last executing test programs: 3m54.225844163s ago: executing program 2 (id=442): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=") sendmsg$nl_route_sched(r3, 0x0, 0x880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 3m52.818173829s ago: executing program 2 (id=447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000001c0)="66b9800000c00f326635000400000f3066b841e72fda008d008dc80f21f86635040080000f23f866b8987d00000f23c80f21f966b93a0800000f32350400b0000023f80f20e06635020000000fc75a00360f00c20f1c86d1540f22db0f4b79c766b82a5d000066ba000000000f30f30f105cf1baf80c66a820df518b66efbafc0c66ed", 0x83}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)=@ethtool_stats}) socket(0x10, 0x80002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791", 0x6b}, {&(0x7f0000002a00)="cee05e8788753e17958fdee7f1d5d4faa3cc35d952f80d608a05555286d236185f49d62f1dfa7b996904100c7a91d13c47af61b9588dd8387b86fc4e1d4b75374ad68a91248f7f983391bd22b5a4c9d913f64dc2abaa5f694d8c396e1e118fb2b00961632cb84e625dc9767a34", 0x6d}], 0x2, 0x0, 0x0, 0x7400}, 0x20040000) 3m52.440886712s ago: executing program 2 (id=452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'nr0\x00', 0x400}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 3m51.377213776s ago: executing program 2 (id=456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x84}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 3m50.393239288s ago: executing program 2 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3m50.04129193s ago: executing program 3 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3m49.969062382s ago: executing program 3 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x29, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m49.665230251s ago: executing program 3 (id=469): futex(0x0, 0xd, 0x2, &(0x7f0000000480), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m49.064386231s ago: executing program 2 (id=470): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3m48.644123875s ago: executing program 3 (id=473): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 3m47.068118716s ago: executing program 3 (id=480): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3m45.951062903s ago: executing program 3 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x84}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 3m44.269639947s ago: executing program 0 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 3m44.125293902s ago: executing program 0 (id=491): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m44.050937224s ago: executing program 0 (id=493): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3m43.794829142s ago: executing program 0 (id=504): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3m43.605446078s ago: executing program 0 (id=496): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3m42.64510155s ago: executing program 0 (id=500): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=") sendmsg$nl_route_sched(r3, 0x0, 0x880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x38, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 3m33.417587799s ago: executing program 32 (id=470): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3m30.552528652s ago: executing program 33 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x84}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 3m27.597803379s ago: executing program 34 (id=500): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=") sendmsg$nl_route_sched(r3, 0x0, 0x880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x38, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 2m35.005973286s ago: executing program 1 (id=934): futex(&(0x7f00000002c0), 0xd, 0x2, &(0x7f0000000480), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m34.834199181s ago: executing program 1 (id=935): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) mknod$loop(0x0, 0xc000, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, 0x0, &(0x7f0000001f40), 0x2248, r2}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r3, 0x0, 0x20000000}, 0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2m34.025164458s ago: executing program 1 (id=938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@local, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0xffffffffffffff37, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m33.908977102s ago: executing program 1 (id=940): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000d40)="$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") r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x28000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x458, 0x0) r5 = epoll_create1(0x0) poll(0x0, 0x0, 0xdb3) shutdown(0xffffffffffffffff, 0x0) epoll_wait(r5, &(0x7f0000000280)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 2m31.477433841s ago: executing program 1 (id=946): futex(&(0x7f00000002c0), 0xd, 0x2, &(0x7f0000000480), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m26.29057249s ago: executing program 1 (id=968): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") unshare(0x22020400) r0 = socket(0x28, 0x801, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x2) 2m26.026829388s ago: executing program 35 (id=968): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") unshare(0x22020400) r0 = socket(0x28, 0x801, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x2) 13.458166783s ago: executing program 4 (id=1352): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001440)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1000000000087, 0x3a, '\xaa`W\x99K?