from 0 to 1024 [ 297.476920][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.626885][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.766888][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.841822][ T7246] netlink: 48 bytes leftover after parsing attributes in process `syz.4.795'. [ 297.860099][ T7246] attempt to access beyond end of device [ 297.860099][ T7246] loop4: rw=3, want=144, limit=128 [ 297.871106][ T7246] attempt to access beyond end of device [ 297.871106][ T7246] loop4: rw=2051, want=1041, limit=128 [ 298.052383][ T5499] tipc: Node number set to 2886997162 [ 298.058026][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.310477][ T7239] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 298.745250][ T7239] overlayfs: './file2' not a directory [ 298.848385][ T7260] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 299.907755][ T7264] loop4: detected capacity change from 0 to 1024 [ 300.594044][ T7264] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.640523][ T7250] loop0: detected capacity change from 0 to 32768 [ 300.665239][ T7264] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.681361][ T26] audit: type=1800 audit(1755266807.185:3): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.800" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 300.714641][ T7264] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.800: lblock 0 mapped to illegal pblock 0 (length 1) [ 300.737525][ T7264] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 300.753485][ T7264] EXT4-fs (loop4): This should not happen!! Data will be lost [ 300.753485][ T7264] [ 300.768337][ T7264] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: comm syz.4.800: lblock 0 mapped to illegal pblock 0 (length 1) [ 300.787715][ T7264] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.800: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 300.912135][ T4453] udevd[4453]: incorrect btrfs checksum on /dev/loop0 [ 300.996863][ T4190] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 301.236933][ C0] net_ratelimit: 7 callbacks suppressed [ 301.236951][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.956898][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.276889][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.361765][ T7276] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3529617080/3529617082 [ 302.427026][ T7276] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3529617080/3529617082 [ 302.532994][ T7288] loop2: detected capacity change from 0 to 128 [ 302.547051][ T4190] usb 4-1: Using ep0 maxpacket: 16 [ 302.787375][ T7292] device rose4 entered promiscuous mode [ 302.793827][ T7292] IPv6: ADDRCONF(NETDEV_CHANGE): rose4: link becomes ready [ 302.996963][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.317019][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.036921][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.356901][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.615988][ T4190] usb 4-1: unable to read config index 0 descriptor/all [ 304.624145][ T4190] usb 4-1: can't read configurations, error -71 [ 304.812667][ T7307] loop4: detected capacity change from 0 to 128 [ 304.845691][ T7310] loop2: detected capacity change from 0 to 1024 [ 304.905490][ T7307] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 304.916411][ T7307] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.077087][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.397619][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.468647][ T7310] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 305.901164][ T7310] overlayfs: failed to resolve './file1': -2 [ 306.046809][ T4190] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 306.116914][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.286952][ T4190] usb 1-1: Using ep0 maxpacket: 8 [ 306.446853][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.156838][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.476879][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.558126][ T4190] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 307.586121][ T4190] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.629623][ T4190] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.659336][ T4190] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.686583][ T4190] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.717336][ T4190] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.727296][ T4190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.882407][ T7335] tipc: Failed to remove unknown binding: 66,1,1/0:128397789/128397791 [ 307.907384][ T7335] tipc: Failed to remove unknown binding: 66,1,1/0:128397789/128397791 [ 308.027003][ T4190] usb 1-1: GET_CAPABILITIES returned 0 [ 308.036986][ T4190] usbtmc 1-1:16.0: can't read capabilities [ 308.196919][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.517001][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.236869][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.259704][ T4256] usb 1-1: USB disconnect, device number 9 [ 309.338769][ T7345] loop2: detected capacity change from 0 to 128 [ 309.556929][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.712565][ T7349] netlink: 48 bytes leftover after parsing attributes in process `syz.2.822'. [ 309.732122][ T7349] attempt to access beyond end of device [ 309.732122][ T7349] loop2: rw=3, want=144, limit=128 [ 309.743638][ T7349] attempt to access beyond