last executing test programs: 1m51.835344753s ago: executing program 1 (id=1389): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x24040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0xdddd0000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0xeeee8000, 0xd000, 0x0, 0x40, 0x3, 0xfc, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x10000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x830}]}) 1m51.579791584s ago: executing program 1 (id=1393): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m51.190480105s ago: executing program 1 (id=1398): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_raw(r0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000a40), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bind$can_raw(r1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}], 0x20) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 1m50.114581045s ago: executing program 1 (id=1404): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f00000003c0)={[{@utf8no}, {@fat=@gid}, {@utf8}, {@rodir}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@fat=@flush}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@gid}, {@utf8no}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f00000006c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 1m49.702840087s ago: executing program 1 (id=1409): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1m49.335302234s ago: executing program 1 (id=1412): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x6, 0x0, 0x6, 0x19, "f44327189019f4ba9c2d666c378d75463e665e"}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x28000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000080)={0x8b, 0x4, 0x5}) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f00000042c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES64=r8], 0x20}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x714f, 0x0) 1m48.952367694s ago: executing program 32 (id=1412): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x6, 0x0, 0x6, 0x19, "f44327189019f4ba9c2d666c378d75463e665e"}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x28000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000080)={0x8b, 0x4, 0x5}) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f00000042c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES64=r8], 0x20}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x714f, 0x0) 12.026029591s ago: executing program 5 (id=1871): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x301, 0xffffffff, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e23}}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040014) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x2c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x2c}}, 0x4004) 11.366984301s ago: executing program 3 (id=1875): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000180)={"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"}) syz_usb_connect(0x3, 0x64, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000cb8be7406d042308483901020301090252000100"], 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 10.87056462s ago: executing program 5 (id=1878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0x81}, 0x3c) socket(0x10, 0x803, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) 9.731212462s ago: executing program 5 (id=1882): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18ffffffff220700fbdbdf25021820fc000000f5ffffff020800f9ffac140045a7b41253c524d7dd140000002fa785135faf51952616a1041d9ef2e7ca0a02a1fc56915ac0d747986c2e749682c9"], 0x24}, 0x1, 0x0, 0x0, 0xc009}, 0x40000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x34, r2, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x26c}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x4000020) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, 0x0, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000380)={0x11, 0x4, r6, 0x1, 0x40, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r4, &(0x7f0000000300), 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x2, 0x6, 0xffcaa9ebf54f968b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x10000003, 'wrr\x00', 0x0, 0xa7e, 0x70}, 0x2c) 9.459585065s ago: executing program 5 (id=1885): socket(0x10, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[], 0x70}}, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x4002044) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x717f4356, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000011c0)={0xb, 0x2, 0x100, "4a6b3b233620d53473507046051555df7a9b380dca688361c241e01eadc97bbb", 0x34343459}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FITHAW(r0, 0xc0045878) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x63, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x11, 0x80, 0x1, 0x0, 0xfe}, 0x38, &(0x7f0000000540)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "5081877729ac6851f0b700ab99b84ae4"}, @ssp_cap={0x1c, 0x10, 0xa, 0xf, 0x4, 0x2, 0xf, 0x4, [0x90, 0xff0030, 0x0, 0x3fc0]}, @ptm_cap={0x3}]}}) sendmsg(r1, &(0x7f0000000480)={&(0x7f0000001e40)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x58, 0x112, 0x5, "ca9daece8bd306606573b02399d7a5fb8ed5be7982aafc30fd6b57358ed8beeeebba29ddd3caed7adc470b7b3776f179c0d40c2e77fce2688667a497cd6268d2b614cbf53a"}, {0xb8, 0x107, 0xfc7, "6d86b0a2cc3a6ec3dbad30e62ee1297129fadd7edc953d3fd6aa2bb68154a341ad22899eea5d6f6823f7f42c95f5c275d55a7d8fec1b646d6cb48a0db1c196164124a3a06d4ceae4688389a99481bf1aa1eea6f8be047cf6cba613b56573ffb869ebadbf02f3294ff5fb615894f0e2559507f9f929a9ff8dbcd2a72e22bdd2bfbcba4fef9bb980cb85bdd03e4400beedab2d79e3e0b0597b68aaa6ecdc7102689b02ba"}], 0x110}, 0x11) ppoll(&(0x7f0000000100)=[{r5, 0x108}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x7}) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r6, r6, 0x0, 0x8000002) 8.739832036s ago: executing program 3 (id=1892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0x81}, 0x3c) socket(0x10, 0x803, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) 7.434850634s ago: executing program 4 (id=1895): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18ffffffff220700fbdbdf25021820fc000000f5ffffff020800f9ffac140045a7b41253c524d7dd140000002fa785135faf51952616a1041d9ef2e7ca0a02a1fc56915ac0d747986c2e749682c9"], 0x24}, 0x1, 0x0, 0x0, 0xc009}, 0x40000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x34, r2, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x26c}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x4000020) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, 0x0, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000380)={0x11, 0x4, r6, 0x1, 0x40, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r4, &(0x7f0000000300), 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x2, 0x6, 0xffcaa9ebf54f968b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x10000003, 'wrr\x00', 0x0, 0xa7e, 0x70}, 0x2c) 6.787409847s ago: executing program 3 (id=1896): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, 0x0, 0x0) 6.603197476s ago: executing program 3 (id=1898): ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000040)=0x19d, 0x1, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xee01) unlink(&(0x7f0000000000)='./file0\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) 6.511319343s ago: executing program 5 (id=1899): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000000)={0x0, 0x300}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @ipv6=@tipc_packet={0x5, 0x6, "554a97", 0xa8, 0x6, 0xcde584212921cc8c, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[@fragment={0xa, 0x0, 0x8, 0x1, 0x0, 0x14, 0x66}, @srh={0x0, 0x0, 0x4, 0x0, 0x36, 0x28, 0xc}, @srh={0x16, 0xe, 0x4, 0x7, 0x8, 0x60, 0xe, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x30}, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}]}], @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x0, 0x2, 0x400, 0x0, 0x1, 0x6, 0x5, 0x3, 0x1ff, 0x7b44, 0x4, 0x4e23, 0x4e23}, 0x2, 0x2}}}}}}, 0xde) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x5}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$proc_mixer(r8, 0x0, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x4000800) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) 6.352013384s ago: executing program 4 (id=1900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300080001000000000014778b48"], 0xfdef) 5.952182604s ago: executing program 0 (id=1901): r0 = socket$netlink(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x8, 0x3, 0x377}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 5.706196673s ago: executing program 0 (id=1903): unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 5.551536394s ago: executing program 2 (id=1904): socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 5.319283724s ago: executing program 4 (id=1905): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b00000009040000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) 4.569486957s ago: executing program 2 (id=1906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0x81}, 0x3c) socket(0x10, 0x803, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) 3.51137603s ago: executing program 2 (id=1907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x40000) 3.244133583s ago: executing program 2 (id=1908): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, 0x0, 0x0) 3.169220349s ago: executing program 2 (id=1909): socket(0x10, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[], 0x70}}, 0x0) sendmsg$802154_dgram(r0, 0x0, 0x4002044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'geneve1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x717f4356, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000011c0)={0xb, 0x2, 0x100, "4a6b3b233620d53473507046051555df7a9b380dca688361c241e01eadc97bbb", 0x34343459}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FITHAW(r0, 0xc0045878) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x63, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x11, 0x80, 0x1, 0x0, 0xfe}, 0x38, &(0x7f0000000540)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "5081877729ac6851f0b700ab99b84ae4"}, @ssp_cap={0x1c, 0x10, 0xa, 0xf, 0x4, 0x2, 0xf, 0x4, [0x90, 0xff0030, 0x0, 0x3fc0]}, @ptm_cap={0x3}]}}) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000001e40)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x58, 0x112, 0x5, "ca9daece8bd306606573b02399d7a5fb8ed5be7982aafc30fd6b57358ed8beeeebba29ddd3caed7adc470b7b3776f179c0d40c2e77fce2688667a497cd6268d2b614cbf53a"}, {0xb8, 0x107, 0xfc7, "6d86b0a2cc3a6ec3dbad30e62ee1297129fadd7edc953d3fd6aa2bb68154a341ad22899eea5d6f6823f7f42c95f5c275d55a7d8fec1b646d6cb48a0db1c196164124a3a06d4ceae4688389a99481bf1aa1eea6f8be047cf6cba613b56573ffb869ebadbf02f3294ff5fb615894f0e2559507f9f929a9ff8dbcd2a72e22bdd2bfbcba4fef9bb980cb85bdd03e4400beedab2d79e3e0b0597b68aaa6ecdc7102689b02ba"}], 0x110}, 0x11) ppoll(&(0x7f0000000100)=[{r5, 0x108}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x7}) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r6, r6, 0x0, 0x8000002) 2.958389553s ago: executing program 3 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18ffffffff220700fbdbdf25021820fc000000f5ffffff020800f9ffac140045a7b41253c524d7dd140000002fa785135faf51952616a1041d9ef2e7ca0a02a1fc56915ac0d747986c2e749682c9"], 0x24}, 0x1, 0x0, 0x0, 0xc009}, 0x40000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x34, r2, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x26c}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x4000020) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, 0x0, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000380)={0x11, 0x4, r6, 0x1, 0x40, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r4, &(0x7f0000000300), 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x2, 0x6, 0xffcaa9ebf54f968b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x10000003, 'wrr\x00', 0x0, 0xa7e, 0x70}, 0x2c) 2.783000127s ago: executing program 0 (id=1911): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_raw(r0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000a40), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x3, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}], 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f00", 0x20) 2.723761725s ago: executing program 3 (id=1912): syz_usb_connect$uac1(0x2, 0xdc, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f00000001c0)={[], [{@flag='nolazytime'}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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") chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x500, 0x10e) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FITRIM(r1, 0xc4009420, &(0x7f0000000180)={0x5, 0x204}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 1.816740109s ago: executing program 4 (id=1913): r0 = socket$netlink(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x8, 0x3, 0x377}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1.761300464s ago: executing program 0 (id=1914): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0xec, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x98, 0x2, [@TCA_BASIC_EMATCHES={0x94, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_META={0x7c, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="712fb6", @TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0e"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe746a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.425204731s ago: executing program 0 (id=1915): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) syz_io_uring_setup(0x52c7, 0x0, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, 0x0) 1.315142554s ago: executing program 4 (id=1916): socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 980.902409ms ago: executing program 2 (id=1917): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) dup(r0) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002a000701fcffffff00000000057c0000f7b90faa52f870550d20de84af8b55e5d18660a281a5b4f0146cd8665f7220f7298d87afd80b37e28a5c7b9fe01a3e55334cc91c0e5f44157c6eff3b91888b8e206fabdfa8bcdc491fb304979d7b5013d7abb4de0373c4b148e95d4c58d01981178fbdcd7e6f5879"], 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x81c0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r5 = socket$kcm(0x10, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @mcast1, @mcast2, 0xa, 0x0, 0x6, 0x500, 0x6a, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x0, 0x940c, 0x3002, 0x240, 0x2c0, 0x33c, 0x3d8, 0x3d8, 0x33c, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xffffffff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffff00], 'wlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x3c, 0x1, 0x0, 0x2}, 0x0, 0x21c, 0x240, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@multicast1, [0xffffffff, 0xff, 0x0, 0xffffff00], @ipv4=@multicast2, [0x0, 0xff, 0x0, 0xffffffff], 0x100004d6, 0x3501, 0x84, 0x1, 0x4, 0x1}, {@ipv4=@loopback, [0xff000000, 0xffffffff, 0xff000000, 0xff], @ipv4=@empty, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], 0x4d2, 0x3507, 0x2f, 0x0, 0x4}, {@ipv4=@remote, [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@private0, [0xff0000ff, 0xffffff00, 0xff], 0x4d2, 0x3505, 0x32, 0x0, 0x21, 0x18}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xff000000, 0x0, 0xffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x532d44cb633499ef, 0x0, 0xff000000, 0xff], 0x4d3, 0x350a, 0x6c, 0x1, 0x4, 0x19}], 0x7, 0x1}}, @inet=@rpfilter={{0x24}, {0x9}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xab0e}}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x3}, {0x2, 0x3, 0x1}, {0x1, 0x4, 0x4}, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x43c) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x500, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x7, 0x8}}}}}}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) 213.19582ms ago: executing program 4 (id=1918): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x40, 0x40, 0x97e, 0x5, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0xb1, 0x0, 0xf, [0x9]}, @ssrr={0x89, 0xb, 0x29, [@remote, @broadcast]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) unshare(0x2c060000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x805}, 