last executing test programs: 3.021475819s ago: executing program 0 (id=377): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.788763933s ago: executing program 1 (id=379): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x9b00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) 2.449972787s ago: executing program 1 (id=382): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x2, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xa}}]}, 0x40}}, 0x804) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x200, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.143527719s ago: executing program 2 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x12, 0x2002}], 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(0xffffffffffffffff, &(0x7f0000001640)="8b", 0xffe4) 1.974400937s ago: executing program 2 (id=385): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) writev(r0, &(0x7f00000042c0)=[{&(0x7f0000004300)='T01\n', 0x4}, {&(0x7f0000004340)="b68bdb63af69b1ef341e", 0xa}], 0x2) 1.838064981s ago: executing program 0 (id=386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0x163, 0x6, 0xfffffff0, 0x7, 0x9, 0x8, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0d4}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="27030200dc0f14000e0005000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 1.741086131s ago: executing program 2 (id=387): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$TIOCL_PASTESEL(r0, 0x4b47, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18009500000000000000fd6e0000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x102, 0x0) read$FUSE(r6, &(0x7f00000004c0)={0x2020}, 0x2020) writev(r6, &(0x7f0000002500)=[{&(0x7f0000002540)='T01\n', 0x4}], 0x1) write$cgroup_pressure(r6, &(0x7f0000002580)={'full', 0x20, 0x1, 0x20, 0x7}, 0x2f) ioctl$COMEDI_UNLOCK(0xffffffffffffffff, 0x6406) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x902, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r8 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x20402, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002640)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) write$P9_RREADLINK(r6, &(0x7f00000025c0)={0x2e, 0x17, 0x1, {0x25, './tracing/per_cpu/cpu0/trace_pipe_raw'}}, 0x2e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x8, @void}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000340)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x6e, r2}) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) readv(r9, &(0x7f00000001c0), 0x1000000000000052) 1.498302926s ago: executing program 0 (id=388): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) 1.35448422s ago: executing program 0 (id=389): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000004100)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000002f00)=""/4080, 0xff0}, {0x0}, {&(0x7f0000000ac0)=""/234, 0xea}, {&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f0000001c40)=""/216, 0xd8}, {&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f00000003c0)=""/148, 0x94}], 0x8}, 0x20002042) 1.172764419s ago: executing program 3 (id=390): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000740)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000780)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000800)=0xcb, 0x4) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x62, 0x0) 1.122701575s ago: executing program 0 (id=391): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000004c0), 0x56) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="27030200d1eb14120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.093917107s ago: executing program 1 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000540)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) 942.009653ms ago: executing program 3 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x12, 0x2002}], 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(0xffffffffffffffff, &(0x7f0000001640)="8b", 0xffe4) 878.50126ms ago: executing program 1 (id=394): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 818.483506ms ago: executing program 3 (id=395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x0, 0x8000000009, 0x803, 0x26c00, 0x9, 0x2], 0xffff1000, 0x102280}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0xc, 0x8, 0x3, 0xe6, 0x40, 0x0, 0x1, 0x81, 0x7f}, {0x1, 0x3000, 0x3, 0x0, 0x0, 0x5, 0x75, 0x6, 0x36, 0xe, 0x2, 0x7}, {0x54000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x7, 0x2, 0x7e, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0x4, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf8, 0x97}, {0xeeef9fff, 0x0, 0xe, 0x9, 0xb1, 0x8, 0x7, 0xa0, 0x82, 0x2, 0x1, 0x7}, {0x3000, 0x70000, 0xe, 0x5, 0x7, 0x5, 0x7, 0x43, 0x8, 0x81, 0x42, 0x70}, {0x80a0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x9, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0x60000, 0x2}, {0x8000000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x100000000000002, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 733.433105ms ago: executing program 0 (id=396): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x23, 0x80805, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x4, 0x3}, 0x30, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x6490, 0x3, 0x1, 0x2010}, 0x30, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xd, 0x0) ioctl(r0, 0xc4c85513, &(0x7f0000000200)) 592.073019ms ago: executing program 2 (id=397): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) 521.566037ms ago: executing program 3 (id=398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x4, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b"], 0x65) 490.84647ms ago: executing program 2 (id=399): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000004100)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000ac0)=""/234, 0xea}, {&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f0000001c40)=""/216, 0xd8}, {&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f00000003c0)=""/148, 0x94}], 0x7}, 0x20002042) 383.142051ms ago: executing program 2 (id=400): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x2, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x804) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x200, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 330.571056ms ago: executing program 3 (id=401): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000740)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000780)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000800)=0xcb, 0x4) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x62, 0x0) 213.446428ms ago: executing program 1 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) 148.440045ms ago: executing program 3 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='tcp 2', 0x5) write(0xffffffffffffffff, &(0x7f00000003c0)='1', 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 0s ago: executing program 1 (id=404): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000006c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000740)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 83.703558][ T5777] cgroup: Unknown subsys name 'net' [ 83.845885][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.559502][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.435856][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.458501][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.473568][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.479190][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.487962][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.496105][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.496897][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.504123][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.517876][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.518569][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.526410][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.538927][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.543336][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.546744][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.556826][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.561613][ T5804] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.569508][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.581318][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.590145][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.598334][ T5804] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.602773][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.613247][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.622384][ T5806] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.629840][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.770034][ T5790] (null): rxe_set_mtu: Set mtu to 1024 [ 87.797654][ T5789] (null): rxe_set_mtu: Set mtu to 1024 [ 87.803936][ T5789] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.808126][ T5797] (null): rxe_set_mtu: Set mtu to 1024 [ 87.816075][ T5797] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.835087][ T5791] (null): rxe_set_mtu: Set mtu to 1024 [ 87.861693][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.874213][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.893882][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.925113][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.292089][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.299222][ T5790] infiniband rxe0: set active [ 88.304143][ T5790] infiniband rxe0: added rxe_eth0 [ 88.358743][ T5790] RDS/IB: rxe0: added [ 88.363427][ T5790] smc: adding ib device rxe0 with port count 1 [ 88.370460][ T5790] smc: ib device rxe0 port 1 has pnetid [ 88.409440][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.417522][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.573796][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 88.634657][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 88.825715][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 88.922237][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.103327][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.111974][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.120511][ T5789] bridge_slave_0: entered allmulticast mode [ 89.128400][ T5789] bridge_slave_0: entered promiscuous mode [ 89.143847][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.151141][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.162230][ T5789] bridge_slave_1: entered allmulticast mode [ 89.170126][ T5789] bridge_slave_1: entered promiscuous mode [ 89.194709][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.206131][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.213892][ T5797] bridge_slave_0: entered allmulticast mode [ 89.225333][ T5797] bridge_slave_0: entered promiscuous mode [ 89.234402][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.245264][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.253543][ T5797] bridge_slave_1: entered allmulticast mode [ 89.264786][ T5797] bridge_slave_1: entered promiscuous mode [ 89.303817][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.347508][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.365584][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.395218][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.411664][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.502055][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.511693][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.522441][ T5791] bridge_slave_0: entered allmulticast mode [ 89.531623][ T5791] bridge_slave_0: entered promiscuous mode [ 89.544402][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.553155][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.563104][ T5791] bridge_slave_1: entered allmulticast mode [ 89.572232][ T5791] bridge_slave_1: entered promiscuous mode [ 89.585594][ T5789] team0: Port device team_slave_0 added [ 89.596636][ T5789] team0: Port device team_slave_1 added [ 89.612923][ T5797] team0: Port device team_slave_0 added [ 89.619925][ T5799] Bluetooth: hci2: command tx timeout [ 89.664738][ T5797] team0: Port device team_slave_1 added [ 89.697439][ T5799] Bluetooth: hci1: command tx timeout [ 89.697463][ T5099] Bluetooth: hci0: command tx timeout [ 89.714050][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.740388][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.748059][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.774339][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.785182][ T5799] Bluetooth: hci3: command tx timeout [ 89.798190][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.805299][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.831277][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.858807][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.891699][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.900510][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.917732][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.967479][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.990176][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.007342][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.057719][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.181241][ T5791] team0: Port device team_slave_0 added [ 90.220699][ T5789] hsr_slave_0: entered promiscuous mode [ 90.238425][ T5789] hsr_slave_1: entered promiscuous mode [ 90.253438][ T5791] team0: Port device team_slave_1 added [ 90.302611][ T5797] hsr_slave_0: entered promiscuous mode [ 90.313150][ T5797] hsr_slave_1: entered promiscuous mode [ 90.319816][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.331823][ T5797] Cannot create hsr debugfs directory [ 90.418128][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.425146][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.451646][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.492002][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.500352][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.507607][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.536106][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.716733][ T5448] infiniband rxe0: set active [ 90.745309][ T5791] hsr_slave_0: entered promiscuous mode [ 90.753134][ T5791] hsr_slave_1: entered promiscuous mode [ 90.768851][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.776454][ T5791] Cannot create hsr debugfs directory [ 90.822113][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.030543][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.055655][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.118519][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.129415][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.173444][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 91.240482][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.251485][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.262691][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.286639][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.352526][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.360680][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.368286][ T5790] bridge_slave_0: entered allmulticast mode [ 91.375271][ T5790] bridge_slave_0: entered promiscuous mode [ 91.401106][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.408357][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.415517][ T5790] bridge_slave_1: entered allmulticast mode [ 91.422835][ T5790] bridge_slave_1: entered promiscuous mode [ 91.468405][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.505533][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.519191][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.542294][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.567017][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.595806][ T5790] team0: Port device team_slave_0 added [ 91.605574][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.622537][ T5790] team0: Port device team_slave_1 added [ 91.663094][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.670336][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.701499][ T5799] Bluetooth: hci2: command tx timeout [ 91.707589][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.737483][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.744578][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.775119][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.785770][ T5799] Bluetooth: hci0: command tx timeout [ 91.787510][ T5799] Bluetooth: hci1: command tx timeout [ 91.858137][ T5799] Bluetooth: hci3: command tx timeout [ 91.889840][ T5790] hsr_slave_0: entered promiscuous mode [ 91.896852][ T5790] hsr_slave_1: entered promiscuous mode [ 91.903384][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.913799][ T5790] Cannot create hsr debugfs directory [ 