end of device [ 309.743638][ T7349] loop2: rw=2051, want=1041, limit=128 [ 310.276979][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.596872][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.671823][ T7357] loop3: detected capacity change from 0 to 1024 [ 310.756947][ T4256] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 310.825675][ T7357] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 311.016794][ T4256] usb 1-1: Using ep0 maxpacket: 16 [ 311.166915][ T4256] usb 1-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 311.202043][ T4256] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 311.223375][ T4256] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 311.234307][ T4256] usb 1-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.249090][ T4256] usb 1-1: config 1 interface 0 has no altsetting 0 [ 311.326821][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.636881][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.358539][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.383871][ T4256] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.650530][ T4256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 312.686873][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.752284][ T4256] usb 1-1: SerialNumber: syz [ 312.867140][ T7353] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 312.886872][ T7353] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 313.010022][ T7374] loop2: detected capacity change from 0 to 128 [ 313.041177][ T7371] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1532159534/1532159536 [ 313.111814][ T7371] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1532159534/1532159536 [ 313.122567][ T7374] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 313.133481][ T7374] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 313.156626][ T7353] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 313.396870][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.716870][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.160133][ T7353] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 314.437350][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.746828][ T4256] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 314.758686][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.785854][ T7353] udc-core: couldn't find an available UDC or it's busy [ 314.799554][ T7353] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.858758][ T4256] usb 1-1: USB disconnect, device number 10 [ 314.867370][ T4256] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 315.068135][ T7391] loop3: detected capacity change from 0 to 128 [ 315.384744][ T7394] netlink: 48 bytes leftover after parsing attributes in process `syz.3.836'. [ 315.403311][ T7394] attempt to access beyond end of device [ 315.403311][ T7394] loop3: rw=3, want=144, limit=128 [ 315.414673][ T7394] attempt to access beyond end of device [ 315.414673][ T7394] loop3: rw=2051, want=1041, limit=128 [ 315.476932][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.796901][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.149263][ T7396] loop0: detected capacity change from 0 to 1024 [ 316.172990][ T7400] loop2: detected capacity change from 0 to 512 [ 316.270617][ T7400] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001004,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 316.302344][ T7400] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.429382][ T7400] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.838: corrupted inode contents [ 316.516934][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.517790][ T7396] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.561213][ T7415] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 316.836906][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.982669][ T7400] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #2: comm syz.2.838: mark_inode_dirty error [ 317.257434][ T7400] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #2: comm syz.2.838: corrupted inode contents [ 317.353491][ T7400] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.838: mark_inode_dirty error [ 317.496362][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.502967][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.556971][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.876913][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.151791][ T4199] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 318.596877][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.916893][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.636902][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.956961][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.677192][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.996933][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.716869][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.036899][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.109997][ T7466] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 322.209623][ T4190] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 322.756913][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.805086][ T4190] Bluetooth: hci0: Injecting HCI hardware error event [ 322.814132][ T4201] Bluetooth: hci0: hardware error 0x00 [ 322.846301][ T7467] loop0: detected capacity change from 0 to 1024 [ 322.957493][ T7467] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 