0x48040) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80}, 0x10}, 0x94) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000000)={r5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)={r5}) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffb8, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000180)='^,/\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000005c0), 0x6e, 0x0}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x5000, r8}, 0x38) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}, @RTA_OIF={0x8, 0x4, r11}]}, 0x38}, 0x1, 0x11}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000060a010400000000000000000a00000509801800018008000100647570000c00028008000166ba6f4086d498e80900010073797a3300000000140000001100010000000000000000000e00000eed3f478c6e7628b249ba2b3120b5a3811ca7fc00"/134], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 65.36262ms ago: executing program 0 (id=1919): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0, @ANYRESHEX=r1], 0x30}}, 0x4) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e22, @private=0xa010100}, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x0, 0x0}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000340)=0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB="647839ead2ae8cb75ac15c8854122f8bab00d6af098600"/35], 0x3c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') preadv(r0, &(0x7f0000000240), 0x0, 0x10, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f00000012c0)=""/4109, 0x100d) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0xfffffffffffffed7}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) flock(r7, 0x2) semget$private(0x0, 0x7, 0x180) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) sendmsg$alg(r6, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801}, 0x4000001) 0s ago: executing program 5 (id=1920): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000180)={"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"}) syz_usb_connect(0x3, 0x64, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000cb8be7406d042308483901020301090252000100"], 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) kernel console output (not intermixed with test programs): has invalid wMaxPacketSize 0 [ 305.512143][ T29] usb 2-1: config 0 interface 89 has no altsetting 0 [ 305.662016][ T29] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 305.780430][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.892645][ T29] usb 2-1: Product: syz [ 305.947026][ T29] usb 2-1: Manufacturer: syz [ 306.061572][ T29] usb 2-1: SerialNumber: syz [ 306.999809][ T29] usb 2-1: config 0 descriptor?? [ 307.670696][ T29] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 307.836289][ T29] em28xx 2-1:0.89: Video interface 89 found: [ 308.014465][ T29] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 308.357326][ T8316] loop3: detected capacity change from 0 to 64 [ 308.425032][ T8317] __nla_validate_parse: 2 callbacks suppressed [ 308.425053][ T8317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.730'. [ 308.427718][ T29] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 308.476178][ T29] em28xx 2-1:0.89: board has no eeprom [ 308.726928][ T29] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 308.736909][ T29] em28xx 2-1:0.89: analog set to bulk mode. [ 308.743792][ T5943] em28xx 2-1:0.89: Registering V4L2 extension [ 308.776951][ T29] usb 2-1: USB disconnect, device number 7 [ 308.788114][ T5843] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 309.088224][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 309.257798][ T5843] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.458312][ T29] em28xx 2-1:0.89: Disconnecting em28xx [ 309.487527][ T5843] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 309.547283][ T5843] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 309.593610][ T10] IPVS: starting estimator thread 0... [ 309.596172][ T5943] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 309.609571][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.652122][ T5843] usb 4-1: Product: syz [ 309.662469][ T5943] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 309.676369][ T5843] usb 4-1: Manufacturer: syz [ 309.687883][ T5843] usb 4-1: SerialNumber: syz [ 309.688347][ T8337] IPVS: using max 26 ests per chain, 62400 per kthread [ 309.704567][ T5943] em28xx 2-1:0.89: No AC97 audio processor [ 309.751847][ T5843] usb 4-1: config 0 descriptor?? [ 309.800221][ T5943] usb 2-1: Decoder not found [ 309.818828][ T5943] em28xx 2-1:0.89: failed to create media graph [ 309.843387][ T5943] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 309.935268][ T5943] em28xx 2-1:0.89: Registering snapshot button... [ 309.971017][ T5943] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input7 [ 309.984499][ T8346] loop1: detected capacity change from 0 to 64 [ 310.048907][ T5943] em28xx 2-1:0.89: Remote control support is not available for this card. [ 310.097716][ T29] em28xx 2-1:0.89: Closing input extension [ 310.130326][ T29] em28xx 2-1:0.89: Deregistering snapshot button [ 310.299920][ T8346] ptrace attach of "./syz-executor exec"[8351] was attempted by "./syz-executor exec"[8346] [ 310.617555][ T8355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.210103][ T8358] syz.0.744 uses obsolete (PF_INET,SOCK_PACKET) [ 311.210318][ T5949] usb 4-1: USB disconnect, device number 8 [ 311.336173][ T29] em28xx 2-1:0.89: Freeing device [ 311.477660][ T5849] Trying to free block not in datazone [ 311.818791][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.746'. [ 312.161030][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 312.616525][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 312.889760][ T8396] loop1: detected capacity change from 0 to 4096 [ 312.913846][ T8396] EXT4-fs: Ignoring removed orlov option [ 312.996457][ T8396] EXT4-fs (loop1): Test dummy encryption mode enabled [ 313.061555][ T8396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.556648][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.753272][ T5842] IPVS: starting estimator thread 0... [ 313.850021][ T8412] IPVS: using max 49 ests per chain, 117600 per kthread [ 314.033961][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 317.334363][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.342574][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.992352][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 318.509497][ T8469] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 325.268192][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 325.459313][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 325.541237][ T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 325.591329][ T10] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 325.644672][ T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.698284][ T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 325.816264][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 325.862415][ T8538] lo speed is unknown, defaulting to 1000 [ 325.873274][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.902611][ T10] usb 5-1: Product: syz [ 325.926330][ T10] usb 5-1: Manufacturer: syz [ 325.942634][ T10] usb 5-1: SerialNumber: syz [ 326.021542][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 326.195278][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input8 [ 326.287859][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 326.349967][ T10] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 326.369602][ T10] (id 0x00) [ 326.529133][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.806'. [ 326.538465][ T10] rc_core: IR keymap rc-imon-pad not found [ 326.538531][ T10] Registered IR keymap rc-empty [ 326.538786][ T10] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 326.538809][ T10] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 326.563432][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 326.633795][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 326.659137][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input9 [ 326.693781][ T10] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:9> initialized [ 327.297307][ T8571] loop3: detected capacity change from 0 to 64 [ 328.005441][ T5949] IPVS: starting estimator thread 0... [ 328.119653][ T8576] IPVS: using max 24 ests per chain, 57600 per kthread [ 329.089274][ T5949] usb 5-1: USB disconnect, device number 9 [ 329.256637][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.820'. [ 329.310680][ T8595] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 329.346069][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 329.670318][ T8601] loop3: detected capacity change from 0 to 4096 [ 329.715804][ T8601] ntfs3: Unknown parameter 'noshowmeta' [ 329.912883][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 330.212690][ T5949] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 330.241564][ T5949] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 331.552519][ T8616] fido_id[8616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 332.017448][ T8635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 332.235252][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 332.299794][ T8640] loop2: detected capacity change from 0 to 8192 [ 332.308330][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.839'. [ 333.927835][ T8658] loop2: detected capacity change from 0 to 4096 [ 335.241900][ T8675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.848'. [ 335.501446][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.851'. [ 335.540216][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 335.695032][ T8687] netlink: 388 bytes leftover after parsing attributes in process `syz.1.853'. [ 335.696080][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 337.559209][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.863'. [ 339.270126][ T8728] loop2: detected capacity change from 0 to 256 [ 339.290167][ T8728] exfat: Deprecated parameter 'namecase' [ 339.621351][ T8728] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 340.930447][ T8733] netlink: 388 bytes leftover after parsing attributes in process `syz.4.866'. [ 341.234993][ T8735] loop4: detected capacity change from 0 to 4096 [ 341.263030][ T8735] ntfs3: Unknown parameter 'noshowmeta' [ 341.351472][ T8741] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 341.401352][ T8741] team0 (unregistering): Port device team_slave_0 removed [ 341.470886][ T8741] team0 (unregistering): Failed to send options change via netlink (err -105) [ 341.590204][ T8741] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 341.648712][ T8741] team0 (unregistering): Port device team_slave_1 removed [ 341.710955][ T8741] team0 (unregistering): Failed to send options change via netlink (err -105) [ 341.720440][ T8741] team0 (unregistering): Failed to send port change of device netdevsim0 via netlink (err -105) [ 341.732264][ T8741] team0 (unregistering): Port device netdevsim0 removed [ 341.929519][ T5923] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 342.120330][ T5923] usb 2-1: config 1 interface 0 has no altsetting 0 [ 342.142290][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 342.176489][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.198320][ T8757] loop4: detected capacity change from 0 to 2048 [ 342.208315][ T5923] usb 2-1: Product: syz [ 342.222027][ T5923] usb 2-1: Manufacturer: syz [ 342.237091][ T5923] usb 2-1: SerialNumber: syz [ 342.313154][ T8757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.426146][ T8762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.876'. [ 342.551750][ T5923] usb 2-1: USB disconnect, device number 8 [ 342.649498][ T8769] netlink: 388 bytes leftover after parsing attributes in process `syz.0.878'. [ 342.706113][ T8757] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.875: bg 0: block 234: padding at end of block bitmap is not set [ 342.812914][ T8757] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 30 with max blocks 14 with error 28 [ 342.839208][ T8757] EXT4-fs (loop4): This should not happen!! Data will be lost [ 342.839208][ T8757] [ 342.849217][ T8757] EXT4-fs (loop4): Total free blocks count 0 [ 342.856079][ T8757] EXT4-fs (loop4): Free/Dirty block details [ 342.886095][ T8757] EXT4-fs (loop4): free_blocks=0 [ 342.929171][ T8757] EXT4-fs (loop4): dirty_blocks=32 [ 342.956510][ T8757] EXT4-fs (loop4): Block reservation details [ 342.996700][ T8757] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 343.054874][ T8772] lo speed is unknown, defaulting to 1000 [ 344.635068][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.183243][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.885'. [ 345.224867][ T8792] vlan0: entered promiscuous mode [ 345.230347][ T8792] ip6gretap0: entered promiscuous mode [ 345.465977][ T8799] netlink: 388 bytes leftover after parsing attributes in process `syz.4.889'. [ 346.388056][ T5949] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 346.550379][ T5949] usb 4-1: config 1 interface 0 has no altsetting 0 [ 346.574181][ T5949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 346.595959][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.615167][ T5949] usb 4-1: Product: syz [ 346.625321][ T5949] usb 4-1: Manufacturer: syz [ 346.635458][ T5949] usb 4-1: SerialNumber: syz [ 346.788099][ T5943] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 346.937283][ T5949] usb 4-1: USB disconnect, device number 9 [ 346.971336][ T5943] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 346.996841][ T5943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.050982][ T5943] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 347.077595][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.106688][ T5943] usb 2-1: Product: syz [ 347.111187][ T5943] usb 2-1: Manufacturer: syz [ 347.121280][ T5943] usb 2-1: SerialNumber: syz [ 347.165969][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11 [ 347.279570][ T8824] loop4: detected capacity change from 0 to 128 [ 347.345668][ T8821] lo speed is unknown, defaulting to 1000 [ 347.637408][ T8822] loop2: detected capacity change from 0 to 8192 [ 347.801623][ T8836] fuse: Bad value for 'fd' [ 347.814677][ T8835] netlink: 388 bytes leftover after parsing attributes in process `syz.3.900'. [ 347.867451][ T5195] bcm5974 2-1:1.0: could not read from device [ 347.971006][ T5943] usb 2-1: USB disconnect, device number 9 [ 347.980794][ T5195] bcm5974 2-1:1.0: could not read from device [ 348.183456][ T8846] loop2: detected capacity change from 0 to 4096 [ 348.190182][ T5949] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 348.219892][ T8846] ntfs3: Unknown parameter 'noshowmeta' [ 348.274029][ T8845] loop1: detected capacity change from 0 to 4096 [ 348.370506][ T5949] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 348.403719][ T5949] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.442100][ T5949] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 348.456334][ T5949] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.501612][ T5949] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 348.544307][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 348.590431][ T5949] usb 5-1: Product: syz [ 348.601711][ T5949] usb 5-1: Manufacturer: syz [ 348.676238][ T5949] cdc_wdm 5-1:1.0: skipping garbage [ 348.703608][ T5949] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 348.889779][ T5949] usb 5-1: USB disconnect, device number 10 [ 349.842271][ T8871] fuse: Bad value for 'fd' [ 349.861941][ T5843] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 350.163935][ T5843] usb 4-1: config 1 interface 0 has no altsetting 0 [ 350.426558][ T5843] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 350.502537][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.583234][ T5843] usb 4-1: Product: syz [ 350.640156][ T5843] usb 4-1: Manufacturer: syz [ 350.720616][ T5843] usb 4-1: SerialNumber: syz [ 351.189867][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 351.388407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 351.406447][ T8881] lo speed