92.090057][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.168003][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.238919][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.253095][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.260570][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.272932][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.280156][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.303992][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.311809][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.331438][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.344445][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.360069][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.420620][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.473395][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.480586][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.505422][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.544406][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.551746][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.601745][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.609020][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.631944][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.639289][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.883037][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.950922][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.974522][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.982348][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.040165][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.047994][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.144485][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.286176][ T5797] veth0_vlan: entered promiscuous mode [ 93.356139][ T5797] veth1_vlan: entered promiscuous mode [ 93.426003][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.453369][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.463834][ T5797] veth0_macvtap: entered promiscuous mode [ 93.496359][ T5797] veth1_macvtap: entered promiscuous mode [ 93.576993][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.606991][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.644889][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.663357][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.673007][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.682322][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.694608][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.709354][ T5789] veth0_vlan: entered promiscuous mode [ 93.750109][ T5789] veth1_vlan: entered promiscuous mode [ 93.778958][ T5799] Bluetooth: hci2: command tx timeout [ 93.790868][ T5791] veth0_vlan: entered promiscuous mode [ 93.859114][ T5799] Bluetooth: hci1: command tx timeout [ 93.859123][ T5099] Bluetooth: hci0: command tx timeout [ 93.880078][ T5791] veth1_vlan: entered promiscuous mode [ 93.909013][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.938684][ T5799] Bluetooth: hci3: command tx timeout [ 93.944254][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.969057][ T5790] veth0_vlan: entered promiscuous mode [ 93.975706][ T5791] veth0_macvtap: entered promiscuous mode [ 93.995958][ T5789] veth0_macvtap: entered promiscuous mode [ 94.015368][ T5791] veth1_macvtap: entered promiscuous mode [ 94.034758][ T5789] veth1_macvtap: entered promiscuous mode [ 94.057786][ T5790] veth1_vlan: entered promiscuous mode [ 94.083485][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.092201][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.147071][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.164168][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.190353][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.214854][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.225641][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.236078][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.251920][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.265557][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.279405][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.295196][ T5797] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.310392][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.330704][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.349909][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.358981][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.368050][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.376784][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.389378][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.401205][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.411140][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.422420][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.433996][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.458906][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.468193][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.476945][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.485959][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.530129][ T5790] veth0_macvtap: entered promiscuous mode [ 94.576129][ T5790] veth1_macvtap: entered promiscuous mode [ 94.641865][ T5896] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.690079][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.690088][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.690106][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.720713][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.739227][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.751432][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.763418][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.774136][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.786482][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.845187][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.857009][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.869356][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.880617][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.890693][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.901496][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.913080][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.946034][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.969960][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.985556][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.005259][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.014466][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.027187][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.084174][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.099920][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.220920][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.243640][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.339738][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.370646][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.440717][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.465153][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.803372][ T5799] Bluetooth: hci2: unexpected cc 0x042d length: 63 > 7 [ 95.869772][ T5918] syzkaller0: entered promiscuous mode [ 95.875489][ T5918] syzkaller0: entered allmulticast mode [ 95.939802][ T5799] Bluetooth: hci0: command tx timeout [ 95.939813][ T5099] Bluetooth: hci1: command tx timeout [ 95.964428][ T5920] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 96.009647][ T5920] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 96.021637][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11'. [ 96.032276][ T5799] Bluetooth: hci3: command tx timeout [ 96.041061][ T5920] dummy0: entered promiscuous mode [ 97.048099][ T5947] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 97.118068][ T5947] bridge0: port 3(dummy0) entered blocking state [ 97.147406][ T5947] bridge0: port 3(dummy0) entered disabled state [ 97.164719][ T5947] dummy0: entered allmulticast mode [ 97.187012][ T5947] dummy0: entered promiscuous mode [ 97.203944][ T5948] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 97.219592][ T5948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'. [ 97.242551][ T5948] bridge0: port 3(dummy0) entered blocking state [ 97.249376][ T5948] bridge0: port 3(dummy0) entered forwarding state [ 97.258296][ T5948] dummy0: left allmulticast mode [ 97.263911][ T5948] bridge0: port 3(dummy0) entered disabled state [ 97.315616][ T174] cfg80211: failed to load regulatory.db [ 97.334905][ T5950] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.498427][ T5932] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 98.952386][ T5999] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 99.012815][ T5999] CIFS mount error: No usable UNC path provided in device string! [ 99.012815][ T5999] [ 99.044183][ T5999] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 99.237456][ T6006] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 99.868452][ T5099] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 99.877719][ T5099] Bluetooth: hci2: Injecting HCI hardware error event [ 99.885698][ T5806] Bluetooth: hci2: hardware error 0x00 [ 