323.076907][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.796900][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.116927][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.669090][ T7493] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2119998894/2119998896 [ 324.836870][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.156863][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.454433][ T7493] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2119998894/2119998896 [ 325.886909][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.054701][ T7511] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 326.206959][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.811506][ T7510] loop0: detected capacity change from 0 to 1024 [ 326.917033][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.227300][ T7510] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 327.238332][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.956858][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.276881][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.947341][ T7541] tipc: Failed to remove unknown binding: 66,1,1/0:432022042/432022044 [ 328.996894][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.005381][ T7541] tipc: Failed to remove unknown binding: 66,1,1/0:432022042/432022044 [ 329.316879][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.036868][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.356861][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.859921][ T7555] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 331.288801][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.396938][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.774177][ T7568] overlayfs: failed to clone upperpath [ 332.357239][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.436878][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.634635][ T7573] overlayfs: failed to clone upperpath [ 333.075404][ T7574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 333.081974][ T7574] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 333.090389][ T7574] vhci_hcd vhci_hcd.0: Device attached [ 333.099106][ T7575] vhci_hcd: connection closed [ 333.100364][ T1288] vhci_hcd: stop threads [ 333.321874][ T1288] vhci_hcd: release socket [ 333.347538][ T1288] vhci_hcd: disconnect device [ 333.372421][ T7580] loop0: detected capacity change from 0 to 512 [ 333.396878][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.465970][ T7580] EXT4-fs (loop0): Ignoring removed nobh option [ 333.477076][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.665459][ T7580] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.889: iget: bad i_size value: 38620345925642 [ 333.715288][ T7585] tipc: Failed to remove unknown binding: 66,1,1/0:3348089941/3348089943 [ 333.764848][ T7580] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.889: couldn't read orphan inode 15 (err -117) [ 333.777893][ T7585] tipc: Failed to remove unknown binding: 66,1,1/0:3348089941/3348089943 [ 333.857270][ T7580] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 334.436851][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.516936][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 335.476899][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 335.556850][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 336.343858][ T7617] loop2: detected capacity change from 0 to 1024 [ 336.602731][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 336.610215][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 336.616819][ T7617] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.951818][ T7629] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1728839812/1728839814 [ 336.977412][ T7629] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1728839812/1728839814 [ 337.510627][ T7633] loop3: detected capacity change from 0 to 512 [ 337.597460][ T7633] EXT4-fs (loop3): Ignoring removed nobh option [ 337.636957][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.644366][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.668096][ T7633] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.907: iget: bad i_size value: 38620345925642 [ 337.811842][ T7633] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.907: couldn't read orphan inode 15 (err -117) [ 337.893957][ T7633] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 338.734889][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 338.742751][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.796946][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.804558][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.836892][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.844374][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 341.063019][ T7667] loop4: detected capacity change from 0 to 1024 [ 341.148314][ T7667] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 341.526511][ T7678] tipc: Failed to remove unknown binding: 66,1,1/0:3536165729/3536165731 [ 341.560326][ T7678] tipc: Failed to remove unknown binding: 66,1,1/0:3536165729/3536165731 [ 341.876860][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 341.884443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.916883][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.924515][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 343.170606][ T7699] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 343.772026][ T7693] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 343.779348][ T7693] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.788274][ T7693] vhci_hcd vhci_hcd.0: Device attached [ 343.956948][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 343.964685][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.046584][ T7710] loop0: detected capacity change from 0 to 1024 [ 344.097258][ T5498] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 344.439790][ T7698] vhci_hcd: connection closed [ 344.445785][ T7437] vhci_hcd: stop threads [ 344.997070][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 345.004628][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 345.235847][ T7437] vhci_hcd: release socket [ 345.241612][ T7437] vhci_hcd: disconnect device [ 345.553003][ T7710] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.036841][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 346.044221][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 347.076956][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 347.084384][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 347.471649][ T7744] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 348.116852][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 348.124178][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.156852][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.164589][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.596980][ T7763] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 349.603680][ T7763] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 349.626768][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 349.661399][ T7763] vhci_hcd vhci_hcd.0: Device attached [ 349.896816][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 349.941018][ T4310] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 350.016874][ T23] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 350.028249][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.054231][ T23] usb 4-1: config 0 has no interface number 0 [ 350.065372][ T7765] vhci_hcd: connection reset by peer [ 350.071468][ T144] vhci_hcd: stop threads [ 350.075825][ T144] vhci_hcd: release socket [ 350.086802][ T23] usb 4-1: config 0 interface 126 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 350.098307][ T144] vhci_hcd: disconnect device [ 350.106014][ T7757] loop0: detected capacity change from 0 to 32768 [ 350.113037][ T23] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 350.128155][ T23] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 350.139725][ T23] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 350.154499][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 350.164288][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.175442][ T23] usb 4-1: config 0 descriptor?? [ 350.196887][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.204424][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.212243][ T7762] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 350.230837][ T7757] (syz.0.942,7757,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "coherency=f²ll" or missing value [ 350.296318][ T7757] (syz.0.942,7757,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 350.327586][ T7772] loop4: detected capacity change from 0 to 1024 [ 350.471434][ T5498] vhci_hcd: vhci_device speed not set [ 351.246860][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 351.254330][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 351.406264][ T7772] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.543778][ T23] snd-usb-audio: probe of 4-1:0.126 failed with error -2 [ 351.777188][ T23] usb 4-1: USB disconnect, device number 8 [ 351.932009][ T7792] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 352.276884][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 352.284450][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 352.800724][ T7797] udevd[7797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.205220][ T7813] loop3: detected capacity change from 0 to 512 [ 353.328755][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 353.336236][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 353.363510][ T7813] EXT4-fs (loop3): Ignoring removed nobh option [ 353.708113][ T7813] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.956: iget: bad i_size value: 38620345925642 [ 353.838459][ T7813] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.956: couldn't read orphan inode 15 (err -117) [ 353.932464][ T7813] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 354.356965][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 354.364356][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.226929][ T4310] vhci_hcd: vhci_device speed not set [ 355.396863][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.404583][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 356.420022][ T7837] netlink: 'syz.3.960': attribute type 6 has an invalid length. [ 356.436854][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 356.444229][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 356.510420][ T7839] device rose0 left promiscuous mode [ 356.558268][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 357.476904][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 357.484740][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 357.712583][ T7843] loop0: detected capacity change from 0 to 128 [ 358.093104][ T7848] netlink: 48 bytes leftover after parsing attributes in process `syz.0.963'. [ 358.112959][ T7848] attempt to access beyond end of device [ 358.112959][ T7848] loop0: rw=3, want=144, limit=128 [ 358.124480][ T7848] attempt to access beyond end of device [ 358.124480][ T7848] loop0: rw=2051, want=1041, limit=128 [ 358.516986][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.524766][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.350682][ T7857] overlayfs: failed to clone upperpath [ 359.556983][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.564630][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.487687][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.495146][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.669549][ T7877] loop3: detected capacity change from 0 to 64 [ 361.730396][ T7877] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 362.526904][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 362.534561][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 363.193233][ T26] audit: type=1326 audit(1755266869.695:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b31c3be9 code=0x7ffc0000 [ 363.216157][ T26] audit: type=1326 audit(1755266869.725:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b31c3be9 code=0x7ffc0000 [ 363.352089][ T26] audit: type=1326 audit(1755266869.845:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fe2b31c3be9 code=0x7ffc0000 [ 363.446558][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 363.457537][ T7895] netlink: del zone limit has 8 unknown bytes [ 363.569891][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 363.577248][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 364.168787][ T26] audit: type=1326 audit(1755266869.845:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b31c3be9 code=0x7ffc0000 [ 364.192660][ T26] audit: type=1326 audit(1755266869.845:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.4.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b31c3be9 code=0x7ffc0000 [ 364.596868][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 364.604571][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.091033][ T7905] loop3: detected capacity change from 0 to 1024 [ 365.636886][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.644388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.188479][ T7918] loop4: detected capacity change from 0 to 512 [ 366.254614][ T7905] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.343318][ T7918] EXT4-fs (loop4): Ignoring removed nobh option [ 366.416933][ T7918] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.985: iget: bad i_size value: 38620345925642 [ 366.427858][ T7925] loop2: detected capacity change from 0 to 128 [ 366.498284][ T7918] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.985: couldn't read orphan inode 15 (err -117) [ 366.512881][ T7918] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 366.676880][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.684370][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 367.467150][ T7932] netlink: 48 bytes leftover after parsing attributes in process `syz.2.987'. [ 367.478856][ T7932] attempt to access beyond end of device [ 367.478856][ T7932] loop2: rw=3, want=144, limit=128 [ 367.489631][ T7932] attempt to access beyond end of device [ 367.489631][ T7932] loop2: rw=2051, want=1041, limit=128 [ 367.716885][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 367.724829][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 367.907877][ T7935] device rose4 left promiscuous mode [ 367.941845][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): rose4: link becomes ready [ 368.236337][ T7944] comedi comedi3: c6xdigio: I/O port conflict (0x7,3) [ 368.260508][ T7946] loop4: detected capacity change from 0 to 64 [ 368.300745][ T7944] ------------[ cut here ]------------ [ 368.344621][ T7944] Unexpected driver unregister! [ 368.377480][ T7944] WARNING: CPU: 1 PID: 7944 at drivers/base/driver.c:263 driver_unregister+0x8e/0xa0 [ 368.419236][ T7944] Modules linked in: [ 368.442710][ T7944] CPU: 0 PID: 7944 Comm: syz.0.991 Not tainted 5.15.189-syzkaller #0 [ 368.594993][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.649438][ T7944] RIP: 0010:driver_unregister+0x8e/0xa0 [ 368.655591][ T7944] Code: e8 87 88 22 fd 48 89 df 5b 41 5e 41 5f e9 ea 63 ff ff e8 e5 f6 ae fc eb 05 e8 de f6 ae fc 48 c7 c7 e0 6c 7b 8a e8 a2 9a d4 04 <0f> 0b 5b 41 5e 41 5f c3 00 00 cc cc 00 00 cc cc 00 00 41 57 41 56 [ 368.756870][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.764206][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.922844][ T7944] RSP: 0018:ffffc900038ffa58 EFLAGS: 00010246 [ 369.226689][ T5499] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 369.346835][ T26] audit: type=1800 audit(1755266875.745:9): pid=7952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.993" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 369.796891][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 369.804267][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 369.977032][ T7944] RAX: 944dd6cb3a9b1900 RBX: ffffffff8d12a420 RCX: 0000000000080000 [ 370.014994][ T7944] RDX: ffffc90003f42000 RSI: 00000000000081e6 RDI: 00000000000081e7 [ 370.031393][ T7944] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10172267a8 [ 370.040757][ T7944] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff88814ce4a800 [ 370.055178][ T7944] R13: ffff88814ce4a920 R14: 0000000000000000 R15: dffffc0000000000 [ 370.065484][ T7944] FS: 00007fc0dd94d6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 370.075631][ T7944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 370.082596][ T7944] CR2: 0000200000340000 CR3: 0000000059c04000 CR4: 00000000003506e0 [ 370.091108][ T7944] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 370.106940][ T7944] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 370.138093][ T7944] Call Trace: [ 370.142040][ T7944] [ 370.145112][ T7944] comedi_device_detach+0x12d/0x6e0 [ 370.153846][ T7944] ? c6xdigio_attach+0x6d1/0x7d0 [ 370.159514][ T5499] usb 3-1: Using ep0 maxpacket: 32 [ 370.171725][ T7944] comedi_device_attach+0x55d/0x650 [ 370.177522][ T7944] comedi_unlocked_ioctl+0x5ec/0xe90 [ 370.183296][ T7944] ? comedi_poll+0x8b0/0x8b0 [ 370.189214][ T7944] ? bpf_lsm_file_ioctl+0x5/0x10 [ 370.194297][ T7944] ? security_file_ioctl+0x7c/0xa0 [ 370.200035][ T7944] ? comedi_poll+0x8b0/0x8b0 [ 370.204690][ T7944] __se_sys_ioctl+0xfa/0x170 [ 370.209517][ T7944] do_syscall_64+0x4c/0xa0 [ 370.215032][ T7944] ? clear_bhb_loop+0x30/0x80 [ 370.220101][ T7944] ? clear_bhb_loop+0x30/0x80 [ 370.224825][ T7944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 370.231116][ T7944] RIP: 0033:0x7fc0df6e5be9 [ 370.235780][ T7944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.255948][ T7944] RSP: 002b:00007fc0dd94d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.264828][ T7944] RAX: ffffffffffffffda RBX: 00007fc0df90cfa0 RCX: 00007fc0df6e5be9 [ 370.272946][ T7944] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 370.282889][ T7944] RBP: 00007fc0df768e19 R08: 0000000000000000 R09: 0000000000000000 [ 370.290992][ T7944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.297026][ T5499] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 370.299991][ T7944] R13: 00007fc0df90d038 R14: 00007fc0df90cfa0 R15: 00007ffe8e492cf8 [ 370.312819][ T5499] usb 3-1: config 0 has no interface number 0 [ 370.317983][ T7944] [ 370.325002][ T7944] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 370.332435][ T7944] CPU: 1 PID: 7944 Comm: syz.0.991 Not tainted 5.15.189-syzkaller #0 [ 370.340635][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.350716][ T7944] Call Trace: [ 370.354121][ T7944] [ 370.357196][ T7944] dump_stack_lvl+0x168/0x230 [ 370.361936][ T7944] ? show_regs_print_info+0x20/0x20 [ 370.367334][ T7944] ? load_image+0x3b0/0x3b0 [ 370.372076][ T7944] panic+0x2c9/0x7f0 [ 370.376080][ T7944] ? bpf_jit_dump+0xd0/0xd0 [ 370.380618][ T7944] ? driver_unregister+0x8e/0xa0 [ 370.385584][ T7944] __warn+0x248/0x2b0 [ 370.389586][ T7944] ? driver_unregister+0x8e/0xa0 [ 370.394703][ T7944] report_bug+0x1b7/0x2e0 [ 370.399058][ T7944] handle_bug+0x3a/0x70 [ 370.403359][ T7944] exc_invalid_op+0x16/0x40 [ 370.407887][ T7944] asm_exc_invalid_op+0x16/0x20 [ 370.412857][ T7944] RIP: 0010:driver_unregister+0x8e/0xa0 [ 370.418726][ T7944] Code: e8 87 88 22 fd 48 89 df 5b 41 5e 41 5f e9 ea 63 ff ff e8 e5 f6 ae fc eb 05 e8 de f6 ae fc 48 c7 c7 e0 6c 7b 8a e8 a2 9a d4 04 <0f> 0b 5b 41 5e 41 5f c3 00 00 cc cc 00 00 cc cc 00 00 41 57 41 56 [ 370.438491][ T7944] RSP: 0018:ffffc900038ffa58 EFLAGS: 00010246 [ 370.444728][ T7944] RAX: 944dd6cb3a9b1900 RBX: ffffffff8d12a420 RCX: 0000000000080000 [ 370.452846][ T7944] RDX: ffffc90003f42000 RSI: 00000000000081e6 RDI: 00000000000081e7 [ 370.461021][ T7944] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10172267a8 [ 370.469125][ T7944] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff88814ce4a800 [ 370.477103][ T5499] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 370.477476][ T7944] R13: ffff88814ce4a920 R14: 0000000000000000 R15: dffffc0000000000 [ 370.493381][ T5499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.495232][ T7944] ? driver_unregister+0x8e/0xa0 [ 370.506418][ T5499] usb 3-1: Product: syz [ 370.508320][ T7944] comedi_device_detach+0x12d/0x6e0 [ 370.508359][ T7944] ? c6xdigio_attach+0x6d1/0x7d0 [ 370.508390][ T7944] comedi_device_attach+0x55d/0x650 [ 370.508420][ T7944] comedi_unlocked_ioctl+0x5ec/0xe90 [ 370.508451][ T7944] ? comedi_poll+0x8b0/0x8b0 [ 370.508542][ T7944] ? bpf_lsm_file_ioctl+0x5/0x10 [ 370.520798][ T5499] usb 3-1: Manufacturer: syz [ 370.523055][ T7944] ? security_file_ioctl+0x7c/0xa0 [ 370.532615][ T5499] usb 3-1: SerialNumber: syz [ 370.533857][ T7944] ? comedi_poll+0x8b0/0x8b0 [ 370.545094][ T5499] usb 3-1: config 0 descriptor?? [ 370.548405][ T7944] __se_sys_ioctl+0xfa/0x170 [ 370.548447][ T7944] do_syscall_64+0x4c/0xa0 [ 370.548472][ T7944] ? clear_bhb_loop+0x30/0x80 [ 370.548492][ T7944] ? clear_bhb_loop+0x30/0x80 [ 370.548512][ T7944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 370.548539][ T7944] RIP: 0033:0x7fc0df6e5be9 [ 370.548562][ T7944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.548581][ T7944] RSP: 002b:00007fc0dd94d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.548604][ T7944] RAX: ffffffffffffffda RBX: 00007fc0df90cfa0 RCX: 00007fc0df6e5be9 [ 370.605060][ T5499] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 370.621460][ T7944] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 370.621490][ T7944] RBP: 00007fc0df768e19 R08: 0000000000000000 R09: 0000000000000000 [ 370.621504][ T7944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.621515][ T7944] R13: 00007fc0df90d038 R14: 00007fc0df90cfa0 R15: 00007ffe8e492cf8 [ 370.621547][ T7944] [ 370.623169][ T7944] Kernel Offset: disabled [ 370.689048][ T7944] Rebooting in 86400 seconds..