is unknown, defaulting to 1000 [ 351.432551][ T5843] usb 4-1: USB disconnect, device number 10 [ 351.649493][ T8884] loop1: detected capacity change from 0 to 8192 [ 352.552792][ T8908] comedi comedi0: Minor 2 could not be opened [ 353.218171][ T8907] IPVS: Unknown mcast interface: syz_tun [ 353.466661][ T8922] fuse: Bad value for 'fd' [ 353.730233][ T8921] overlayfs: failed to clone upperpath [ 353.762720][ T8911] loop2: detected capacity change from 0 to 4096 [ 355.723339][ T5949] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 356.079737][ T5949] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 356.094273][ T5949] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 356.104644][ T5949] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.127281][ T5949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 356.138619][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 356.146873][ T5949] usb 4-1: Product: syz [ 356.151752][ T5949] usb 4-1: Manufacturer: syz [ 356.156710][ T5949] usb 4-1: SerialNumber: syz [ 356.278866][ T5916] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 356.446226][ T5949] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 356.476678][ T5916] usb 2-1: config 1 interface 0 has no altsetting 0 [ 356.492320][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 356.496702][ T5916] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 356.542795][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.579458][ T5916] usb 2-1: Product: syz [ 356.622529][ T5916] usb 2-1: Manufacturer: syz [ 356.633822][ T5949] usb 4-1: USB disconnect, device number 11 [ 356.657663][ T5916] usb 2-1: SerialNumber: syz [ 356.771670][ T5949] usblp0: removed [ 356.953335][ T5916] usb 2-1: USB disconnect, device number 10 [ 357.607635][ T8974] loop2: detected capacity change from 0 to 256 [ 357.614058][ T8970] loop4: detected capacity change from 0 to 4096 [ 357.855347][ T8974] FAT-fs (loop2): Directory bread(block 64) failed [ 357.883013][ T8974] FAT-fs (loop2): Directory bread(block 65) failed [ 357.909281][ T8974] FAT-fs (loop2): Directory bread(block 66) failed [ 357.999341][ T8974] FAT-fs (loop2): Directory bread(block 67) failed [ 358.184361][ T8974] FAT-fs (loop2): Directory bread(block 68) failed [ 358.270908][ T8974] FAT-fs (loop2): Directory bread(block 69) failed [ 358.297671][ T8974] FAT-fs (loop2): Directory bread(block 70) failed [ 358.340356][ T8974] FAT-fs (loop2): Directory bread(block 71) failed [ 358.370625][ T8974] FAT-fs (loop2): Directory bread(block 72) failed [ 358.436974][ T8974] FAT-fs (loop2): Directory bread(block 73) failed [ 358.715886][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 359.031279][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 359.143344][ T5847] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 359.152660][ T5847] Bluetooth: hci0: unexpected event for opcode 0x203e [ 360.175747][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 360.225199][ T5843] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 360.402894][ T5843] usb 3-1: Using ep0 maxpacket: 16 [ 360.421627][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.433626][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.455719][ T5843] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 360.465989][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.484934][ T5843] usb 3-1: config 0 descriptor?? [ 360.704540][ T9023] loop3: detected capacity change from 0 to 32768 [ 360.720430][ T9023] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.963 (9023) [ 360.740125][ T9023] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 360.750747][ T9023] BTRFS info (device loop3): using crc32c checksum algorithm [ 360.875166][ T9023] BTRFS info (device loop3): enabling ssd optimizations [ 360.883176][ T9023] BTRFS info (device loop3): turning on async discard [ 360.890453][ T9023] BTRFS info (device loop3): enabling free space tree [ 361.013532][ T9023] BTRFS info (device loop3): balance: start -s [ 361.021740][ T9023] BTRFS info (device loop3): left=0, need=98304, flags=2 [ 361.029249][ T9023] BTRFS info (device loop3): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 361.039652][ T9023] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 361.055081][ T9023] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792 [ 361.064586][ T9023] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 361.072734][ T9023] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 361.081696][ T9023] BTRFS info (device loop3): remap_block_rsv: size 0 reserved 0 [ 361.089501][ T9023] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 361.097433][ T9023] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 361.112432][ T9023] BTRFS info (device loop3): relocating block group 1048576 flags system [ 361.147706][ T5843] kye 0003:0458:5016.000A: control desc unexpectedly large [ 361.199296][ T9023] BTRFS info (device loop3): balance: ended with status: 0 [ 361.244480][ T5843] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000A/input/input12 [ 361.375636][ T5845] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 361.664130][ T5916] IPVS: starting estimator thread 0... [ 361.671462][ T5843] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000A/input/input13 [ 362.439228][ T9048] IPVS: using max 24 ests per chain, 57600 per kthread [ 362.562711][ T5843] kye 0003:0458:5016.000A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 363.161508][ T5847] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 363.180961][ T5847] Bluetooth: hci0: Injecting HCI hardware error event [ 363.192252][ T5853] Bluetooth: hci0: hardware error 0x00 [ 363.545418][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 363.592563][ T5843] usb 3-1: USB disconnect, device number 6 [ 365.395788][ T5853] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 366.648083][ T5916] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 366.679079][ T9116] batadv_slave_1: entered promiscuous mode [ 366.717504][ T9115] batadv_slave_1: left promiscuous mode [ 366.838385][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 366.854830][ T5916] usb 2-1: config 0 has an invalid interface number: 202 but max is 1 [ 366.875368][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.904430][ T5916] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 366.915258][ T5916] usb 2-1: config 0 has no interface number 0 [ 366.920605][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.993'. [ 366.924550][ T5916] usb 2-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 366.944930][ T5916] usb 2-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 366.957348][ T5916] usb 2-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 366.973886][ T5916] usb 2-1: config 0 interface 202 has no altsetting 0 [ 366.992132][ T5916] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 367.027035][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.049776][ T5916] usb 2-1: Product: syz [ 367.058264][ T5916] usb 2-1: Manufacturer: syz [ 367.068212][ T5916] usb 2-1: SerialNumber: syz [ 367.089515][ T5916] usb 2-1: config 0 descriptor?? [ 367.196586][ T5916] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 367.322183][ T9104] loop2: detected capacity change from 0 to 7 [ 367.359285][ T9104] loop2: [POWERTEC] p1 p2 [ 367.374512][ T9104] loop2: p1 size 131072 extends beyond EOD, truncated [ 367.437800][ T9104] loop2: p2 start 16974337 is beyond EOD, truncated [ 367.458560][ T6166] usb 2-1: Failed to submit usb control message: -71 [ 367.458993][ T5916] usb 2-1: USB disconnect, device number 11 [ 367.498345][ T6166] usb 2-1: unable to send the bmi data to the device: -71 [ 367.535254][ T6166] usb 2-1: unable to get target info from device [ 367.555467][ T7736] udevd[7736]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 367.565612][ T6166] usb 2-1: could not get target info (-71) [ 367.585021][ T6166] usb 2-1: could not probe fw (-71) [ 369.571054][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1009'. [ 369.617394][ T9170] IPVS: sh: FWM 3 0x00000003 - no destination available [ 369.640974][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 369.659020][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 369.674212][ T9170] IPVS: sh: FWM 3 0x00000003 - no destination available [ 369.689930][ T9173] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1012'. [ 369.706429][ T9161] lo speed is unknown, defaulting to 1000 [ 369.721690][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 370.241230][ T9184] loop2: detected capacity change from 0 to 1024 [ 370.277664][ T9160] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 370.425821][ T9184] hfsplus: b-tree write err: -5, ino 2 [ 370.556062][ T9189] hfsplus: b-tree write err: -5, ino 2 [ 370.631681][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.642778][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.654421][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.663812][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.720928][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.748187][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.783328][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.816096][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.842551][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.868077][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.890533][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.894325][ T9202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1023'. [ 370.908638][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.943328][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.965201][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 370.990804][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.007091][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.015911][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.026642][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.029344][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 371.035305][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.052160][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.083641][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.099142][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.126957][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.154174][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.199853][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.228078][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.240206][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.271195][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.287871][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.303372][ T9212] loop1: detected capacity change from 0 to 512 [ 371.318686][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.353974][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.363815][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.371749][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.380183][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.390752][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.441095][ T9184] hfsplus: request for non-existent node 16777216 in B*Tree [ 371.452101][ T9212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.476694][ T30] audit: type=1800 audit(1774329505.426:7): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1017" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 371.488050][ T9212] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.528870][ T7465] hfsplus: b-tree write err: -5, ino 25 [ 371.550980][ T7465] hfsplus: b-tree write err: -5, ino 4 [ 371.564368][ T7465] hfsplus: b-tree write err: -5, ino 2 [ 371.578719][ T7465] hfsplus: b-tree write err: -5, ino 26 [ 371.632628][ T7465] hfsplus: b-tree write err: -5, ino 27 [ 371.664223][ T7465] hfsplus: b-tree write err: -5, ino 20 [ 371.909231][ T9226] overlayfs: workdir and upperdir must be separate subtrees [ 374.677066][ T30] audit: type=1326 audit(1774329508.586:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ba59c799 code=0x7ffc0000 [ 374.712251][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.732954][ T30] audit: type=1326 audit(1774329508.606:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ba59c799 code=0x7ffc0000 [ 374.763461][ T30] audit: type=1326 audit(1774329508.626:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03ba59c799 code=0x7ffc0000 [ 374.838476][ T30] audit: type=1326 audit(1774329508.626:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ba59c799 code=0x7ffc0000 [ 374.932897][ T30] audit: type=1326 audit(1774329508.626:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ba59c799 code=0x7ffc0000 [ 375.247201][ T9253] loop3: detected capacity change from 0 to 4096 [ 375.255995][ T9253] ntfs3: Unknown parameter 'noshowmeta' [ 375.608412][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 375.620362][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 375.778539][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 375.803376][ T10] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 375.821575][ T10] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 375.835252][ T10] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.847207][ T10] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 375.864264][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 375.887595][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.906023][ T10] usb 2-1: Product: syz [ 375.918983][ T10] usb 2-1: Manufacturer: syz [ 375.924811][ T10] usb 2-1: SerialNumber: syz [ 376.142917][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 376.163428][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input14 [ 376.368000][ T10] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 376.384821][ T10] (id 0x00) [ 376.509691][ T10] rc_core: IR keymap rc-imon-pad not found [ 376.522888][ T10] Registered IR keymap rc-empty [ 376.533800][ T10] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 376.547306][ T10] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 376.631572][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 376.646330][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input15 [ 376.697331][ T10] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:12> initialized [ 378.061079][ T5853] Bluetooth: hci3: unexpected event for opcode 0x200f [ 378.640460][ T5842] usb 2-1: USB disconnect, device number 12 [ 378.763337][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.772171][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.961120][ T9332] loop2: detected capacity change from 0 to 4096 [ 380.932997][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1078'. [ 380.984468][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 383.877390][ T9400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1093'. [ 383.901477][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 384.024762][ T9404] loop3: detected capacity change from 0 to 4096 [ 385.306836][ T9418] ufs: You didn't specify the type of your ufs filesystem [ 385.306836][ T9418] [ 385.306836][ T9418] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 385.306836][ T9418] [ 385.306836][ T9418] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 385.339651][ T9418] ufs: ufstype=old is supported read-only [ 385.355097][ T9418] ufs: ufs_fill_super(): bad magic number [ 387.790009][ T9454] loop4: detected capacity change from 0 to 4096 [ 388.269157][ T9480] loop6: detected capacity change from 0 to 2640 [ 388.311058][ T9480] Buffer I/O error on dev loop6, logical block 0, async page read [ 388.351905][ T9480] Buffer I/O error on dev loop6, logical block 0, async page read [ 388.410108][ T9480] Buffer I/O error on dev loop6, logical block 0, async page read [ 388.547420][ T9481] loop6: detected capacity change from 2640 to 524287999 [ 388.594572][ T9480] Buffer I/O error on dev loop6, logical block 0, async page read [ 388.626150][ T9480] Buffer I/O error on dev loop6, logical block 0, async page read [ 388.639439][ T9480] Buffer I/O error on dev loop6, logical block 0, async page read [ 388.666387][ T9480] Buffer I/O error on dev