\x91)\xaei\x05\x02\x1e7\xc4Y\xcc#\xdch\xc7\xfb6 &\xdaD\xe3dm\x18i\xdb\xb9,\x87Q`\x8b\f\bm\xe4\xb3A\xfe\x9b\xeeo\xa6S\x9d\xcd\xfe@\xa5\xfdB\xa8\xb6\x96\xed\x11n\x10', 0x3a, ',V\x1d\xa7c\\\xb3_\xbc\xa8\x9b\xdb\xc3B\x11q\xad\x1c\xb8\x9dc \xa3T\xfbE>\x8c\x8a\x86\xa3\xff\xf2(&\xc7\xac\x8d\x90\x17vmYD\xd9\xca\xcag', 0x3a, './file0', 0x3a, [0x50, 0x50]}, 0x9a) fanotify_mark(0xffffffffffffffff, 0x1, 0x48000031, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, 0x0) 13.229107871s ago: executing program 6 (id=1353): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000104000000000000000000000000d70e68d6337d5e423311039ad40cfb94870d42460e329ba9d55beb82325599f3b1393fb5ef6a3caad741de7def746d7df500d8060867e4a37292f73205107d73f307df28ce", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5", 0x7c, 0x5, 0xff}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0", 0xe6, 0x5, 0x6}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)}, {&(0x7f0000000280)}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x200840, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x400000f4, 0x0, 0x3}]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11.408554189s ago: executing program 6 (id=1361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0xffeffffffffffc04, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x4, 0xffff1000, 0x1, r2, 0x8}) 9.55370811s ago: executing program 4 (id=1362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x4b45, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2024) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f00000002c0)={[{@gid_forget}, {@adinicb}, {}, {@umask={'umask', 0x3d, 0x1}}, {@shortad}, {}, {@undelete}, {@partition={'partition', 0x3d, 0x6}}, {@lastblock={'lastblock', 0x3d, 0x3fe}}, {@utf8}, {@nostrict}, {@nostrict}, {@partition={'partition', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x3}}]}, 0x2, 0xc32, &(0x7f0000001140)="$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") 9.552786739s ago: executing program 5 (id=1363): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="fe"], 0x1, 0x176, &(0x7f0000000000)="$eJzskj9OAkEUxr9Zlj9aGEmsaCCRGCyUZVFjbLTE3gNIcEXiosKSKIRijTEUFsbSE3ANEy+ghfEA1BTE2oyZ2bfj4BWcX8G38837M++Fs6ATpAF8z4YNHECSwBLeGYMNIM8ib2pF+kT6Qco550LfKO6Q/DvSXIAM4Ptet7BXQFYY/cF5XRoAvqSnrGD/1sJUlvqcDRvi41hrwqmJHpMA0NFicjawIofgKsbGL+Ve+6oc9AcbrXa96TW9C9et7jhbjrPtlk9bvudEv0xrYclyoi2wDkDsa0G7TwK4p83NkwfTniZYBJiemwLwSHel1flsSx+dlOFF5aYB1fUIa2LRuA6Z5hZlFRtypBoYEnSoxCthqldGXmw2Lv2TERhYnDaGrWpUJkiqg6sfqrth/OwRaZG0RjomncTL+fOXSSKLEA90KoVACjf1Xq9bEUuKvpTnKs9dDvWFia7P1vxwrxYMBoPBYDAYDAaD4b/zEwAA//9yiHzx") bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x180680, 0x0, 0xffffffffffffff2a, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) semtimedop(0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0], 0x38}}, 0x0) 6.575856656s ago: executing program 4 (id=1364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/121, 0x79}], 0x1, 0x8000, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 6.574909676s ago: executing program 8 (id=1374): futex(&(0x7f00000002c0), 0xd, 0x2, &(0x7f0000000480), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 6.574441776s ago: executing program 5 (id=1365): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x800, &(0x7f0000000000)={[{@delalloc}, {@barrier}, {@barrier}, {@jqfmt_vfsv1}]}, 0x1, 0x7a1, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) syz_usb_connect$uac1(0x0, 0x72, 0x0, 0x0) mlockall(0x7) 6.574242596s ago: executing program 6 (id=1366): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6.217668998s ago: executing program 6 (id=1368): mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, 0xffffffffffffffff, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x6, 0x20, 0x0) 5.600522208s ago: executing program 8 (id=1370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0x4, 0x6, 0x77}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 4.883944681s ago: executing program 6 (id=1371): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000104000000000000000000000000d70e68d6337d5e423311039ad40cfb94870d42460e329ba9d55beb82325599f3b1393fb5ef6a3caad741de7def746d7df500d8060867e4a37292f73205107d73f307df28ce", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5", 0x7c, 0x5, 0xff}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0", 0xe6, 0x5, 0x6}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)}, {&(0x7f0000000280)}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x200840, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x400000f4, 