101.380707][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 101.385139][ T5099] Bluetooth: hci4: command 0x1003 tx timeout [ 101.512586][ T6090] Bluetooth: MGMT ver 1.22 [ 101.727633][ T6097] syzkaller0: entered promiscuous mode [ 101.735493][ T6097] syzkaller0: entered allmulticast mode [ 101.937775][ T5806] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 102.432744][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.531046][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'. [ 102.679007][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.715898][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.748647][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 102.770870][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.790530][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.832780][ T9] usb 1-1: config 0 descriptor?? [ 102.862899][ T6121] FAULT_INJECTION: forcing a failure. [ 102.862899][ T6121] name failslab, interval 1, probability 0, space 0, times 1 [ 102.888672][ T6121] CPU: 0 PID: 6121 Comm: syz.1.58 Not tainted syzkaller #0 [ 102.895961][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.906081][ T6121] Call Trace: [ 102.909409][ T6121] [ 102.912403][ T6121] dump_stack_lvl+0x18c/0x250 [ 102.917188][ T6121] ? show_regs_print_info+0x20/0x20 [ 102.922472][ T6121] ? load_image+0x420/0x420 [ 102.927032][ T6121] ? __might_sleep+0xe0/0xe0 [ 102.931681][ T6121] ? __lock_acquire+0x7eb0/0x7eb0 [ 102.936790][ T6121] should_fail_ex+0x394/0x4c0 [ 102.941534][ T6121] should_failslab+0x9/0x20 [ 102.946071][ T6121] slab_pre_alloc_hook+0x59/0x300 [ 102.951125][ T6121] ? create_filter_start+0x142/0x1d0 [ 102.956447][ T6121] __kmem_cache_alloc_node+0x53/0x260 [ 102.961853][ T6121] ? create_filter_start+0x142/0x1d0 [ 102.967199][ T6121] kmalloc_trace+0x2a/0xe0 [ 102.971660][ T6121] create_filter_start+0x142/0x1d0 [ 102.976807][ T6121] apply_subsystem_event_filter+0x1c4/0x1060 [ 102.982827][ T6121] ? __lock_acquire+0x7eb0/0x7eb0 [ 102.987890][ T6121] ? apply_event_filter+0x420/0x420 [ 102.993121][ T6121] ? __might_fault+0xc6/0x120 [ 102.997829][ T6121] ? __might_fault+0xaa/0x120 [ 103.002544][ T6121] ? _copy_from_user+0xa5/0xe0 [ 103.007343][ T6121] subsystem_filter_write+0x99/0xf0 [ 103.012575][ T6121] ? subsystem_filter_read+0x210/0x210 [ 103.018103][ T6121] vfs_write+0x299/0x9a0 [ 103.022395][ T6121] ? file_end_write+0x250/0x250 [ 103.027286][ T6121] ? __fget_files+0x28/0x460 [ 103.031916][ T6121] ? __fget_files+0x3fc/0x460 [ 103.036688][ T6121] ? __fdget_pos+0x2a3/0x330 [ 103.041316][ T6121] ? ksys_write+0x74/0x260 [ 103.045804][ T6121] ksys_write+0x151/0x260 [ 103.050195][ T6121] ? __ia32_sys_read+0x90/0x90 [ 103.054999][ T6121] ? lockdep_hardirqs_on+0x98/0x150 [ 103.060239][ T6121] do_syscall_64+0x55/0xb0 [ 103.064705][ T6121] ? clear_bhb_loop+0x40/0x90 [ 103.069442][ T6121] ? clear_bhb_loop+0x40/0x90 [ 103.074208][ T6121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.080187][ T6121] RIP: 0033:0x7f10cdb9f559 [ 103.084649][ T6121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.104920][ T6121] RSP: 002b:00007f10ce993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.113381][ T6121] RAX: ffffffffffffffda RBX: 00007f10cde25fa0 RCX: 00007f10cdb9f559 [ 103.121394][ T6121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 103.129395][ T6121] RBP: 00007f10cdc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.137396][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.145415][ T6121] R13: 00007f10cde26038 R14: 00007f10cde25fa0 R15: 00007ffe5fb237c8 [ 103.153428][ T6121] [ 103.445181][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 103.512229][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 103.871465][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 103.927900][ T174] usb 1-1: USB disconnect, device number 2 [ 103.989005][ T6139] syzkaller0: entered promiscuous mode [ 104.004611][ T6139] syzkaller0: entered allmulticast mode [ 104.113488][ T6142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.66'. [ 104.591501][ T6160] syzkaller0: entered promiscuous mode [ 104.597302][ T6160] syzkaller0: entered allmulticast mode [ 104.654470][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.667980][ T5895] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 104.707426][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.76'. [ 104.890722][ T5895] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 104.917454][ T5895] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 104.954208][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.970094][ T5895] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.992605][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 105.022852][ T5895] usb 2-1: Product: syz [ 105.037218][ T5895] usb 2-1: Manufacturer: syz [ 105.041896][ T5895] usb 2-1: SerialNumber: syz [ 105.072932][ T5895] usb 2-1: config 0 descriptor?? [ 105.083611][ T6151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.112302][ T5895] usb 2-1: selecting invalid altsetting 0 [ 105.376254][ T6151] Zero length message leads to an empty skb [ 105.433395][ T6151] usb 2-1: BOGUS urb xfer, pipe 0 != type 1 [ 105.464533][ T174] usb 2-1: USB disconnect, device number 2 [ 106.119312][ T6205] syzkaller0: entered promiscuous mode [ 106.124870][ T6205] syzkaller0: entered allmulticast mode [ 106.210328][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.86'. [ 106.332984][ T6210] syzkaller0: entered promiscuous mode [ 106.358608][ T6210] syzkaller0: entered allmulticast mode [ 107.467676][ T174] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 107.530345][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'. [ 107.662700][ T6255] syzkaller0: entered promiscuous mode [ 107.669089][ T6255] syzkaller0: entered allmulticast mode [ 107.695028][ T174] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 107.713902][ T174] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 107.724988][ T174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.743656][ T174] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.757242][ T174] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 107.765540][ T174] usb 2-1: Product: syz [ 107.773867][ T174] usb 2-1: Manufacturer: syz [ 107.779066][ T174] usb 2-1: SerialNumber: syz [ 107.793777][ T174] usb 2-1: config 0 descriptor?? [ 107.799847][ T6244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.831602][ T174] usb 2-1: selecting invalid altsetting 0 [ 108.097739][ T27] usb 2-1: USB disconnect, device number 3 [ 108.477419][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.106'. [ 108.587806][ T6281] X25: unknown 09 in state 3 [ 108.716268][ T6283] syzkaller0: entered promiscuous mode [ 108.742985][ T6283] syzkaller0: entered allmulticast mode [ 108.759738][ T6292] ip_tables: iptables: counters copy to user failed while replacing table [ 109.050199][ T6303] ======================================================= [ 109.050199][ T6303] WARNING: The mand mount option has been deprecated and [ 109.050199][ T6303] and is ignored by this kernel. Remove the mand [ 109.050199][ T6303] option from the mount to silence this warning. [ 109.050199][ T6303] ======================================================= [ 109.085106][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.114823][ T6303] overlayfs: failed to resolve './bus': -2 [ 109.124192][ T6304] process 'syz.1.113' launched './file0' with NULL argv: empty string added [ 109.331424][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 109.371423][ T6317] FAULT_INJECTION: forcing a failure. [ 109.371423][ T6317] name failslab, interval 1, probability 0, space 0, times 0 [ 109.403572][ T6317] CPU: 0 PID: 6317 Comm: syz.3.117 Not tainted syzkaller #0 [ 109.410945][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.421189][ T6317] Call Trace: [ 109.424515][ T6317] [ 109.427489][ T6317] dump_stack_lvl+0x18c/0x250 [ 109.432330][ T6317] ? show_regs_print_info+0x20/0x20 [ 109.437596][ T6317] ? load_image+0x420/0x420 [ 109.442158][ T6317] ? __might_sleep+0xe0/0xe0 [ 109.446814][ T6317] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.451896][ T6317] ? percpu_ref_put+0x12/0x100 [ 109.456722][ T6317] should_fail_ex+0x394/0x4c0 [ 109.461464][ T6317] should_failslab+0x9/0x20 [ 109.466018][ T6317] slab_pre_alloc_hook+0x59/0x300 [ 109.471104][ T6317] kmem_cache_alloc+0x5a/0x2d0 [ 109.475926][ T6317] ? vm_area_dup+0x61/0x270 [ 109.480521][ T6317] vm_area_dup+0x61/0x270 [ 109.484909][ T6317] __split_vma+0x1a8/0xc20 [ 109.489398][ T6317] ? deref_stack_reg+0x1ab/0x230 [ 109.494394][ T6317] ? mmap_write_unlock+0x160/0x160 [ 109.499590][ T6317] do_vmi_align_munmap+0x3a3/0x16a0 [ 109.504890][ T6317] ? do_vmi_munmap+0x2d0/0x2d0 [ 109.509720][ T6317] ? mtree_range_walk+0x68c/0x7b0 [ 109.514829][ T6317] ? mas_find_setup+0x47f/0x590 [ 109.519747][ T6317] do_vmi_munmap+0x252/0x2d0 [ 109.524451][ T6317] mmap_region+0x8d9/0x2090 [ 109.529042][ T6317] ? file_mmap_ok+0x170/0x170 [ 109.533837][ T6317] ? cap_mmap_addr+0x157/0x2b0 [ 109.538668][ T6317] ? file_mmap_ok+0x11c/0x170 [ 109.543410][ T6317] do_mmap+0x98f/0x10a0 [ 109.547641][ T6317] ? mlock_future_ok+0xf0/0xf0 [ 109.552468][ T6317] ? ima_file_mmap+0x137/0x1d0 [ 109.557297][ T6317] ? ima_file_free+0x4b0/0x4b0 [ 109.562142][ T6317] do_shmat+0x8b0/0xbd0 [ 109.566382][ T6317] ? __ia32_compat_sys_old_shmctl+0xa0/0xa0 [ 109.572338][ T6317] ? lock_chain_count+0x20/0x20 [ 109.577254][ T6317] __x64_sys_shmat+0x9d/0xf0 [ 109.581909][ T6317] do_syscall_64+0x55/0xb0 [ 109.586384][ T6317] ? clear_bhb_loop+0x40/0x90 [ 109.591123][ T6317] ? clear_bhb_loop+0x40/0x90 [ 109.595874][ T6317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.601831][ T6317] RIP: 0033:0x7ffa0f19f559 [ 109.606304][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.625965][ T6317] RSP: 002b:00007ffa0fffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 109.634443][ T6317] RAX: ffffffffffffffda RBX: 00007ffa0f425fa0 RCX: 00007ffa0f19f559 [ 109.642474][ T6317] RDX: bbdccba4532b703b RSI: 0000200000000000 RDI: 0000000000000000 [ 109.650499][ T6317] RBP: 00007ffa0f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 109.658529][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.666561][ T6317] R13: 00007ffa0f426038 R14: 00007ffa0f425fa0 R15: 00007fff73bebf58 [ 109.674610][ T6317] [ 110.048609][ T6334] ip_tables: iptables: counters copy to user failed while replacing table [ 110.128458][ T6336] FAULT_INJECTION: forcing a failure. [ 110.128458][ T6336] name failslab, interval 1, probability 0, space 0, times 0 [ 110.168794][ T6336] CPU: 1 PID: 6336 Comm: syz.1.122 Not tainted syzkaller #0 [ 110.176183][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.186303][ T6336] Call Trace: [ 110.189672][ T6336] [ 110.192652][ T6336] dump_stack_lvl+0x18c/0x250 [ 110.197394][ T6336] ? show_regs_print_info+0x20/0x20 [ 110.202657][ T6336] ? load_image+0x420/0x420 [ 110.207226][ T6336] ? __might_sleep+0xe0/0xe0 [ 110.211891][ T6336] ? __lock_acquire+0x7eb0/0x7eb0 [ 110.216980][ T6336] should_fail_ex+0x394/0x4c0 [ 110.221723][ T6336] should_failslab+0x9/0x20 [ 110.226294][ T6336] slab_pre_alloc_hook+0x59/0x300 [ 110.231388][ T6336] kmem_cache_alloc+0x5a/0x2d0 [ 110.236199][ T6336] ? __kernfs_new_node+0xe5/0x7f0 [ 110.241297][ T6336] __kernfs_new_node+0xe5/0x7f0 [ 110.246219][ T6336] ? kernfs_new_node+0x260/0x260 [ 110.251225][ T6336] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 110.257183][ T6336] ? lockdep_hardirqs_on+0x98/0x150 [ 110.262446][ T6336] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 110.268396][ T6336] ? _raw_spin_unlock+0x40/0x40 [ 110.273315][ T6336] ? stack_trace_save+0xaa/0x100 [ 110.278315][ T6336] ? stack_trace_snprint+0xf0/0xf0 [ 110.283486][ T6336] kernfs_new_node+0x14c/0x260 [ 110.288322][ T6336] kernfs_create_dir_ns+0x44/0x120 [ 110.293496][ T6336] sysfs_create_dir_ns+0x130/0x2a0 [ 110.298666][ T6336] ? module_attr_store+0x5f/0x80 [ 110.303651][ T6336] ? kernfs_fop_write_iter+0x3a4/0x520 [ 110.309155][ T6336] ? vfs_write+0x474/0x9a0 [ 110.313633][ T6336] ? ksys_write+0x151/0x260 [ 110.318190][ T6336] ? sysfs_warn_dup+0xa0/0xa0 [ 110.322931][ T6336] kobject_add_internal+0x617/0xc90 [ 110.328189][ T6336] kobject_add+0x164/0x240 [ 110.332658][ T6336] ? kobject_init+0x1d0/0x1d0 [ 110.337401][ T6336] kobject_create_and_add+0x15b/0x230 [ 110.342831][ T6336] device_add_disk+0x5cc/0xfe0 [ 110.347673][ T6336] md_alloc+0x813/0xe90 [ 110.351892][ T6336] md_alloc_and_put+0x1a/0x1b0 [ 110.356732][ T6336] add_named_array+0x241/0x340 [ 110.361729][ T6336] ? param_attr_store+0xcf/0x300 [ 110.366724][ T6336] ? get_ro+0x30/0x30 [ 110.370807][ T6336] ? read_lock_is_recursive+0x20/0x20 [ 110.372978][ T6340] overlayfs: overlapping lowerdir path [ 110.376229][ T6336] param_attr_store+0x20e/0x300 [ 110.386776][ T6336] ? param_attr_show+0x170/0x170 [ 110.391775][ T6336] ? sysfs_kf_read+0x360/0x360 [ 110.396591][ T6336] module_attr_store+0x5f/0x80 [ 110.401413][ T6336] kernfs_fop_write_iter+0x3a4/0x520 [ 110.406787][ T6336] vfs_write+0x474/0x9a0 [ 110.411132][ T6336] ? file_end_write+0x250/0x250 [ 110.416094][ T6336] ? __fget_files+0x3fc/0x460 [ 110.420843][ T6336] ? __fdget_pos+0x2a3/0x330 [ 110.425577][ T6336] ? ksys_write+0x74/0x260 [ 110.430082][ T6336] ksys_write+0x151/0x260 [ 110.434488][ T6336] ? __ia32_sys_read+0x90/0x90 [ 110.439324][ T6336] ? lockdep_hardirqs_on+0x98/0x150 [ 110.444586][ T6336] do_syscall_64+0x55/0xb0 [ 110.449064][ T6336] ? clear_bhb_loop+0x40/0x90 [ 110.453795][ T6336] ? clear_bhb_loop+0x40/0x90 [ 110.458536][ T6336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.464520][ T6336] RIP: 0033:0x7f10cdb9f559 [ 110.468996][ T6336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.488774][ T6336] RSP: 002b:00007f10ce993028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.497252][ T6336] RAX: ffffffffffffffda RBX: 00007f10cde25fa0 RCX: 00007f10cdb9f559 [ 110.505279][ T6336] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000005 [ 110.513333][ T6336] RBP: 00007f10cdc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 110.521357][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.529382][ T6336] R13: 00007f10cde26038 R14: 00007f10cde25fa0 R15: 00007ffe5fb237c8 [ 110.537426][ T6336] [ 110.540501][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.594507][ T6336] kobject: kobject_add_internal failed for holders (error: -12 parent: md_syzb2) [ 110.609289][ T6344] syzkaller0: entered promiscuous mode [ 110.614833][ T6344] syzkaller0: entered allmulticast mode [ 110.627563][ T6336] kobject: kobject_create_and_add: kobject_add error: -12 [ 110.872312][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 111.185039][ T6368] syzkaller0: entered promiscuous mode [ 111.197404][ T6368] syzkaller0: entered allmulticast mode [ 111.483417][ T6374] jffs2: notice: (6374) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 111.614304][ T6379] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.133'. [ 111.666591][ T6382] overlayfs: overlapping lowerdir path [ 111.674326][ T6374] jffs2: warning: (6374) jffs2_sum_write_data: Not enough space for summary, padsize = -2 [ 111.686051][ T6379] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.133'. [ 111.721678][ T6379] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.133'. [ 111.766836][ T6383] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.133'. [ 112.265361][ T6397] syzkaller0: entered promiscuous mode [ 112.293094][ T6397] syzkaller0: entered allmulticast mode [ 113.396768][ T6441] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.144'. [ 113.424673][ T6441] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.144'. [ 113.446894][ T6441] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.144'. [ 113.677761][ T6449] __nla_validate_parse: 1 callbacks suppressed [ 113.677778][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 113.882628][ T6453] syzkaller0: entered promiscuous mode [ 113.897349][ T6453] syzkaller0: entered allmulticast mode [ 114.501696][ T6468] syzkaller0: entered promiscuous mode [ 114.509707][ T6468] syzkaller0: entered allmulticast mode [ 114.772372][ T6475] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.155'. [ 114.787383][ T6475] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.155'. [ 114.811108][ T6475] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.155'. [ 114.840584][ T6475] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.155'. [ 115.022776][ T6479] trusted_key: encrypted_key: insufficient parameters specified [ 115.049826][ T6479] trusted_key: encrypted_key: insufficient parameters specified [ 115.050984][ T6477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'. [ 116.363205][ T6515] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.165'. [ 116.373672][ T6515] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.165'. [ 116.424628][ T6518] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.165'. [ 116.443374][ T6515] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.165'. [ 116.847336][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.049312][ T27] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 117.057940][ T27] usb 4-1: config 1 has no interface number 0 [ 117.070418][ T27] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 117.091728][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.123576][ T27] usb 4-1: Product: syz [ 117.141787][ T27] usb 4-1: Manufacturer: syz [ 117.146473][ T27] usb 4-1: SerialNumber: syz [ 117.425486][ T27] usb 4-1: 3:0 : does not exist [ 117.435380][ T27] usb 4-1: 3:0 : does not exist [ 117.647935][ T27] usb 4-1: USB disconnect, device number 2 [ 117.813322][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.189013][ T6551] block device autoloading is deprecated and will be removed. [ 119.776942][ T6585] __nla_validate_parse: 4 callbacks suppressed [ 119.776962][ T6585] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.185'. [ 119.839325][ T6585] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.185'. [ 119.863222][ T6585] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.185'. [ 119.941171][ T6588] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.185'. [ 119.992376][ T6590] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 120.145363][ T5806] Bluetooth: hci1: Invalid handle: 0xed88 > 0x0eff [ 120.176687][ T6595] batman_adv: batadv0: Adding interface: syzkaller0 [ 120.183731][ T6595] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.209340][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.216157][ T6595] batman_adv: batadv0: Interface activated: syzkaller0 [ 120.516088][ T6594] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 120.548723][ T6604] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 120.622207][ T6594] batman_adv: batadv0: Removing interface: syzkaller0 [ 120.902198][ T6608] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 121.075105][ T6610] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.196'. [ 121.103925][ T6610] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.196'. [ 121.137939][ T6614] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.196'. [ 121.153089][ T6611] ima: policy update completed [ 121.160148][ T28] audit: type=1807 audit(1793401462.989:2): action=measure func=FILE_CHECK res=1 [ 121.183664][ T6610] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.196'. [ 121.183851][ T28] audit: type=1802 audit(1793401462.999:3): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.195" res=1 errno=0 [ 121.596428][ T6623] overlayfs: missing 'lowerdir' [ 121.643045][ T6479] Set syz1 is full, maxelem 65536 reached [ 121.769437][ T6625] syzkaller0: entered promiscuous mode [ 121.774988][ T6625] syzkaller0: entered allmulticast mode [ 121.835242][ T28] audit: type=1800 audit(1793401463.669:4): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30511 res=0 errno=0 [ 121.871445][ T28] audit: type=1800 audit(1793401463.669:5): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30534 res=0 errno=0 [ 121.994326][ T6633] ip_tables: iptables: counters copy to user failed while replacing table [ 122.006438][ T28] audit: type=1800 audit(1793401463.839:6): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30361 res=0 errno=0 [ 122.055813][ T28] audit: type=1800 audit(1793401463.839:7): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30384 res=0 errno=0 [ 122.085810][ T6637] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.207'. [ 122.097551][ T6637] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.207'. [ 122.097792][ T174] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.269161][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.309527][ T6643] syz.2.208[6643]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 122.518201][ T174] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 122.566494][ T9] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 122.602260][ T174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 122.768753][ T9] usb 1-1: config 1 has no interface number 0 [ 122.808886][ T174] usb 4-1: Product: syz [ 122.852231][ T9] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 122.887913][ T174] usb 4-1: Manufacturer: syz [ 123.004269][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.043483][ T28] audit: type=1800 audit(1793401464.879:8): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=134788 res=0 errno=0 [ 123.101834][ T9] usb 1-1: Product: syz [ 123.108759][ T9] usb 1-1: Manufacturer: syz [ 123.113497][ T9] usb 1-1: SerialNumber: syz [ 123.138140][ T28] audit: type=1800 audit(1793401464.909:9): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=134830 res=0 errno=0 [ 123.180292][ T6647] overlayfs: missing 'lowerdir' [ 123.192181][ T28] audit: type=1800 audit(1793401464.909:10): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=134795 res=0 errno=0 [ 123.232736][ T28] audit: type=1800 audit(1793401464.909:11): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=134796 res=0 errno=0 [ 123.356489][ T9] usb 1-1: 3:0 : does not exist [ 123.374979][ T9] usb 1-1: 3:0 : does not exist [ 123.427477][ T9] usb 1-1: USB disconnect, device number 3 [ 123.473881][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.644491][ T174] scsi host1: uas [ 123.673425][ C1] usb 4-1: stat urb: no pending cmd for uas-tag 2 [ 123.882402][ C1] usb 4-1: cmd cmplt err -71 [ 123.887784][ T5871] usb 4-1: USB disconnect, device number 3 [ 123.911265][ T5871] scsi 1:0:0:0: tag#16 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 123.919651][ T5871] scsi 1:0:0:0: tag#16 CDB: Inquiry 12 00 00 00 24 00 [ 124.123609][ T6672] ip_tables: iptables: counters copy to user failed while replacing table [ 124.266117][ T6675] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 124.290815][ T6675] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 124.301936][ T6675] kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 124.316942][ T6681] overlayfs: missing 'lowerdir' [ 124.325872][ T6675] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 124.342533][ T6675] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 124.352496][ T6675] kvm: requested 143314 ns i8254 timer period limited to 200000 ns [ 124.375058][ T6675] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 124.388877][ T6675] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 124.402566][ T6675] kvm: requested 178514 ns i8254 timer period limited to 200000 ns [ 124.411275][ T6675] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 124.569951][ T6685] loop2: detected capacity change from 0 to 512 [ 124.694700][ T6685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.775894][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.792697][ T6697] warning: `syz.3.226' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.837432][ T6701] __nla_validate_parse: 6 callbacks suppressed [ 124.837448][ T6701] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.228'. [ 124.880608][ T6701] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.228'. [ 124.910109][ T6701] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.228'. [ 124.983146][ T6704] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.228'. [ 124.998797][ T6706] overlayfs: missing 'lowerdir' [ 125.119818][ T6709] ip_tables: iptables: counters copy to user failed while replacing table [ 125.355091][ T174] asus 0005:0B05:8502.0002: No inputs registered, leaving [ 125.412840][ T174] asus 0005:0B05:8502.0002: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 125.521762][ T6722] syzkaller0: entered promiscuous mode [ 125.528685][ T6722] syzkaller0: entered allmulticast mode [ 125.657689][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 125.759268][ T6731] overlayfs: missing 'lowerdir' [ 125.766541][ T6733] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.239'. [ 125.784265][ T6733] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.239'. [ 125.808548][ T6733] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.239'. [ 125.828241][ T6733] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.239'. [ 125.871524][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 125.899274][ T9] usb 3-1: can't read configurations, error -71 [ 126.031882][ T6739] ip_tables: iptables: counters copy to user failed while replacing table [ 126.639313][ T6756] overlayfs: missing 'lowerdir' [ 126.698523][ T6755] syzkaller0: entered promiscuous mode [ 126.704108][ T6755] syzkaller0: entered allmulticast mode [ 126.803246][ T6758] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.249'. [ 126.857650][ T6758] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.249'. [ 126.868593][ T6760] ip_tables: iptables: counters copy to user failed while replacing table [ 126.901624][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 126.901641][ T28] audit: type=1804 audit(1793401468.739:43): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.251" name="/newroot/49/test_file" dev="tmpfs" ino=284 res=1 errno=0 [ 127.037773][ T6767] loop3: detected capacity change from 0 to 512 [ 127.051455][ T28] audit: type=1800 audit(1793401468.889:44): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14861 res=0 errno=0 [ 127.079092][ T6767] EXT4-fs: Ignoring removed bh option [ 127.118000][ T6767] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.234246][ T6767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.268189][ T6767] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.348544][ T6781] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 127.357749][ T6781] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 127.410964][ T28] audit: type=1800 audit(1793401469.249:45): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=136074 res=0 errno=0 [ 127.480294][ T28] audit: type=1800 audit(1793401469.279:46): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=135992 res=0 errno=0 [ 127.579746][ T28] audit: type=1800 audit(1793401469.419:47): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=136104 res=0 errno=0 [ 127.621027][ T28] audit: type=1800 audit(1793401469.459:48): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=136116 res=0 errno=0 [ 127.655448][ T28] audit: type=1800 audit(1793401469.479:49): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=136128 res=0 errno=0 [ 127.672515][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.838794][ T6794] ip_tables: iptables: counters copy to user failed while replacing table [ 127.938862][ T6798] syzkaller0: entered promiscuous mode [ 127.944508][ T6798] syzkaller0: entered allmulticast mode [ 128.271654][ T6808] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 128.289929][ T6808] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 128.772330][ T6821] netlink: 'syz.0.273': attribute type 12 has an invalid length. [ 128.844396][ T6823] syzkaller0: entered promiscuous mode [ 128.857345][ T6823] syzkaller0: entered allmulticast mode [ 128.943718][ T6830] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 128.956709][ T6830] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 129.562464][ T6858] overlayfs: missing 'lowerdir' [ 129.573999][ T6856] syzkaller0: entered promiscuous mode [ 129.587221][ T6856] syzkaller0: entered allmulticast mode [ 130.029627][ T6874] __nla_validate_parse: 14 callbacks suppressed [ 130.029647][ T6874] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.294'. [ 130.050559][ T6874] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.294'. [ 130.079065][ T6874] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.294'. [ 130.090669][ T6874] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.294'. [ 130.281189][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.297'. [ 130.624623][ T6887] syzkaller0: entered promiscuous mode [ 130.644865][ T6887] syzkaller0: entered allmulticast mode [ 130.710492][ T28] audit: type=1800 audit(1793401472.549:50): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.300" name="new_port" dev="sysfs" ino=124873 res=0 errno=0 [ 131.207505][ T6897] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.304'. [ 131.240857][ T6897] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.304'. [ 131.277294][ T6897] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.304'. [ 131.307217][ T28] audit: type=1800 audit(1793401473.139:51): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.306" name="authorized_default" dev="sysfs" ino=26092 res=0 errno=0 [ 131.344140][ T6897] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.304'. [ 131.492029][ T6905] loop1: detected capacity change from 0 to 2048 [ 131.510234][ T28] audit: type=1800 audit(1793401473.339:52): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14635 res=0 errno=0 [ 131.534924][ T6909] device-mapper: table: 248:0: thin-pool: Discard support cannot be disabled once enabled (-EINVAL) [ 131.580056][ T6905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.608757][ T6909] device-mapper: ioctl: error adding target to table [ 131.643875][ T6913] syzkaller0: entered promiscuous mode [ 131.649569][ T6913] syzkaller0: entered allmulticast mode [ 132.106557][ T6930] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.317'. [ 132.287859][ T6934] device-mapper: table: 248:1: thin-pool: Discard support cannot be disabled once enabled (-EINVAL) [ 132.312021][ T6934] device-mapper: ioctl: error adding target to table [ 132.515002][ T6941] syzkaller0: entered promiscuous mode [ 132.520821][ T6941] syzkaller0: entered allmulticast mode [ 132.812107][ T6946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.142465][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151694][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.376159][ T6997] syzkaller0: entered promiscuous mode [ 134.382534][ T6997] syzkaller0: entered allmulticast mode [ 134.886611][ T28] audit: type=1800 audit(1793401476.719:53): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=137961 res=0 errno=0 [ 134.907697][ T28] audit: type=1800 audit(1793401476.739:54): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=137973 res=0 errno=0 [ 134.947296][ T5893] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.960085][ T7016] Bluetooth: MGMT ver 1.22 [ 134.970580][ T28] audit: type=1800 audit(1793401476.769:55): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=137985 res=0 errno=0 [ 135.159900][ T5893] usb 1-1: config 7 has an invalid interface number: 62 but max is 0 [ 135.174749][ T5893] usb 1-1: config 7 has no interface number 0 [ 135.181525][ T5893] usb 1-1: config 7 interface 62 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 135.208504][ T5893] usb 1-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=e1.98 [ 135.227265][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.241755][ T5893] usb 1-1: Product: syz [ 135.252901][ T5893] usb 1-1: Manufacturer: syz [ 135.261677][ T5893] usb 1-1: SerialNumber: syz [ 135.282692][ T28] audit: type=1800 audit(1793401477.109:56): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=138026 res=0 errno=0 [ 135.329539][ T28] audit: type=1800 audit(1793401477.149:57): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=138069 res=0 errno=0 [ 135.371846][ T28] audit: type=1800 audit(1793401477.149:58): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=138033 res=0 errno=0 [ 135.412274][ T28] audit: type=1800 audit(1793401477.149:59): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=138034 res=0 errno=0 [ 135.520639][ T28] audit: type=1800 audit(1793401477.359:60): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=138055 res=0 errno=0 [ 135.551976][ T5893] usb 1-1: USB disconnect, device number 4 [ 135.585293][ T28] audit: type=1800 audit(1793401477.359:61): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=138056 res=0 errno=0 [ 135.654078][ T28] audit: type=1800 audit(1793401477.369:62): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=138035 res=0 errno=0 [ 135.877322][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.979794][ T7029] syzkaller0: entered promiscuous mode [ 135.985305][ T7029] syzkaller0: entered allmulticast mode [ 136.081711][ T27] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 136.107219][ T27] usb 2-1: config 1 has no interface number 0 [ 136.139490][ T27] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 136.157233][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.175615][ T27] usb 2-1: Product: syz [ 136.180552][ T27] usb 2-1: Manufacturer: syz [ 136.185224][ T27] usb 2-1: SerialNumber: syz [ 136.236788][ T7033] __nla_validate_parse: 15 callbacks suppressed [ 136.236805][ T7033] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.359'. [ 136.258365][ T7033] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.359'. [ 136.272550][ T7033] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.359'. [ 136.283832][ T7033] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.359'. [ 136.451896][ T27] usb 2-1: 3:0 : does not exist [ 136.468695][ T27] usb 2-1: 3:0 : does not exist [ 136.553443][ T27] usb 2-1: USB disconnect, device number 4 [ 136.618040][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.087603][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.304439][ T5893] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 137.317629][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 137.326222][ T5893] usb 4-1: Product: syz [ 137.331096][ T5893] usb 4-1: Manufacturer: syz [ 137.538265][ T7060] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.370'. [ 137.573947][ T7060] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.370'. [ 137.601644][ T7060] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.370'. [ 137.611682][ T7060] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.370'. [ 137.795114][ T7066] device-mapper: table: 248:0: thin-pool: Discard support cannot be disabled once enabled (-EINVAL) [ 137.827270][ T7066] device-mapper: ioctl: error adding target to table [ 138.413868][ T7083] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.380'. [ 138.426278][ T7083] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.380'. [ 139.387918][ T7099] syzkaller0: entered promiscuous mode [ 139.401989][ T7099] syzkaller0: entered allmulticast mode [ 139.918795][ T5893] usb 4-1: USB disconnect, device number 4 [ 139.921739][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 139.921794][ T28] audit: type=1800 audit(1793401481.749:82): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=138514 res=0 errno=0 [ 140.027861][ T28] audit: type=1800 audit(1793401481.749:83): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=138515 res=0 errno=0 [ 140.081738][ T28] audit: type=1800 audit(1793401481.749:84): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=138494 res=0 errno=0 [ 140.152083][ T7113] overlayfs: missing 'workdir' [ 140.667553][ T5895] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.869472][ T5895] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 140.887441][ T5895] usb 1-1: config 1 has no interface number 0 [ 140.911012][ T5895] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 140.937464][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.949463][ T5895] usb 1-1: Product: syz [ 140.957943][ T5895] usb 1-1: Manufacturer: syz [ 140.962732][ T5895] usb 1-1: SerialNumber: syz [ 140.993941][ T28] audit: type=1800 audit(1793401482.829:85): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=139160 res=0 errno=0 [ 141.046512][ T28] audit: type=1800 audit(1793401482.869:86): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=139203 res=0 errno=0 [ 141.106448][ T7142] ------------[ cut here ]------------ [ 141.112818][ T7142] SVC: permsocks remain for nfsd [ 141.125694][ T28] audit: type=1800 audit(1793401482.869:87): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=139167 res=0 errno=0 [ 141.164929][ T28] audit: type=1800 audit(1793401482.869:88): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=139168 res=0 errno=0 [ 141.166999][ T7142] WARNING: CPU: 0 PID: 7142 at net/sunrpc/svc.c:645 svc_destroy+0x2ed/0x390 [ 141.193837][ T7142] Modules linked in: [ 141.197908][ T7142] CPU: 0 PID: 7142 Comm: syz.3.403 Not tainted syzkaller #0 [ 141.205328][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.216170][ T7142] RIP: 0010:svc_destroy+0x2ed/0x390 [ 141.221577][ T7142] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 22 c3 2c f8 49 8b 37 48 c7 c7 20 12 fa 8b e8 13 5f 9d f7 <0f> 0b e9 78 fd ff ff e8 57 ba d3 f7 c6 05 7f 23 c4 05 01 4c 89 e0 [ 141.240403][ T5895] usb 1-1: 3:0 : does not exist [ 141.241887][ T7142] RSP: 0018:ffffc9000522fae0 EFLAGS: 00010246 [ 141.248865][ T5895] usb 1-1: 3:0 : does not exist [ 141.252350][ T7142] RAX: c01dcaa529479c00 RBX: ffff88805e3bc850 RCX: 0000000000080000 [ 141.265250][ T7142] RDX: ffffc9000d885000 RSI: 000000000002c161 RDI: 000000000002c162 [ 141.273509][ T7142] RBP: ffffc9000522fcb8 R08: ffffc9000522f6e7 R09: 1ffff92000a45edc [ 141.281593][ T7142] R10: dffffc0000000000 R11: fffff52000a45edd R12: ffff88805e3bc800 [ 141.290039][ T7142] R13: dffffc0000000000 R14: ffff88805e3bc850 R15: ffffffff8e3e1d40 [ 141.298325][ T7142] FS: 00007ffa0fffd6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 141.307402][ T7142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.314638][ T7142] CR2: 0000000000000000 CR3: 000000003054d000 CR4: 00000000003526f0 [ 141.322809][ T7142] Call Trace: [ 141.326142][ T7142] [ 141.329313][ T7142] write_ports+0xb99/0xfa0 [ 141.333890][ T7142] ? write_versions+0xe00/0xe00 [ 141.338907][ T7142] ? __lock_acquire+0x7eb0/0x7eb0 [ 141.344021][ T7142] ? __virt_addr_valid+0x10c/0x380 [ 141.349318][ T7142] ? __virt_addr_valid+0x10c/0x380 [ 141.354519][ T7142] ? __might_fault+0xaa/0x120 [ 141.359356][ T7142] ? __might_fault+0xc6/0x120 [ 141.364104][ T7142] ? __might_fault+0xaa/0x120 [ 141.368943][ T7142] ? simple_transaction_get+0x11d/0x140 [ 141.374564][ T7142] nfsctl_transaction_write+0x10c/0x150 [ 141.380239][ T7142] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 141.385973][ T7142] vfs_write+0x299/0x9a0 [ 141.390382][ T7142] ? file_end_write+0x250/0x250 [ 141.395349][ T7142] ? __fget_files+0x28/0x460 [ 141.400086][ T7142] ? __fget_files+0x3fc/0x460 [ 141.404848][ T7142] ? __fdget_pos+0x2a3/0x330 [ 141.409565][ T7142] ? ksys_write+0x74/0x260 [ 141.414065][ T7142] ksys_write+0x151/0x260 [ 141.419100][ T7142] ? __ia32_sys_read+0x90/0x90 [ 141.423996][ T7142] ? lockdep_hardirqs_on+0x98/0x150 [ 141.429337][ T7142] do_syscall_64+0x55/0xb0 [ 141.433871][ T7142] ? clear_bhb_loop+0x40/0x90 [ 141.438678][ T7142] ? clear_bhb_loop+0x40/0x90 [ 141.443446][ T7142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.449549][ T7142] RIP: 0033:0x7ffa0f19f559 [ 141.454059][ T7142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.473950][ T7142] RSP: 002b:00007ffa0fffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.482543][ T7142] RAX: ffffffffffffffda RBX: 00007ffa0f425fa0 RCX: 00007ffa0f19f559 [ 141.490636][ T7142] RDX: 0000000000000005 RSI: 0000200000000340 RDI: 0000000000000003 [ 141.498735][ T7142] RBP: 00007ffa0f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 141.506808][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.514926][ T7142] R13: 00007ffa0f426038 R14: 00007ffa0f425fa0 R15: 00007fff73bebf58 [ 141.523768][ T7142] [ 141.526861][ T7142] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 141.534188][ T7142] CPU: 0 PID: 7142 Comm: syz.3.403 Not tainted syzkaller #0 [ 141.541505][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.551612][ T7142] Call Trace: [ 141.554949][ T7142] [ 141.557909][ T7142] dump_stack_lvl+0x18c/0x250 [ 141.562640][ T7142] ? show_regs_print_info+0x20/0x20 [ 141.567871][ T7142] ? load_image+0x420/0x420 [ 141.572409][ T7142] panic+0x2ca/0x720 [ 141.576350][ T7142] ? bpf_jit_dump+0xd0/0xd0 [ 141.580892][ T7142] __warn+0x2e0/0x470 [ 141.584899][ T7142] ? svc_destroy+0x2ed/0x390 [ 141.589522][ T7142] ? svc_destroy+0x2ed/0x390 [ 141.594146][ T7142] report_bug+0x2be/0x4f0 [ 141.598513][ T7142] ? svc_destroy+0x2ed/0x390 [ 141.603132][ T7142] ? svc_destroy+0x2ed/0x390 [ 141.607748][ T7142] ? svc_destroy+0x2ef/0x390 [ 141.612364][ T7142] handle_bug+0xcf/0x120 [ 141.616644][ T7142] exc_invalid_op+0x1a/0x50 [ 141.621178][ T7142] asm_exc_invalid_op+0x1a/0x20 [ 141.626063][ T7142] RIP: 0010:svc_destroy+0x2ed/0x390 [ 141.631314][ T7142] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 22 c3 2c f8 49 8b 37 48 c7 c7 20 12 fa 8b e8 13 5f 9d f7 <0f> 0b e9 78 fd ff ff e8 57 ba d3 f7 c6 05 7f 23 c4 05 01 4c 89 e0 [ 141.651039][ T7142] RSP: 0018:ffffc9000522fae0 EFLAGS: 00010246 [ 141.657140][ T7142] RAX: c01dcaa529479c00 RBX: ffff88805e3bc850 RCX: 0000000000080000 [ 141.665169][ T7142] RDX: ffffc9000d885000 RSI: 000000000002c161 RDI: 000000000002c162 [ 141.673169][ T7142] RBP: ffffc9000522fcb8 R08: ffffc9000522f6e7 R09: 1ffff92000a45edc [ 141.681255][ T7142] R10: dffffc0000000000 R11: fffff52000a45edd R12: ffff88805e3bc800 [ 141.689253][ T7142] R13: dffffc0000000000 R14: ffff88805e3bc850 R15: ffffffff8e3e1d40 [ 141.697281][ T7142] write_ports+0xb99/0xfa0 [ 141.701748][ T7142] ? write_versions+0xe00/0xe00 [ 141.706639][ T7142] ? __lock_acquire+0x7eb0/0x7eb0 [ 141.711700][ T7142] ? __virt_addr_valid+0x10c/0x380 [ 141.716846][ T7142] ? __virt_addr_valid+0x10c/0x380 [ 141.721988][ T7142] ? __might_fault+0xaa/0x120 [ 141.726702][ T7142] ? __might_fault+0xc6/0x120 [ 141.731406][ T7142] ? __might_fault+0xaa/0x120 [ 141.736201][ T7142] ? simple_transaction_get+0x11d/0x140 [ 141.741871][ T7142] nfsctl_transaction_write+0x10c/0x150 [ 141.747454][ T7142] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 141.753120][ T7142] vfs_write+0x299/0x9a0 [ 141.757403][ T7142] ? file_end_write+0x250/0x250 [ 141.762314][ T7142] ? __fget_files+0x28/0x460 [ 141.766936][ T7142] ? __fget_files+0x3fc/0x460 [ 141.771657][ T7142] ? __fdget_pos+0x2a3/0x330 [ 141.776278][ T7142] ? ksys_write+0x74/0x260 [ 141.780740][ T7142] ksys_write+0x151/0x260 [ 141.785142][ T7142] ? __ia32_sys_read+0x90/0x90 [ 141.789946][ T7142] ? lockdep_hardirqs_on+0x98/0x150 [ 141.795200][ T7142] do_syscall_64+0x55/0xb0 [ 141.799649][ T7142] ? clear_bhb_loop+0x40/0x90 [ 141.804362][ T7142] ? clear_bhb_loop+0x40/0x90 [ 141.809071][ T7142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.815015][ T7142] RIP: 0033:0x7ffa0f19f559 [ 141.819456][ T7142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.839085][ T7142] RSP: 002b:00007ffa0fffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.847528][ T7142] RAX: ffffffffffffffda RBX: 00007ffa0f425fa0 RCX: 00007ffa0f19f559 [ 141.855528][ T7142] RDX: 0000000000000005 RSI: 0000200000000340 RDI: 0000000000000003 [ 141.863525][ T7142] RBP: 00007ffa0f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 141.871522][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.879553][ T7142] R13: 00007ffa0f426038 R14: 00007ffa0f425fa0 R15: 00007fff73bebf58 [ 141.887566][ T7142] [ 141.891218][ T7142] Kernel Offset: disabled [ 141.895643][ T7142] Rebooting in 86400 seconds..