loop6, logical block 0, async page read [ 388.686926][ T9480] Buffer I/O error on dev loop6, logical block 0, async page read [ 388.754967][ T9480] ldm_validate_partition_table(): Disk read failed. [ 388.786780][ T9480] Buffer I/O error on dev loop6, logical block 0, async page read [ 388.846383][ T9480] Buffer I/O error on dev loop6, logical block 0, async page read [ 388.980011][ T9480] Dev loop6: unable to read RDB block 0 [ 389.006938][ T9480] loop6: unable to read partition table [ 389.025413][ T9480] loop_reread_partitions: partition scan of loop6 (ážXHuù£¨ÃÒJíˆý[¼d‚¾wÍ|i4F‡Â-—ºä½ÚÚ£rwǘ3›êåùU™ÈžŒžJ½„?"e) failed (rc=-5) [ 390.409856][ T9519] /dev/nullb0: Can't lookup blockdev [ 392.530789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 392.705891][ T9547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'. [ 394.073400][ T9577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1154'. [ 395.036488][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 395.625820][ T9612] syzkaller0: entered promiscuous mode [ 395.640956][ T9612] syzkaller0: entered allmulticast mode [ 398.010839][ T9627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1167'. [ 399.050626][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 399.319149][ T9660] loop1: detected capacity change from 0 to 4096 [ 399.521047][ T9664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1178'. [ 399.534623][ T9664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1178'. [ 399.640760][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 399.666053][ T9664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1178'. [ 399.869310][ T9664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1178'. [ 399.891158][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 400.031226][ T10] usb 3-1: device descriptor read/64, error -71 [ 400.536323][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 400.689321][ T10] usb 3-1: device descriptor read/64, error -71 [ 400.821845][ T10] usb usb3-port1: attempt power cycle [ 400.920768][ T9684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1183'. [ 401.305662][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 401.330774][ T10] usb 3-1: device descriptor read/8, error -71 [ 401.434087][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'. [ 401.534041][ T9709] ufs: You didn't specify the type of your ufs filesystem [ 401.534041][ T9709] [ 401.534041][ T9709] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 401.534041][ T9709] [ 401.534041][ T9709] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 401.567152][ T9709] ufs: ufstype=old is supported read-only [ 401.574219][ T9709] ufs: ufs_fill_super(): bad magic number [ 401.580359][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 401.608737][ T10] usb 3-1: device descriptor read/8, error -71 [ 401.718464][ T10] usb usb3-port1: unable to enumerate USB device [ 401.745978][ T9715] loop3: detected capacity change from 0 to 128 [ 401.761957][ T9715] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 402.544438][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 402.780285][ T9746] ufs: You didn't specify the type of your ufs filesystem [ 402.780285][ T9746] [ 402.780285][ T9746] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 402.780285][ T9746] [ 402.780285][ T9746] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 402.969367][ T9746] ufs: ufstype=old is supported read-only [ 402.977653][ T9746] ufs: ufs_fill_super(): bad magic number [ 403.238767][ T9751] loop3: detected capacity change from 0 to 4096 [ 404.766987][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1214'. [ 404.995976][ T9777] loop3: detected capacity change from 0 to 1024 [ 405.019018][ T9777] EXT4-fs: inline encryption not supported [ 405.068107][ T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 405.120195][ T9777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.175730][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 405.218079][ T29] usb 3-1: device descriptor read/64, error -71 [ 405.297861][ T9777] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1217: Allocating blocks 449-513 which overlap fs metadata [ 405.430675][ T9777] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1217: Allocating blocks 449-513 which overlap fs metadata [ 405.468499][ T29] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 405.469016][ T9777] EXT4-fs (loop3): pa ffff888034e3b658: logic 288, phys. 417, len 6 [ 405.488974][ T9777] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 4 [ 405.680293][ T29] usb 3-1: device descriptor read/64, error -71 [ 405.827099][ T29] usb usb3-port1: attempt power cycle [ 406.421662][ T5845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.528103][ T29] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 406.587198][ T29] usb 3-1: device descriptor read/8, error -71 [ 406.849217][ T29] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 406.898769][ T29] usb 3-1: device descriptor read/8, error -71 [ 407.075067][ T29] usb usb3-port1: unable to enumerate USB device [ 408.060517][ T9820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.007814][ T9835] loop2: detected capacity change from 0 to 64 [ 409.030966][ T9835] hfs: request for non-existent node -252 in B*Tree [ 409.039694][ T9835] hfs: request for non-existent node -252 in B*Tree [ 409.277488][ T9837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.448105][ T5916] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 409.618806][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 409.629463][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.643631][ T5916] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.655600][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 409.670763][ T5916] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 409.686799][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.695572][ T5916] usb 3-1: Product: syz [ 409.699985][ T5916] usb 3-1: Manufacturer: syz [ 409.705050][ T5916] usb 3-1: SerialNumber: syz [ 409.729426][ T5916] usb 3-1: config 0 descriptor?? [ 410.318585][ T9858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.732632][ T30] audit: type=1800 audit(1774329544.666:13): pid=9864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1243" name="bus" dev="overlay" ino=1191 res=0 errno=0 [ 411.486906][ T29] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 411.921447][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 411.999681][ T29] usb 2-1: not running at top speed; connect to a high speed hub [ 412.029837][ T29] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 412.074109][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 412.078992][ T10] usb 3-1: USB disconnect, device number 15 [ 412.142135][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.170450][ T29] usb 2-1: Product: syz [ 412.188044][ T29] usb 2-1: Manufacturer: syz [ 412.207152][ T29] usb 2-1: SerialNumber: syz [ 412.464961][ T29] usb 2-1: USB disconnect, device number 13 [ 412.478054][ T5949] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 413.104133][ T5949] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 413.121246][ T5949] usb 5-1: can't read configurations, error -61 [ 413.139876][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 413.278160][ T5949] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 413.287853][ T10] usb 3-1: device descriptor read/64, error -71 [ 413.297191][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 413.598295][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 413.679298][ T5949] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 413.715713][ T5949] usb 5-1: can't read configurations, error -61 [ 413.770882][ T5949] usb usb5-port1: attempt power cycle [ 413.838294][ T10] usb 3-1: device descriptor read/64, error -71 [ 413.972002][ T10] usb usb3-port1: attempt power cycle [ 414.329555][ T5949] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 414.421314][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 414.500094][ T5949] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 414.574932][ T10] usb 3-1: device descriptor read/8, error -71 [ 414.594296][ T5949] usb 5-1: can't read configurations, error -61 [ 414.869450][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 414.956587][ T5949] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 414.967653][ T10] usb 3-1: device descriptor read/8, error -71 [ 415.132344][ T10] usb usb3-port1: unable to enumerate USB device [ 415.185154][ T5949] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 415.274968][ T5949] usb 5-1: can't read configurations, error -61 [ 415.373660][ T5949] usb usb5-port1: unable to enumerate USB device [ 416.727046][ T9920] loop4: detected capacity change from 0 to 64 [ 416.741679][ T9920] hfs: request for non-existent node -252 in B*Tree [ 416.748686][ T9920] hfs: request for non-existent node -252 in B*Tree [ 416.998320][ T5949] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 417.008061][ T9928] loop3: detected capacity change from 0 to 4096 [ 417.020690][ T9928] ntfs3: Unknown parameter 'noshowmeta' [ 417.158087][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 417.174895][ T5949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.194919][ T5949] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.209465][ T5949] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 417.239573][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.250770][ T5949] usb 5-1: Product: syz [ 417.255016][ T5949] usb 5-1: Manufacturer: syz [ 417.260344][ T5949] usb 5-1: SerialNumber: syz [ 417.274662][ T5949] usb 5-1: config 0 descriptor?? [ 417.495826][ T29] usb 5-1: USB disconnect, device number 15 [ 417.901915][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1275'. [ 418.068168][ T5843] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 418.998127][ T5843] usb 2-1: device descriptor read/64, error -71 [ 419.005760][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 419.193849][ T9969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.258512][ T5843] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 419.400260][ T5843] usb 2-1: device descriptor read/64, error -71 [ 419.518603][ T5843] usb usb2-port1: attempt power cycle [ 419.858408][ T5843] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 419.880690][ T5843] usb 2-1: device descriptor read/8, error -71 [ 420.128372][ T5843] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 420.159975][ T5843] usb 2-1: device descriptor read/8, error -71 [ 420.278479][ T5843] usb usb2-port1: unable to enumerate USB device [ 421.155961][T10006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.582392][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 422.698284][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1295'. [ 424.920131][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 425.150403][ T9] usb 5-1: device descriptor read/64, error -71 [ 425.498280][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 425.688289][ T9] usb 5-1: device descriptor read/64, error -71 [ 425.840195][ T9] usb usb5-port1: attempt power cycle [ 426.238084][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 426.514190][ T9] usb 5-1: device descriptor read/8, error -71 [ 427.213509][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 427.255114][ T9] usb 5-1: device descriptor read/8, error -71 [ 427.411094][ T9] usb usb5-port1: unable to enumerate USB device [ 427.468118][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 427.729267][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 427.763447][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 427.929329][ T10] usb 3-1: config 0 has no interface number 0 [ 427.974182][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 428.026850][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.083808][ T10] usb 3-1: Product: syz [ 428.115605][ T10] usb 3-1: Manufacturer: syz [ 428.157414][ T10] usb 3-1: SerialNumber: syz [ 428.186274][ T10] usb 3-1: config 0 descriptor?? [ 428.213990][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 428.471412][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 428.585275][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 428.944275][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 430.159819][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 431.172801][ T10] usb 3-1: USB disconnect, device number 20 [ 432.317829][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 432.379752][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 432.445074][ T10] quatech2 3-1:0.51: device disconnected [ 432.606793][T10104] Illegal XDP return value 4294967274 on prog (id 38) dev syz_tun, expect packet loss! [ 432.646802][T10109] loop1: detected capacity change from 0 to 16 [ 432.728907][T10109] erofs (device loop1): mounted with root inode @ nid 36. [ 433.788528][T10139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1338'. [ 433.820762][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1338'. [ 433.972254][T10147] loop2: detected capacity change from 0 to 128 [ 434.129989][T10149] loop4: detected capacity change from 0 to 16 [ 434.229135][T10149] erofs (device loop4): mounted with root inode @ nid 36. [ 434.360315][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 434.419136][T10159] loop2: detected capacity change from 0 to 64 [ 434.938266][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 435.128074][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 435.146468][ T5949] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 435.169205][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 435.179727][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.213531][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.232755][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.365198][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.437417][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.506002][ T5949] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 435.550791][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.584140][ T5949] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.606346][ T5949] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 435.616496][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.637155][ T5949] usb 4-1: Product: syz [ 435.645592][ T5949] usb 4-1: Manufacturer: syz [ 435.668291][ T5949] usb 4-1: SerialNumber: syz [ 435.838285][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 435.870678][T10187] loop2: detected capacity change from 0 to 512 [ 435.917502][ T10] usb 4-1: USB disconnect, device number 12 [ 435.975848][T10187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.017304][T10187] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.061494][T10187] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.1359: corrupted inode contents [ 436.080754][T10187] EXT4-fs error (device loop2): ext4_dirty_inode:6453: inode #2: comm syz.2.1359: mark_inode_dirty error [ 436.093041][T10187] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.1359: corrupted inode contents [ 436.138023][T10187] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.1359: mark_inode_dirty error [ 436.165296][T10187] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.1359: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 436.165296][T10187] [ 436.254780][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.291159][T10209] loop4: detected capacity change from 0 to 4096 [ 437.441310][ T29] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 437.681935][ T29] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 437.750294][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.765737][ T5949] usb 2-1: USB disconnect, device number 18 [ 437.945318][ T29] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 438.036410][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.102435][ T29] usb 3-1: Product: syz [ 438.132070][ T29] usb 3-1: Manufacturer: syz [ 438.171312][ T29] usb 3-1: SerialNumber: syz [ 438.367000][T10221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1370'. [ 438.386346][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 