0x0, 0x3}]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.454557296s ago: executing program 8 (id=1372): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x7df6}, 0x28) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/73, 0xfffffdef, 0x55) 4.344839539s ago: executing program 5 (id=1373): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x0, 0x1e, 0x16, 0x6c, 0x0}) 4.145119005s ago: executing program 7 (id=1375): sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000240)=0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x22048090) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x38, 0x3a, 0x1, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "29e4f3", 0x0, 0x2b, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, [], "0a06efb2988b900b"}}}}}}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.436953989s ago: executing program 8 (id=1376): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) lstat(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x32) write$FUSE_DIRENTPLUS(r1, 0x0, 0x4000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 3.402054909s ago: executing program 4 (id=1377): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0}) syz_clone(0xa012c000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000001080)) 3.230117375s ago: executing program 5 (id=1378): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f00000002c0)='./file2\x00') pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x90040, &(0x7f00000018c0)=ANY=[], 0xfe, 0x151a, &(0x7f0000001a00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) close_range(r6, 0xffffffffffffffff, 0x0) read(r6, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 3.229627195s ago: executing program 7 (id=1379): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.021247012s ago: executing program 4 (id=1380): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280), 0x0, r0) 2.987003283s ago: executing program 4 (id=1381): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={r6, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r7, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) capget(&(0x7f0000000040)={0x19980330}, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000002680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x0, &(0x7f0000000000)=0xf63) 2.896718076s ago: executing program 7 (id=1382): futex(&(0x7f00000002c0), 0xd, 0x2, &(0x7f0000000480), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.78515922s ago: executing program 8 (id=1383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0x4, 0x6, 0x77}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.990801435s ago: executing program 6 (id=1384): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x800, &(0x7f0000000000)={[{@delalloc}, {@barrier}, {@barrier}, {@jqfmt_vfsv1}]}, 0x1, 0x7a1, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) syz_usb_connect$uac1(0x0, 0x72, 0x0, 0x0) mlockall(0x7) 1.951885517s ago: executing program 7 (id=1385): mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, 0xffffffffffffffff, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x6, 0x20, 0x0) 640.909339ms ago: executing program 5 (id=1386): timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$eJzs3ctrXGUbAPDnTJKmTft9iSBouzEgaKA0sTW2CgoVFyJYKOjadkimoWaSCZlJaUJAiwhuBBUXgm66cuGl7tx6ATfqf+FCLFXTYsWFjJzJTDNpZtLJbSaa3w9O8r7nMs/7zLm9M+dwJoA9azD9k4k4HBHvJBH91fFJRPRUSt0Rp5fnu720OJYOSZTLL/2WVOa5tbQ4FnXLpA5WKw9GxDdvRhzNrI1bnF+YzObzudlqfaQ0NTNSnF84dnEqO5GbyE2fPD46euLUE6dObl+uf/y4cOj6u88/+vnpv9544Nrb3yZxOg5Vp9XnsWnPrK4OxmD1PelJ38JVnttysN0l6XQD2JR01+xa3svjcPRHV6UEAPyXvRYRZQBgj0mc/wFgj6l9D3BraXGsNnT2G4n2uvFsROxfzr92fXN5Snf1mt3+ynXQvlvJqisjSUQMbEP8wYj46MtXPk2H2K7rkAAteP1KRJwfGFx7/E/W3LOwUY+tM21f9f/gXePT+K5AQ3t8lfZ/nmzU/8vc6f9Eg/5Pb4N9dzMa7f+rRhzYhiDruPFxxNN197bdrsu/ohwDXdXa/yp9vp7kwsV8Lj22/T8ihqKnN60fXyfG0M2/bzabVt//+/29Vz9J46f/V+bI/NLdu3qZ8Wwpu7WsV9y4EnGku1H+yZ31nzTp/55tMcYLT731YbNpaf5pvrVhbf5RvTtpZ5SvRjzScP2v3NGWrHt/4khlcxipbRQNfPHTB33N4tev/3RI49c+C7RDuv771s9/IKm/X7O48Rg/XO3/utm0e+ffePvfl7xcKdf6EZezpdLs8Yh9yYtrx59YWfZy9qFqaXn+NP+hhxvv/+tt/+lnwvMt5t99/dfPNp//zkrzH9/Q+t944drtya5m8Vtb/6OV0lB1TCvHv1YbuJX3DgAAAAAAAAAAAAAAAAAAAAAAAABalYmIQ5Fkhu+UM5nh4eXf8L4/+jL5QrF09EJhbno8Kr+VPRA9mdqjLvvTem9EVJ9/OlD3fNQTdfX0dR+PiPsi4v3eA0ntOYrjHc4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoONvn9/9TPvZ1uHQCwY/Z3ugEAQNs5/wPA3uP8DwB7T2vn/64dbwcA0D4+/wPA3uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwA47e+ZMOpT/XFocS+vjl+bnJguXjo3nipPDU3Njw2OF2ZnhiUJhIp8bHitM3ev18oXCzGhMz10eKeWKpZHi/MK5qcLcdOncxansRO5crqctWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxhTnFyaz+XxuVmEThfLuaEbnC13VzWm3tKethWRri898/92RXZDF3YUOH5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/iX+CQAA///iziCi") chroot(0x0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0) 525.417533ms ago: executing program 7 (id=1387): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000180)='./file2\x00', 