438.406474][ T9] usb 3-1: USB disconnect, device number 21 [ 438.458430][ T5943] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 438.620016][ T5943] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 438.628637][ T5943] usb 4-1: config 0 has no interface number 0 [ 438.637036][ T5943] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 438.647028][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.655532][ T5943] usb 4-1: Product: syz [ 438.659870][ T5943] usb 4-1: Manufacturer: syz [ 438.664485][ T5943] usb 4-1: SerialNumber: syz [ 438.672479][ T5943] usb 4-1: config 0 descriptor?? [ 438.681733][ T5943] usb 4-1: selecting invalid altsetting 1 [ 438.690814][ T5943] dvb_ttusb_budget: ttusb_init_controller: error [ 438.697563][ T5943] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 438.742748][ T5943] DVB: Unable to find symbol stv0299_attach() [ 438.774491][ T5943] DVB: Unable to find symbol tda8083_attach() [ 438.784711][ T5943] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 438.901174][ T9] usb 4-1: USB disconnect, device number 13 [ 439.000660][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1372'. [ 439.418072][ T5949] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 439.590643][ T5949] usb 3-1: config index 0 descriptor too short (expected 14385, got 96) [ 439.609932][ T5949] usb 3-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 439.619743][T10247] netlink: 'syz.3.1381': attribute type 2 has an invalid length. [ 439.629070][ T5949] usb 3-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 439.644789][T10247] netlink: 'syz.3.1381': attribute type 2 has an invalid length. [ 439.653194][ T5949] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 439.670070][ T5949] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 439.687964][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 439.706857][ T5949] usb 3-1: Product: syz [ 439.713043][ T5949] usb 3-1: Manufacturer: syz [ 439.892560][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 439.962744][ T5949] usb 3-1: USB disconnect, device number 22 [ 440.205534][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.214047][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.586423][T10279] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.596536][T10279] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.715505][T10284] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.722928][T10284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.730644][T10284] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.739923][T10284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.767913][T10284] bridge0: entered promiscuous mode [ 440.775924][T10284] bridge0: entered allmulticast mode [ 440.790547][T10283] loop4: detected capacity change from 0 to 4096 [ 441.534247][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 441.846137][T10302] /dev/nullb0: Can't lookup blockdev [ 442.051644][T10311] loop1: detected capacity change from 0 to 128 [ 442.092138][T10311] FAT-fs (loop1): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 442.633583][T10323] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 442.657322][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 442.928255][ T5943] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 443.034768][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.112103][ T5943] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.144268][ T5943] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 443.199008][ T5943] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 443.217973][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.235712][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.248327][ T5943] usb 5-1: Product: syz [ 443.258581][ T5943] usb 5-1: Manufacturer: syz [ 443.268007][ T5943] usb 5-1: SerialNumber: syz [ 443.297283][ T5943] usb 5-1: config 0 descriptor?? [ 443.369700][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1416'. [ 443.532843][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.561112][T10347] loop3: detected capacity change from 0 to 2048 [ 443.585594][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.599184][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.610487][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.623802][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.718528][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.766578][ T10] usb 5-1: USB disconnect, device number 20 [ 443.892144][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.037265][T10342] lo speed is unknown, defaulting to 1000 [ 444.059792][T10358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1423'. [ 444.099789][T10358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1423'. [ 444.143102][T10358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1423'. [ 444.182425][T10358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1423'. [ 444.273427][T10360] netlink: 'syz.3.1424': attribute type 5 has an invalid length. [ 444.410852][T10365] bridge_slave_0: left allmulticast mode [ 444.416850][T10365] bridge_slave_0: left promiscuous mode [ 444.424793][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 444.447497][T10365] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.467697][T10365] bridge_slave_1: left allmulticast mode [ 444.474668][T10365] bridge_slave_1: left promiscuous mode [ 444.481684][T10365] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.502339][T10365] bond0: (slave bond_slave_0): Releasing backup interface [ 444.516675][T10365] bond0: (slave bond_slave_1): Releasing backup interface [ 444.539637][T10365] team0: Port device team_slave_0 removed [ 444.552966][T10365] team0: Port device team_slave_1 removed [ 444.561329][T10365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.571619][T10365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.579670][T10365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.591110][T10365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 444.801800][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 444.971159][ T63] bridge_slave_1: left allmulticast mode [ 444.988081][ T63] bridge_slave_1: left promiscuous mode [ 445.003018][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.039468][ T63] bridge_slave_0: left allmulticast mode [ 445.058074][ T63] bridge_slave_0: left promiscuous mode [ 445.068473][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.554927][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 445.728438][ T5847] Bluetooth: hci4: command tx timeout [ 446.075030][T10400] loop3: detected capacity change from 0 to 4096 [ 446.417846][T10401] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 446.532350][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.857853][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.348989][ T63] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 447.465050][T10404] loop4: detected capacity change from 0 to 32768 [ 447.486590][T10404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1438 (10404) [ 447.576236][T10404] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 447.586681][T10404] BTRFS info (device loop4): using sha256 checksum algorithm [ 447.684371][ T63] bond0 (unregistering): Released all slaves [ 447.760334][T10404] BTRFS info (device loop4): enabling ssd optimizations [ 447.770270][T10404] BTRFS info (device loop4): turning on async discard [ 447.777182][T10404] BTRFS info (device loop4): enabling free space tree [ 447.799962][ T5847] Bluetooth: hci4: command tx timeout [ 447.954767][T10404] BTRFS info (device loop4): balance: start -d -m [ 447.969019][T10404] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 448.092292][T10424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1439'. [ 448.109882][T10424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1439'. [ 448.125076][T10424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1439'. [ 448.158405][ T63] IPVS: stopping master sync thread 8091 ... [ 448.532064][T10404] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 448.650280][T10404] BTRFS info (device loop4): found 11 extents, stage: move data extents [ 448.687306][T10404] BTRFS info (device loop4): found 1 extents, stage: update data pointers [ 448.717688][T10404] BTRFS info (device loop4): balance: ended with status: 0 [ 448.779676][T10342] chnl_net:caif_netlink_parms(): no params data found [ 449.782029][ T63] hsr_slave_0: left promiscuous mode [ 449.794920][ T63] hsr_slave_1: left promiscuous mode [ 449.802403][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.813496][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.815486][ T5838] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 449.829369][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.839796][T10457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 449.897115][ T63] veth1_macvtap: left promiscuous mode [ 449.899690][ T5847] Bluetooth: hci4: command tx timeout [ 449.917092][ T63] veth0_macvtap: left promiscuous mode [ 449.928695][ T63] veth1_vlan: left promiscuous mode [ 449.948436][ T63] veth0_vlan: left promiscuous mode [ 450.507529][T10472] __nla_validate_parse: 2 callbacks suppressed [ 450.507560][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 450.969713][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 451.440249][ T5842] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 451.958002][ T5847] Bluetooth: hci4: command tx timeout [ 451.960620][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 452.255309][ T5842] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 452.349447][ T5842] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.438917][ T5842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.531194][ T5842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.554911][ T5842] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.569657][ T5842] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 452.614135][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.649832][T10485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1452'. [ 452.675370][T10485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1452'. [ 452.715248][T10485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1452'. [ 452.746412][T10485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1452'. [ 453.908227][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 454.112893][T10342] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.142322][T10342] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.168162][T10342] bridge_slave_0: entered allmulticast mode [ 454.191443][T10342] bridge_slave_0: entered promiscuous mode [ 454.202601][T10342] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.210383][T10342] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.217696][T10342] bridge_slave_1: entered allmulticast mode [ 454.234726][T10342] bridge_slave_1: entered promiscuous mode [ 454.392708][T10342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.435520][T10342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.606379][T10342] team0: Port device team_slave_0 added [ 454.656937][T10342] team0: Port device team_slave_1 added [ 454.907007][T10342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.915639][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.966805][ T5923] usb 5-1: USB disconnect, device number 21 [ 455.031471][T10342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.085119][T10342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.120269][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.129621][ T5842] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 455.381783][T10342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.435635][ T5842] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 455.456513][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.492779][ T5842] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 455.574661][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.609680][ T5842] usb 3-1: Product: syz [ 455.641191][ T5842] usb 3-1: Manufacturer: syz [ 455.745286][ T5842] usb 3-1: SerialNumber: syz [ 455.859495][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'. [ 456.186001][ T5842] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 456.226733][T10342] hsr_slave_0: entered promiscuous mode [ 456.251968][T10342] hsr_slave_1: entered promiscuous mode [ 456.271280][T10342] debugfs: 'hsr0' already exists in 'hsr' [ 456.283597][T10342] Cannot create hsr debugfs directory [ 456.310860][ T63] IPVS: stop unused estimator thread 0... [ 456.388234][ T5842] usb 3-1: USB disconnect, device number 23 [ 456.545038][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1465'. [ 456.645690][T10542] overlayfs: failed to resolve './file0': -2 [ 456.877742][T10548] overlayfs: failed to clone upperpath [ 459.400775][T10342] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 459.536089][T10342] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 459.577408][T10585] overlayfs: failed to resolve './file0': -2 [ 459.613498][T10342] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 459.692005][T10342] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 460.409287][ T5943] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 460.488342][T10342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.619049][T10342] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.637684][ T5943] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 460.660219][ T5943] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.684377][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.686705][ T5943] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 460.691728][ T7465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.719229][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.731502][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.738709][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.740092][ T5943] usb 3-1: Product: syz [ 460.751943][ T5943] usb 3-1: Manufacturer: syz [ 460.756781][ T5943] usb 3-1: SerialNumber: syz [ 460.840639][ T5943] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 461.056173][ T5943] usb 3-1: USB disconnect, device number 24 [ 462.253788][T10342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.270672][T10648] overlayfs: failed to resolve './file0': -2 [ 462.753939][T10665] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1496'. [ 462.810323][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1496'. [ 462.852442][T10665] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1496'. [ 462.910537][T10665] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1496'. [ 463.542879][T10342] veth0_vlan: entered promiscuous mode [ 463.580744][T10342] veth1_vlan: entered promiscuous mode [ 463.696636][T10342] veth0_macvtap: entered promiscuous mode [ 463.732314][T10342] veth1_macvtap: entered promiscuous mode [ 463.810085][T10342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.967321][T10688] ufs: You didn't specify the type of your ufs filesystem [ 463.967321][T10688] [ 463.967321][T10688] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 463.967321][T10688] [ 463.967321][T10688] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 463.998589][T10688] ufs: ufstype=old is supported read-only [ 464.006551][T10688] ufs: ufs_fill_super(): bad magic number [ 464.626647][T10342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.664300][ T143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.686150][ T143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.700490][ T63] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.745272][ T63] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.043822][T10693] loop4: detected capacity change from 0 to 1024 [ 465.226243][T10697] overlayfs: failed to resolve './file1': -2 [ 466.060544][T10693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.544229][ T6148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.579318][ T6148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.719502][ T5949] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 466.750144][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.766361][ T6148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.781546][ T6148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.901187][ T5949] usb 4-1: config 1 interface 0 has no altsetting 0 [ 466.932867][ T5949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 466.969959][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.000245][ T5949] usb 4-1: Product: syz [ 467.010923][ T5949] usb 4-1: Manufacturer: syz [ 467.021603][ T5949] usb 4-1: SerialNumber: syz [ 467.764856][ T5949] usb 4-1: USB disconnect, device number 14 [ 467.820975][T10723] loop5: detected capacity change from 0 to 4096 [ 469.263813][T10745] overlayfs: failed to resolve './file1': -2 [ 470.368201][T10766] loop3: detected capacity change from 0 to 32768 [ 470.427798][T10766] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 470.508398][ T29] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 470.552174][T10766] XFS (loop3): Ending clean mount [ 470.622349][ T5845] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 470.662745][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.717052][ T29] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 470.752886][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 470.807537][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.828156][ T29] usb 3-1: Product: syz [ 470.849444][ T29] usb 3-1: Manufacturer: syz [ 470.891551][ T29] usb 3-1: SerialNumber: syz [ 470.912275][ T29] usb 3-1: config 0 descriptor?? [ 471.182402][ T29] usb 3-1: USB disconnect, device number 25 [ 472.126223][T10803] overlayfs: failed to resolve './file1': -2 [ 472.872109][ T29] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 473.030399][ T29] usb 3-1: config 1 interface 0 has no altsetting 0 [ 473.062329][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 473.098077][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.110273][ T29] usb 3-1: Product: syz [ 473.120000][ T29] usb 3-1: Manufacturer: syz [ 473.131705][ T29] usb 3-1: SerialNumber: syz [ 473.213475][T10836] loop3: detected capacity change from 0 to 4096 [ 474.028819][ T29] usb 3-1: USB disconnect, device number 26 [ 474.174292][T10847] overlayfs: failed to clone upperpath [ 474.407088][T10853] loop5: detected capacity change from 0 to 2048 [ 474.445746][T10853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.615968][ T30] audit: type=1804 audit(1774329608.566:14): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1540" name="/newroot/3/file0/bus" dev="loop5" ino=1436 res=1 errno=0 [ 475.933721][T10883] overlayfs: failed to clone upperpath [ 476.034586][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 476.068755][T10890] loop4: detected capacity change from 0 to 512 [ 476.109350][T10890] EXT4-fs: Ignoring removed orlov option [ 476.189380][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 476.209028][T10890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.305074][T10890] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 476.333319][ T5847] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 476.418581][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 476.431241][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.461745][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.476477][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 476.489708][ T9] usb 3-1: config 1 has no interface number 1 [ 476.496513][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.508269][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 476.531895][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.542860][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.551773][ T9] usb 3-1: Product: syz [ 476.556218][ T9] usb 3-1: Manufacturer: syz [ 476.561131][ T9] usb 3-1: SerialNumber: syz [ 476.867076][T10910] loop4: detected capacity change from 0 to 4096 [ 477.045712][T10899] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 477.339988][ T9] usb 3-1: USB disconnect, device number 27 [ 477.575178][ T30] audit: type=1800 audit(1774329611.516:15): pid=10920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1565" name="bus" dev="overlay" ino=66 res=0 errno=0 [ 477.720881][ T7736] udevd[7736]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.762587][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 478.187691][T10937] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 478.221879][T10937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 478.515636][T10937] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 478.533868][T10937] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 478.622507][T10937] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 478.642336][T10937] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 478.699332][T10937] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 478.737714][T10937] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 478.747154][T10950] netlink: 'syz.2.1576': attribute type 10 has an invalid length. [ 478.887128][ T30] audit: type=1800 audit(1774329612.826:16): pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1577" name="bus" dev="overlay" ino=91 res=0 errno=0 [ 479.046117][T10937] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 479.358409][ T5949] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 479.403341][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'. [ 479.540745][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 479.550017][ T5949] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 479.569282][ T5949] usb 4-1: config 0 has no interface number 0 [ 479.590792][ T5949] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 479.619990][ T5949] usb 4-1: config 0 interface 89 has no altsetting 0 [ 479.641748][ T5949] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 479.658858][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.697558][ T5949] usb 4-1: Product: syz [ 479.714645][ T5949] usb 4-1: Manufacturer: syz [ 479.739788][ T5949] usb 4-1: SerialNumber: syz [ 479.780914][ T5949] usb 4-1: config 0 descriptor?? [ 479.827674][ T5949] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 479.907463][ T5949] em28xx 4-1:0.89: Video interface 89 found: [ 480.029970][T10980] loop5: detected capacity change from 0 to 4096 [ 480.223881][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 480.361722][ T30] audit: type=1800 audit(1774329614.306:17): pid=10991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1588" name="bus" dev="overlay" ino=1751 res=0 errno=0 [ 480.435563][ T5949] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 480.519089][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 480.678843][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 480.758015][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 482.005878][ T5949] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 482.082898][ T5949] em28xx 4-1:0.89: board has no eeprom [ 482.157980][ T5949] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 482.165626][ T5949] em28xx 4-1:0.89: analog set to bulk mode. [ 482.188707][ T5973] em28xx 4-1:0.89: Registering V4L2 extension [ 482.272396][ T5949] usb 4-1: USB disconnect, device number 15 [ 482.278688][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 482.307403][ T5949] em28xx 4-1:0.89: Disconnecting em28xx [ 482.607989][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 482.614457][ T5973] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 482.757993][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 482.841151][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 483.446265][T11042] ufs: You didn't specify the type of your ufs filesystem [ 483.446265][T11042] [ 483.446265][T11042] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 483.446265][T11042] [ 483.446265][T11042] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 483.478104][T11042] ufs: ufstype=old is supported read-only [ 483.486423][T11042] ufs: ufs_fill_super(): bad magic number [ 484.581676][ T30] audit: type=1800 audit(1774329618.536:18): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1601" name="bus" dev="overlay" ino=1726 res=0 errno=0 [ 484.740214][ T5973] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 484.792654][T11038] loop5: detected capacity change from 0 to 4096 [ 484.919904][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 485.538787][T11038] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 485.752382][T11038] ntfs3(loop5): ino=3, mi_enum_attr [ 486.157073][ T5973] em28xx 4-1:0.89: No AC97 audio processor [ 486.320183][T11038] ntfs3(loop5): Failed to read $AttrDef (-4). [ 486.417928][ T5973] usb 4-1: Decoder not found [ 486.422708][ T5973] em28xx 4-1:0.89: failed to create media graph [ 486.429829][ T5973] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 486.681843][T11048] loop2: detected capacity change from 0 to 4096 [ 486.692339][ T5973] em28xx 4-1:0.89: Registering snapshot button... [ 486.830838][ T5973] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input16 [ 486.901929][T11056] loop3: detected capacity change from 0 to 4096 [ 486.990871][ T5973] em28xx 4-1:0.89: Remote control support is not available for this card. [ 487.052186][ T5949] em28xx 4-1:0.89: Closing input extension [ 487.094872][T11056] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 487.157274][ T5949] em28xx 4-1:0.89: Deregistering snapshot button [ 487.514901][T11069] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 487.615595][ T5949] em28xx 4-1:0.89: Freeing device [ 488.906523][T11087] ufs: You didn't specify the type of your ufs filesystem [ 488.906523][T11087] [ 488.906523][T11087] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 488.906523][T11087] [ 488.906523][T11087] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 488.920252][T11089] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1614'. [ 488.937711][T11087] ufs: ufstype=old is supported read-only [ 488.938179][T11087] ufs: ufs_fill_super(): bad magic number [ 489.088069][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1614'. [ 489.104205][ T63] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 489.128166][T11089] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1614'. [ 489.137539][ T5845] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 489.150804][ T5845] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 489.177319][T11089] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1614'. [ 489.193879][ T5845] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 489.201519][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 489.223472][ T6166] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 489.507786][T11111] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 490.837434][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1624'. [ 491.783989][ T5853] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 492.179416][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 494.297457][T11212] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1645'. [ 494.322673][T11212] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1645'. [ 494.347733][T11212] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1645'. [ 494.375079][T11212] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1645'. [ 494.693017][ T9] IPVS: starting estimator thread 0... [ 494.802476][T11227] IPVS: using max 26 ests per chain, 62400 per kthread [ 494.884847][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1651'. [ 495.138037][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 495.329208][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1654'. [ 495.465779][ T5973] kernel write not supported for file /input/mouse0 (pid: 5973 comm: kworker/0:7) [ 495.482037][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 495.522598][ T9] usb 4-1: config 0 has no interfaces? [ 495.535626][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.556244][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 495.595737][ T9] usb 4-1: SerialNumber: syz [ 495.623151][ T9] usb 4-1: config 0 descriptor?? [ 495.682553][T11255] loop2: detected capacity change from 0 to 512 [ 495.722090][T11255] EXT4-fs: Ignoring removed oldalloc option [ 495.770764][T11251] loop4: detected capacity change from 0 to 4096 [ 495.798045][ T5853] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 495.815238][ T5853] Bluetooth: hci4: Injecting HCI hardware error event [ 495.831229][ T5847] Bluetooth: hci4: hardware error 0x00 [ 495.894722][T11255] EXT4-fs (loop2): 1 truncate cleaned up [ 495.957374][T11255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.084064][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.292489][T11270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1662'. [ 496.330236][T11270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 496.358266][T11270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1662'. [ 496.403950][T11270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1662'. [ 496.562240][ T5973] usb 4-1: USB disconnect, device number 16 [ 497.879032][ T5847] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 497.941301][T11295] overlayfs: workdir and upperdir must be separate subtrees [ 498.709660][T11299] overlayfs: failed to clone upperpath [ 499.007343][T11320] loop4: detected capacity change from 0 to 512 [ 499.086798][T11323] loop3: detected capacity change from 0 to 512 [ 499.112540][T11304] ceph: No mds server is up or the cluster is laggy [ 499.186447][T11320] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 499.195045][T11320] EXT4-fs (loop4): orphan cleanup on readonly fs [ 499.227816][T11320] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 499.265315][T11323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.283754][T11320] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 499.290875][T11323] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.302720][T11320] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.1674: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 499.363375][T11320] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 499.365091][T11320] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1674: couldn't read orphan inode 13 (err -117) [ 499.374464][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 499.374492][ C0] EXT4-fs (loop4): last error at time 1774329633: ext4_ext_check_inode:521: inode 13 [ 499.433980][T11320] loop4: lost filesystem error report for type 5 error -117 [ 499.437641][T11320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 499.490362][ T5973] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 499.521447][T11336] __nla_validate_parse: 2 callbacks suppressed [ 499.521466][T11336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1678'. [ 499.569321][T11336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1678'. [ 499.599904][T11336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1678'. [ 499.615876][T11336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1678'. [ 499.634339][T11320] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.659649][T11320] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 499.674659][ T5845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.676190][T11320] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2856c09c, mo2=0002] [ 499.686838][ T5973] usb 6-1: device descriptor read/64, error -71 [ 499.707573][T11320] System zones: 0-2, 18-18, 34-34 [ 499.726273][T11320] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 499.948116][ T5973] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 500.690911][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.858631][ T5973] usb 6-1: device descriptor read/64, error -71 [ 500.967617][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 500.996328][ T5973] usb usb6-port1: attempt power cycle [ 501.085646][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 501.198714][T11369] overlayfs: failed to clone upperpath [ 501.249188][ T5843] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 501.348264][ T5973] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 501.378802][ T5973] usb 6-1: device descriptor read/8, error -71 [ 501.475277][T11379] /dev/nullb0: Can't lookup blockdev [ 501.644643][ T5973] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 501.670347][ T5973] usb 6-1: device descriptor read/8, error -71 [ 501.710348][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.720898][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.792977][ T5843] usb 5-1: config 1 interface 0 has no altsetting 0 [ 501.810948][ T5843] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 501.824610][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.832942][ T5843] usb 5-1: Product: syz [ 501.837317][ T5843] usb 5-1: Manufacturer: syz [ 501.842093][ T5843] usb 5-1: SerialNumber: syz [ 501.844480][ T5973] usb usb6-port1: unable to enumerate USB device [ 502.130064][ T5843] usb 5-1: USB disconnect, device number 22 [ 502.173621][T11393] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1691'. [ 502.213802][T11393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1691'. [ 502.253520][T11393] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1691'. [ 502.286851][T11393] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1691'. [ 503.598563][T11427] /dev/nullb0: Can't lookup blockdev [ 505.347964][ T5843] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 505.521683][ T5843] usb 3-1: config 1 interface 0 has no altsetting 0 [ 505.551611][ T5843] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 505.586637][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.602470][ T5843] usb 3-1: Product: syz [ 505.625794][ T5843] usb 3-1: Manufacturer: syz [ 505.648277][ T5843] usb 3-1: SerialNumber: syz [ 505.701468][T11487] ufs: You didn't specify the type of your ufs filesystem [ 505.701468][T11487] [ 505.701468][T11487] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 505.701468][T11487] [ 505.701468][T11487] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 505.879579][T11487] ufs: ufstype=old is supported read-only [ 505.938572][ T5843] usb 3-1: USB disconnect, device number 28 [ 505.958801][T11487] ufs: ufs_fill_super(): bad magic number [ 506.643765][T11513] loop4: detected capacity change from 0 to 2048 [ 506.663484][T11513] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 506.700146][T11513] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 506.896524][T11513] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 507.096247][T11513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 508.571159][T11536] fuse: root generation should be zero [ 509.094633][T11560] __nla_validate_parse: 1 callbacks suppressed [ 509.094656][T11560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1736'. [ 509.187757][T11563] overlay: Unknown parameter 'smackfsfloor' [ 509.828563][T11577] ufs: You didn't specify the type of your ufs filesystem [ 509.828563][T11577] [ 509.828563][T11577] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 509.828563][T11577] [ 509.828563][T11577] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 510.605807][T11577] ufs: ufstype=old is supported read-only [ 510.688410][ T5973] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 510.694401][T11577] ufs: ufs_fill_super(): bad magic number [ 510.821039][ T5973] usb 3-1: device descriptor read/64, error -71 [ 511.077992][ T5973] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 511.621613][ T5973] usb 3-1: device descriptor read/64, error -71 [ 512.039836][ T5973] usb usb3-port1: attempt power cycle [ 512.229862][T11606] loop3: detected capacity change from 0 to 512 [ 512.309537][T11606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.362235][T11606] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 512.409058][ T5973] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 512.451282][ T5973] usb 3-1: device descriptor read/8, error -71 [ 512.661641][ T5845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.727966][ T5973] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 512.795081][ T5973] usb 3-1: device descriptor read/8, error -71 [ 512.918370][ T5973] usb usb3-port1: unable to enumerate USB device [ 513.976905][T11632] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.984515][T11632] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.101117][ T9] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 514.262724][T11632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.271269][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 514.290975][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 514.303252][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.311798][ T9] usb 3-1: Product: syz [ 514.321125][ T9] usb 3-1: Manufacturer: syz [ 514.326004][ T9] usb 3-1: SerialNumber: syz [ 514.488134][ T1231] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 514.496471][ T143] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.510650][ T5973] lo speed is unknown, defaulting to 1000 [ 514.518348][ T143] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.528202][ T5973] syz0: Port: 1 Link DOWN [ 514.534299][ T143] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.568003][ T143] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.591519][ T9] usb 3-1: USB disconnect, device number 33 [ 514.669844][ T1231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.687022][ T1231] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 514.707257][ T1231] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 514.718830][ T1231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.727212][ T1231] usb 4-1: Product: syz [ 514.733545][ T1231] usb 4-1: Manufacturer: syz [ 514.738543][ T1231] usb 4-1: SerialNumber: syz [ 514.762554][ T1231] usb 4-1: config 0 descriptor?? [ 514.986273][T11294] usb 4-1: USB disconnect, device number 17 [ 515.605190][T11658] ufs: You didn't specify the type of your ufs filesystem [ 515.605190][T11658] [ 515.605190][T11658] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 515.605190][T11658] [ 515.605190][T11658] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 515.641328][T11658] ufs: ufstype=old is supported read-only [ 515.650454][T11658] ufs: ufs_fill_super(): bad magic number [ 516.161199][T11666] loop4: detected capacity change from 0 to 32768 [ 516.170059][T11666] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1772 (11666) [ 516.188632][T11666] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 516.199273][T11666] BTRFS info (device loop4): using sha256 checksum algorithm [ 516.320141][T11666] BTRFS info (device loop4): enabling ssd optimizations [ 516.327204][T11666] BTRFS info (device loop4): turning on async discard [ 516.334190][T11666] BTRFS info (device loop4): enabling free space tree [ 516.341405][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 516.533404][ T9] usb 6-1: device descriptor read/64, error -71 [ 516.749859][ T5838] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 516.793557][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 516.941008][ T9] usb 6-1: device descriptor read/64, error -71 [ 517.088611][ T9] usb usb6-port1: attempt power cycle [ 518.178336][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 518.220152][ T9] usb 6-1: device descriptor read/8, error -71 [ 518.308081][ T5842] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 518.402917][T11714] loop4: detected capacity change from 0 to 256 [ 518.504020][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 518.504690][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.538025][ T5842] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 518.554893][ T5842] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 518.557012][ T9] usb 6-1: device descriptor read/8, error -71 [ 518.564532][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.579865][ T5842] usb 3-1: Product: syz [ 518.584319][ T5842] usb 3-1: Manufacturer: syz [ 518.596881][ T5842] usb 3-1: SerialNumber: syz [ 518.631307][T11714] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 518.649774][ T5842] usb 3-1: config 0 descriptor?? [ 518.722388][T11714] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 518.728410][ T9] usb usb6-port1: unable to enumerate USB device [ 518.976167][T11716] loop4: detected capacity change from 0 to 512 [ 518.981011][T11719] x_tables: ip_tables: tcp.0 match: invalid size 16 (kernel) != (user) 24 [ 519.020564][ T1231] usb 3-1: USB disconnect, device number 34 [ 519.050833][T11716] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 519.094563][T11716] EXT4-fs (loop4): orphan cleanup on readonly fs [ 519.125529][T11716] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 519.144301][T11716] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 519.153874][T11716] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.1784: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 519.176551][T11716] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 519.177907][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 519.183710][T11716] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1784: couldn't read orphan inode 13 (err -117) [ 519.187137][ C0] EXT4-fs (loop4): last error at time 1774329653: ext4_ext_check_inode:521: inode 13 [ 519.232812][T11716] loop4: lost filesystem error report for type 5 error -117 [ 519.237357][T11716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 519.309436][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.028308][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 521.198387][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 521.220182][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.247135][ T9] usb 5-1: config 0 has no interfaces? [ 521.281493][ T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 521.337374][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.369931][ T9] usb 5-1: Product: syz [ 522.307978][ T9] usb 5-1: Manufacturer: syz [ 522.314349][ T9] usb 5-1: SerialNumber: syz [ 522.326084][ T9] usb 5-1: config 0 descriptor?? [ 523.240266][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 523.420925][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.445861][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 523.476622][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 523.500037][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.518355][ T9] usb 6-1: Product: syz [ 523.527811][ T9] usb 6-1: Manufacturer: syz [ 523.540729][ T9] usb 6-1: SerialNumber: syz [ 523.574139][ T9] usb 6-1: config 0 descriptor?? [ 523.778980][ T29] usb 5-1: USB disconnect, device number 23 [ 523.820582][ T9] usb 6-1: USB disconnect, device number 10 [ 523.953166][ T30] audit: type=1804 audit(1774329657.906:19): pid=11774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1800" name="file0" dev="ramfs" ino=28510 res=1 errno=0 [ 524.053351][ T30] audit: type=1326 audit(1774329658.006:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b4b9c799 code=0x7ffc0000 [ 524.124489][ T30] audit: type=1326 audit(1774329658.006:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b4b9c799 code=0x7ffc0000 [ 524.206725][ T30] audit: type=1326 audit(1774329658.016:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fc4b4b9c799 code=0x7ffc0000 [ 524.480653][ T30] audit: type=1326 audit(1774329658.016:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b4b9c799 code=0x7ffc0000 [ 525.289511][ T30] audit: type=1326 audit(1774329658.016:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11775 comm="syz.4.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b4b9c799 code=0x7ffc0000 [ 527.049931][T11815] ufs: You didn't specify the type of your ufs filesystem [ 527.049931][T11815] [ 527.049931][T11815] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 527.049931][T11815] [ 527.049931][T11815] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 527.081774][T11815] ufs: ufstype=old is supported read-only [ 527.090725][T11815] ufs: ufs_fill_super(): bad magic number [ 528.058524][ T1231] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 528.241040][ T1231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.286179][ T1231] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.322620][ T1231] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 528.351433][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.378231][ T1231] usb 5-1: Product: syz [ 528.392749][ T1231] usb 5-1: Manufacturer: syz [ 528.405509][ T1231] usb 5-1: SerialNumber: syz [ 528.443415][ T1231] usb 5-1: config 0 descriptor?? [ 528.557976][ T5842] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 528.637625][T11833] x_tables: ip_tables: tcp.0 match: invalid size 16 (kernel) != (user) 24 [ 528.668618][ T1231] usb 5-1: USB disconnect, device number 24 [ 528.748004][ T5842] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 528.768539][ T5842] usb 6-1: config 0 has no interface number 0 [ 528.785780][ T5842] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 528.813197][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.025924][ T5842] usb 6-1: Product: syz [ 529.030957][ T5842] usb 6-1: Manufacturer: syz [ 529.037238][ T5842] usb 6-1: SerialNumber: syz [ 529.086076][ T5842] usb 6-1: config 0 descriptor?? [ 529.122881][ T5842] usb 6-1: selecting invalid altsetting 1 [ 529.151922][ T5842] dvb_ttusb_budget: ttusb_init_controller: error [ 529.160555][ T5842] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 529.230465][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.256368][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.284740][ T5842] DVB: Unable to find symbol stv0299_attach() [ 529.298291][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.335208][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.383563][ T5842] DVB: Unable to find symbol tda8083_attach() [ 529.397927][ T5842] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 529.430491][ T5842] usb 6-1: USB disconnect, device number 11 [ 531.143623][T11862] ufs: You didn't specify the type of your ufs filesystem [ 531.143623][T11862] [ 531.143623][T11862] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 531.143623][T11862] [ 531.143623][T11862] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 531.175213][T11862] ufs: ufstype=old is supported read-only [ 531.183100][T11862] ufs: ufs_fill_super(): bad magic number [ 532.087597][T11872] x_tables: ip_tables: tcp.0 match: invalid size 16 (kernel) != (user) 24 [ 532.287958][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 532.462314][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.480036][ T1231] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 532.517349][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 532.541981][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 532.558045][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.360895][ T9] usb 4-1: Product: syz [ 533.365139][ T9] usb 4-1: Manufacturer: syz [ 533.369993][ T9] usb 4-1: SerialNumber: syz [ 533.379468][ T9] usb 4-1: config 0 descriptor?? [ 533.446621][ T1231] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 533.457619][ T1231] usb 3-1: config 0 has no interface number 0 [ 533.468701][ T1231] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 533.488506][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.507971][ T1231] usb 3-1: Product: syz [ 533.512237][ T1231] usb 3-1: Manufacturer: syz [ 533.516868][ T1231] usb 3-1: SerialNumber: syz [ 533.553884][ T1231] usb 3-1: config 0 descriptor?? [ 533.584960][ T1231] usb 3-1: selecting invalid altsetting 1 [ 533.602675][ T9] usb 4-1: USB disconnect, device number 18 [ 533.609620][ T1231] dvb_ttusb_budget: ttusb_init_controller: error [ 533.618330][T11889] bridge_slave_0: left allmulticast mode [ 533.638353][ T1231] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 533.639313][T11889] bridge_slave_0: left promiscuous mode [ 533.673535][T11889] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.685497][T11890] netlink: 'syz.0.1843': attribute type 1 has an invalid length. [ 533.705499][T11889] bridge_slave_1: left allmulticast mode [ 533.718228][T11889] bridge_slave_1: left promiscuous mode [ 533.730023][T11889] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.773834][T11889] bond0: (slave bond_slave_0): Releasing backup interface [ 533.790297][ T1231] DVB: Unable to find symbol stv0299_attach() [ 533.805397][T11889] bond0: (slave bond_slave_1): Releasing backup interface [ 533.841823][T11889] team0: Port device team_slave_0 removed [ 533.852923][T11889] team0: Port device team_slave_1 removed [ 533.866725][ T1231] DVB: Unable to find symbol tda8083_attach() [ 533.867663][T11889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.882196][ T1231] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 533.891903][T11889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.906600][T11889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 533.908318][ T1231] usb 3-1: USB disconnect, device number 35 [ 533.957701][T11892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.975716][T11892] team0: Port device bond0 added [ 534.087616][T11890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.123102][T11894] bridge0: port 1(team0) entered blocking state [ 534.130566][T11894] bridge0: port 1(team0) entered disabled state [ 534.163500][T11894] team0: entered allmulticast mode [ 534.184798][T11894] bond0: entered allmulticast mode [ 534.202647][T11894] team0: entered promiscuous mode [ 534.225301][T11894] bond0: entered promiscuous mode [ 534.462693][T11909] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 534.791334][ T5843] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 535.750580][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 536.054841][ T5843] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 536.198824][ T5843] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 536.208556][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.219273][ T5843] usb 4-1: Product: syz [ 536.238025][ T5843] usb 4-1: Manufacturer: syz [ 536.243532][ T5843] usb 4-1: SerialNumber: syz [ 536.256646][ T5843] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 536.940549][ T5843] imon 4-1:155.0: unable to initialize intf0, err -19 [ 537.022385][ T5843] imon:imon_probe: failed to initialize context! [ 537.054008][ T5843] imon 4-1:155.0: unable to register, err -19 [ 537.618140][ T5843] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 537.738057][ T1231] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 537.788083][ T5842] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 537.797994][ T5843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.811495][ T5843] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.825015][ T5843] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 537.834480][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.842704][ T5843] usb 6-1: Product: syz [ 537.846916][ T5843] usb 6-1: Manufacturer: syz [ 537.851681][ T5843] usb 6-1: SerialNumber: syz [ 537.859311][ T5843] usb 6-1: config 0 descriptor?? [ 537.889482][ T1231] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 537.897653][ T1231] usb 3-1: config 0 has no interface number 0 [ 537.906022][ T1231] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 537.915773][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.924739][ T1231] usb 3-1: Product: syz [ 537.929380][ T1231] usb 3-1: Manufacturer: syz [ 537.934085][ T1231] usb 3-1: SerialNumber: syz [ 537.941783][ T1231] usb 3-1: config 0 descriptor?? [ 537.948049][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 537.950424][ T1231] usb 3-1: selecting invalid altsetting 1 [ 537.959494][ T1231] dvb_ttusb_budget: ttusb_init_controller: error [ 537.960760][ T5842] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 537.965901][ T1231] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 537.979107][ T5842] usb 5-1: config 0 interface 0 has no altsetting 0 [ 537.996514][ T5842] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 538.006742][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.015913][ T5842] usb 5-1: Product: syz [ 538.020813][ T5842] usb 5-1: Manufacturer: syz [ 538.025930][ T5842] usb 5-1: SerialNumber: syz [ 538.031319][ T1231] DVB: Unable to find symbol stv0299_attach() [ 538.052347][ T5842] usb 5-1: config 0 descriptor?? [ 538.072927][ T5843] usb 6-1: USB disconnect, device number 12 [ 538.143452][ T1231] DVB: Unable to find symbol tda8083_attach() [ 538.156725][ T9] usb 4-1: USB disconnect, device number 19 [ 538.175277][ T1231] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 538.209829][ T1231] usb 3-1: USB disconnect, device number 36 [ 538.309975][ T5842] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 538.598487][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 538.775634][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 538.811161][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 538.820440][ T5842] rc_core: IR keymap rc-imon-pad not found [ 538.827137][ T5842] Registered IR keymap rc-empty [ 538.832232][ T5842] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 538.843000][ T5842] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 538.859933][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.881554][ T5842] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 538.969965][ T5842] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 539.459188][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 539.459267][ T9] usb 4-1: Product: syz [ 539.459290][ T9] usb 4-1: Manufacturer: syz [ 539.475923][ T9] usb 4-1: SerialNumber: syz [ 539.501879][ T5842] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:25> initialized [ 539.532827][ T5842] usb 5-1: USB disconnect, device number 25 [ 539.794489][ T9] usb 4-1: USB disconnect, device number 20 [ 541.088852][T12003] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 541.280279][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 541.469391][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 541.484170][ T9] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 541.498083][ T5842] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 542.136525][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 542.147968][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.156055][ T9] usb 3-1: Product: syz [ 542.164368][ T9] usb 3-1: Manufacturer: syz [ 542.177927][ T9] usb 3-1: SerialNumber: syz [ 542.194465][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 542.270442][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.290420][ T5842] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 542.324606][ T9] imon 3-1:155.0: unable to initialize intf0, err -19 [ 542.325273][ T5842] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 542.343257][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.385963][ T9] imon:imon_probe: failed to initialize context! [ 542.388350][ T5842] usb 4-1: Product: syz [ 542.398666][ T5842] usb 4-1: Manufacturer: syz [ 542.407037][ T5842] usb 4-1: SerialNumber: syz [ 542.415584][ T9] imon 3-1:155.0: unable to register, err -19 [ 542.432142][ T5842] usb 4-1: config 0 descriptor?? [ 542.477575][T12026] bridge0: entered promiscuous mode [ 542.490492][T12026] bridge0: entered allmulticast mode [ 542.660862][ T5842] usb 4-1: USB disconnect, device number 21 [ 542.909549][ T30] audit: type=1326 audit(1774329676.866:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ba59c799 code=0x7ffc0000 [ 542.947960][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 542.957926][ T30] audit: type=1326 audit(1774329676.866:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ba59c799 code=0x7ffc0000 [ 542.981364][ T30] audit: type=1326 audit(1774329676.866:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f03ba59c799 code=0x7ffc0000 [ 543.123868][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 543.135601][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 543.155735][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.176660][ T9] usb 6-1: Product: syz [ 543.183586][ T9] usb 6-1: Manufacturer: syz [ 543.195112][ T30] audit: type=1326 audit(1774329676.866:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ba59c799 code=0x7ffc0000 [ 543.195473][ T9] usb 6-1: SerialNumber: syz [ 544.501623][ T9] usb 6-1: USB disconnect, device number 13 [ 544.583123][ T5973] usb 3-1: USB disconnect, device number 37 [ 545.356514][T12072] bridge_slave_0: left allmulticast mode [ 545.383738][T12072] bridge_slave_0: left promiscuous mode [ 545.414037][T12072] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.477567][T12072] bridge_slave_1: left allmulticast mode [ 545.496713][T12072] bridge_slave_1: left promiscuous mode [ 545.530168][T12072] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.714165][T12072] bond0: (slave bond_slave_0): Releasing backup interface [ 545.789530][T12072] bond0: (slave bond_slave_1): Releasing backup interface [ 545.804032][T12072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.829643][T12072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.839008][T12072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.852246][T12072] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 545.917478][T12099] ufs: You didn't specify the type of your ufs filesystem [ 545.917478][T12099] [ 545.917478][T12099] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 545.917478][T12099] [ 545.917478][T12099] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 546.096763][T12099] ufs: ufstype=old is supported read-only [ 546.147741][T12099] ufs: ufs_fill_super(): bad magic number [ 546.336004][T12096] syzkaller1: entered promiscuous mode [ 546.351306][T12096] syzkaller1: entered allmulticast mode [ 546.702923][T12110] lo speed is unknown, defaulting to 1000 [ 548.364691][ T1231] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 548.567969][ T1231] usb 5-1: Using ep0 maxpacket: 32 [ 548.585712][ T1231] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 548.630726][ T1231] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 548.684851][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.737471][ T1231] usb 5-1: Product: syz [ 548.748734][ T1231] usb 5-1: Manufacturer: syz [ 548.763294][ T1231] usb 5-1: SerialNumber: syz [ 548.801519][ T1231] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 548.828045][ T1231] imon 5-1:155.0: unable to initialize intf0, err -19 [ 548.851330][ T1231] imon:imon_probe: failed to initialize context! [ 548.871510][ T1231] imon 5-1:155.0: unable to register, err -19 [ 549.298392][ T5842] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 549.528036][T12142] loop3: detected capacity change from 0 to 32768 [ 549.536190][T12142] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1912 (12142) [ 549.540818][ T5842] usb 3-1: config 1 interface 0 has no altsetting 0 [ 549.609891][T12142] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 549.610987][ T5842] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 549.620263][T12142] BTRFS info (device loop3): using sha256 checksum algorithm [ 549.668423][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.680607][ T5842] usb 3-1: Product: syz [ 549.686123][ T5842] usb 3-1: Manufacturer: syz [ 549.730287][ T5842] usb 3-1: SerialNumber: syz [ 549.812539][T12142] BTRFS info (device loop3): enabling ssd optimizations [ 549.821019][T12142] BTRFS info (device loop3): turning on async discard [ 549.828092][T12142] BTRFS info (device loop3): enabling free space tree [ 550.135229][ T5842] usb 3-1: USB disconnect, device number 38 [ 550.158203][ T1231] usb 5-1: USB disconnect, device number 26 [ 550.430329][T12142] BTRFS info (device loop3): balance: start -d -m [ 550.449956][T12142] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 550.601513][T12142] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 551.085957][T12142] BTRFS info (device loop3): found 10 extents, stage: move data extents [ 551.863009][T12142] BTRFS info (device loop3): found 1 extents, stage: update data pointers [ 551.904169][T12142] BTRFS info (device loop3): balance: ended with status: 0 [ 552.085299][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 552.094628][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'. [ 552.136245][T12184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.175485][T12184] team0: Port device bond0 added [ 552.190155][ T9] Oops: general protection fault, probably for non-canonical address 0xe000080fdb4ff037: 0000 [#1] SMP KASAN PTI [ 552.202165][ T9] KASAN: probably user-memory-access in range [0x0000607eda7f81b8-0x0000607eda7f81bf] [ 552.211893][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.222656][ T9] Tainted: [L]=SOFTLOCKUP [ 552.226972][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.237024][ T9] Workqueue: mld mld_ifc_work [ 552.241806][ T9] RIP: 0010:bond_header_create+0x150/0x300 [ 552.247624][ T9] Code: e8 e5 77 59 fb 45 85 f6 0f 84 a5 00 00 00 e8 97 73 59 fb eb 05 e8 90 73 59 fb 48 85 ed 0f 84 89 00 00 00 48 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 ef e8 91 d1 c2 fb 48 8b 6d 00 4c 8d 75 [ 552.267273][ T9] RSP: 0018:ffffc900000e7630 EFLAGS: 00010202 [ 552.273426][ T9] RAX: 00000c0fdb4ff037 RBX: ffffffff866ccaeb RCX: ffff88801daf5b80 [ 552.281747][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 552.289794][ T9] RBP: 0000607eda7f81b8 R08: ffffffff866ccaeb R09: ffffffff8e75d720 [ 552.297934][ T9] R10: dffffc0000000000 R11: ffffffff866ccab0 R12: 00000000000086dd [ 552.306185][ T9] R13: ffff88804f985140 R14: 0000000000000001 R15: dffffc0000000000 [ 552.314162][ T9] FS: 0000000000000000(0000) GS:ffff888125448000(0000) knlGS:0000000000000000 [ 552.323092][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.329676][ T9] CR2: 0000000000000000 CR3: 0000000025dbc000 CR4: 00000000003526f0 [ 552.337916][ T9] Call Trace: [ 552.341260][ T9] [ 552.344190][ T9] ? __pfx_bond_header_create+0x10/0x10 [ 552.349744][ T9] neigh_connected_output+0x286/0x460 [ 552.355130][ T9] ? ip6_output+0x126/0x550 [ 552.359636][ T9] ip6_output+0x340/0x550 [ 552.364065][ T9] ? __pfx_ip6_output+0x10/0x10 [ 552.368915][ T9] NF_HOOK+0x177/0x4f0 [ 552.373004][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 552.377799][ T9] ? __pfx_dst_output+0x10/0x10 [ 552.382758][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 552.388062][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 552.393364][ T9] ? icmp6_dst_alloc+0x3a6/0x440 [ 552.398398][ T9] mld_sendpack+0x8b4/0xe40 [ 552.403001][ T9] ? mld_sendpack+0x213/0xe40 [ 552.407682][ T9] ? __pfx_mld_sendpack+0x10/0x10 [ 552.412734][ T9] mld_ifc_work+0x835/0xe70 [ 552.417352][ T9] ? process_scheduled_works+0xa70/0x1860 [ 552.423097][ T9] process_scheduled_works+0xb5d/0x1860 [ 552.428926][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.434927][ T9] ? assign_work+0x3d5/0x5e0 [ 552.439697][ T9] worker_thread+0xa53/0xfc0 [ 552.444302][ T9] kthread+0x388/0x470 [ 552.448383][ T9] ? __pfx_worker_thread+0x10/0x10 [ 552.453578][ T9] ? __pfx_kthread+0x10/0x10 [ 552.458173][ T9] ret_from_fork+0x51e/0xb90 [ 552.462862][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 552.468067][ T9] ? __switch_to+0xc7d/0x1420 [ 552.472758][ T9] ? __pfx_kthread+0x10/0x10 [ 552.477367][ T9] ret_from_fork_asm+0x1a/0x30 [ 552.482221][ T9] [ 552.485242][ T9] Modules linked in: [ 552.489835][ T9] ---[ end trace 0000000000000000 ]--- [ 552.696913][ T9] RIP: 0010:bond_header_create+0x150/0x300 [ 552.709838][ T9] Code: e8 e5 77 59 fb 45 85 f6 0f 84 a5 00 00 00 e8 97 73 59 fb eb 05 e8 90 73 59 fb 48 85 ed 0f 84 89 00 00 00 48 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 ef e8 91 d1 c2 fb 48 8b 6d 00 4c 8d 75 [ 552.738103][ T5842] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 552.751656][ T9] RSP: 0018:ffffc900000e7630 EFLAGS: 00010202 [ 552.761076][ T9] RAX: 00000c0fdb4ff037 RBX: ffffffff866ccaeb RCX: ffff88801daf5b80 [ 552.774757][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 552.788185][ T9] RBP: 0000607eda7f81b8 R08: ffffffff866ccaeb R09: ffffffff8e75d720 [ 552.801790][ T9] R10: dffffc0000000000 R11: ffffffff866ccab0 R12: 00000000000086dd [ 552.814768][ T9] R13: ffff88804f985140 R14: 0000000000000001 R15: dffffc0000000000 [ 552.827918][ T9] FS: 0000000000000000(0000) GS:ffff888125448000(0000) knlGS:0000000000000000 [ 552.842878][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.853717][ T9] CR2: 0000200000083030 CR3: 00000000400b6000 CR4: 00000000003526f0 [ 552.865986][ T9] Kernel panic - not syncing: Fatal exception [ 552.872636][ T9] Kernel Offset: disabled [ 552.876959][ T9] Rebooting in 86400 seconds..