0x14018, &(0x7f0000000340)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030392c747970653dd710211b2c706172743d3078303030303030303030303030313030312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f736500000000000000033d1eeb39072c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c747970653df606a15d2c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723daf2afe272c756d61736b3d30303030303030303030303030303030303030303030362c61707072616973652c657569643c", @ANYRESDEC=0x0, @ANYBLOB=',obj_type=}}@@[/-,\x00'], 0xdf, 0x6c8, &(0x7f0000000d40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 527.55µs ago: executing program 7 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/121, 0x79}], 0x1, 0x8000, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 298.38µs ago: executing program 8 (id=1389): mount$9p_fd(0x0, 0x0, 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netstat\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) lseek(r0, 0x1000000, 0x0) 0s ago: executing program 5 (id=1390): sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000240)=0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x22048090) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x38, 0x3a, 0x1, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "29e4f3", 0x0, 0x2b, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, [], "0a06efb2988b900b"}}}}}}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): ] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.984856][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.005126][ T21] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.369394][ T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.391166][ T5724] netlink: 132 bytes leftover after parsing attributes in process `syz.2.447'. [ 175.419220][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.432664][ T21] usb 1-1: Product: syz [ 175.449630][ T21] usb 1-1: Manufacturer: syz [ 175.454265][ T21] usb 1-1: SerialNumber: syz [ 175.625938][ T5734] fuse: Bad value for 'fd' [ 175.687418][ T21] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 175.699193][ T21] cdc_ncm 1-1:1.0: bind() failure [ 175.746715][ T21] usb 1-1: USB disconnect, device number 8 [ 175.767872][ T5738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 175.879832][ T5742] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 176.817305][ T5751] device syzkaller0 entered promiscuous mode [ 178.095806][ T5775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.463'. [ 178.227653][ T5781] fuse: Bad value for 'fd' [ 178.388687][ T5783] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 178.399249][ T5783] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 178.511093][ T5792] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 180.260865][ T5803] loop4: detected capacity change from 0 to 16 [ 180.311271][ T5803] erofs: (device loop4): mounted with root inode @ nid 36. [ 180.488371][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 180.683701][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 180.759910][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 180.829772][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 180.904593][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 180.978791][ T5812] device syzkaller0 entered promiscuous mode [ 180.984953][ T1336] Bluetooth: hci3: command 0x0406 tx timeout [ 180.989031][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 180.999101][ T1336] Bluetooth: hci4: command 0x0406 tx timeout [ 181.005209][ T1336] Bluetooth: hci0: command 0x0406 tx timeout [ 181.293904][ T5814] netlink: 132 bytes leftover after parsing attributes in process `syz.4.479'. [ 181.309996][ T5820] fuse: Bad value for 'fd' [ 181.592403][ T5829] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 182.953766][ T5841] loop0: detected capacity change from 0 to 16 [ 183.061322][ T5841] erofs: (device loop0): mounted with root inode @ nid 36. [ 184.035228][ T5847] tmpfs: Unknown parameter 'usrquota' [ 184.379553][ T5863] fuse: Bad value for 'fd' [ 184.426121][ T5864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.494'. [ 184.641598][ T5871] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 185.527872][ T5877] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 186.385991][ T5900] fuse: Bad value for 'fd' [ 186.531851][ T5904] process 'syz.4.512' launched './file2' with NULL argv: empty string added [ 186.662141][ T5908] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 187.645454][ T5918] device syzkaller0 entered promiscuous mode [ 188.089091][ T4277] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.329060][ T4277] usb 5-1: Using ep0 maxpacket: 32 [ 188.489336][ T4277] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.579188][ T4277] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 188.589073][ T1336] Bluetooth: hci4: command 0x2021 tx timeout [ 188.590881][ T4277] usb 5-1: config 8 has no interface number 0 [ 188.605447][ T4277] usb 5-1: config 8 interface 188 has no altsetting 0 [ 188.849235][ T4277] usb 5-1: string descriptor 0 read error: -22 [ 188.856720][ T4277] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 188.871463][ T4277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.941718][ T4277] dw2102: su3000_identify_state [ 188.950342][ T4277] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 188.962594][ T4277] dw2102: su3000_power_ctrl: 1, initialized 0 [ 188.970856][ T4277] dvb-usb: bulk message failed: -22 (2/0) [ 189.010009][ T4277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.039305][ T4277] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 189.048033][ T4277] usb 5-1: media controller created [ 189.054031][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 189.061592][ T4277] dw2102: i2c transfer failed. [ 189.066675][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 189.072897][ T4277] dw2102: i2c transfer failed. [ 189.077806][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 189.088156][ T4277] dw2102: i2c transfer failed. [ 189.098267][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 189.105669][ T4277] dw2102: i2c transfer failed. [ 189.116680][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 189.124246][ T4277] dw2102: i2c transfer failed. [ 189.134339][ T4277] dvb-usb: bulk message failed: -22 (6/0) [ 189.142511][ T4277] dw2102: i2c transfer failed. [ 189.157772][ T4277] dvb-usb: MAC address: 02:02:02:02:02:02 [ 189.205962][ T4277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.240107][ T4277] dvb-usb: bulk message failed: -22 (3/0) [ 189.245999][ T4277] dw2102: command 0x0e transfer failed. [ 189.252278][ T4277] dvb-usb: bulk message failed: -22 (3/0) [ 189.258116][ T4277] dw2102: command 0x0e transfer failed. [ 189.398769][ T5933] fuse: Bad value for 'fd' [ 189.579162][ T4277] dvb-usb: bulk message failed: -22 (3/0) [ 189.585053][ T4277] dw2102: command 0x0e transfer failed. [ 189.591064][ T4277] dvb-usb: bulk message failed: -22 (3/0) [ 189.596839][ T4277] dw2102: command 0x0e transfer failed. [ 189.602473][ T4277] dvb-usb: bulk message failed: -22 (1/0) [ 189.608213][ T4277] dw2102: command 0x51 transfer failed. [ 189.634113][ T4277] DVB: Unable to find symbol ds3000_attach() [ 189.640225][ T4277] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 189.814375][ T5942] overlayfs: failed to resolve './bus': -2 [ 190.049069][ T4277] rc_core: IR keymap rc-su3000 not found [ 190.624617][ T4277] Registered IR keymap rc-empty [ 190.631519][ T4277] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 190.650003][ T4277] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 190.665348][ T4277] dvb-usb: schedule remote query interval to 150 msecs. [ 190.672808][ T4277] dw2102: su3000_power_ctrl: 0, initialized 1 [ 190.679240][ T4277] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 190.692748][ T4277] usb 5-1: USB disconnect, device number 10 [ 190.726646][ T4277] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 194.261259][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.720597][ T5945] device syzkaller0 entered promiscuous mode [ 195.122171][ T5957] block device autoloading is deprecated and will be removed. [ 195.136832][ T5956] md: superblock version 12389 not known [ 195.149332][ T5956] md: couldn't set array info. -22 [ 195.157862][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 195.232414][ T5956] md: could not open device unknown-block(0,0). [ 195.235803][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.238815][ T5956] md: md_import_device returned -6 [ 195.251530][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.266907][ T5949] device bridge_slave_0 entered promiscuous mode [ 195.277275][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.291707][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.304004][ T5949] device bridge_slave_1 entered promiscuous mode [ 195.337900][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.355412][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.384065][ T5949] team0: Port device team_slave_0 added [ 195.394584][ T5949] team0: Port device team_slave_1 added [ 195.413497][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.420959][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.447156][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.469836][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.498995][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.533075][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.598915][ T5949] device hsr_slave_0 entered promiscuous mode [ 195.610077][ T5949] device hsr_slave_1 entered promiscuous mode [ 195.618045][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.632855][ T5949] Cannot create hsr debugfs directory [ 195.801842][ T5949] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.812157][ T5949] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.823122][ T5949] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.833429][ T5949] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.865193][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.872498][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.880868][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.887998][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.955509][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.974825][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.018621][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.036287][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.060297][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.098767][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.114717][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.142185][ T5949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.152702][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.166874][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.177621][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.187160][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.196880][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.213172][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.225557][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.237986][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.255265][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.265462][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.280540][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.479196][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.487593][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.515719][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.725897][ T5993] overlayfs: failed to resolve './bus': -2 [ 196.838411][ T5995] fuse: Bad value for 'fd' [ 197.171700][ T1336] Bluetooth: hci5: command 0x0409 tx timeout [ 197.652039][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.670740][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.702389][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.728605][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.748917][ T5949] device veth0_vlan entered promiscuous mode [ 197.765251][ T6005] block device autoloading is deprecated and will be removed. [ 197.765463][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.800209][ T6003] md: superblock version 12389 not known [ 197.810193][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.819215][ T6003] md: couldn't set array info. -22 [ 197.834879][ T5949] device veth1_vlan entered promiscuous mode [ 197.947671][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.962077][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.986196][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.014822][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.063356][ T5949] device veth0_macvtap entered promiscuous mode [ 198.068587][ T6003] md: could not open device unknown-block(0,0). [ 198.076674][ T5949] device veth1_macvtap entered promiscuous mode [ 198.122711][ T6003] md: md_import_device returned -6 [ 198.245210][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.260647][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.270169][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.278495][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.287596][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.304226][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.317943][ T5949] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.326993][ T5949] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.337407][ T5949] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.346693][ T5949] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.381734][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.396094][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.626318][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.662436][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.719189][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.731705][ T6013] chnl_net:caif_netlink_parms(): no params data found [ 198.873535][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.895570][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.918513][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.052097][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.122606][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.180382][ T6035] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 199.183378][ T6013] device bridge_slave_0 entered promiscuous mode [ 199.244140][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.256318][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.278697][ T6013] device bridge_slave_1 entered promiscuous mode [ 199.483293][ T6045] overlayfs: failed to resolve './bus': -2 [ 199.599051][ T4263] Bluetooth: hci5: command 0x041b tx timeout [ 199.975339][ T6013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.254821][ T1336] Bluetooth: hci2: command 0x0409 tx timeout [ 200.321455][ T6013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.490092][ T6013] team0: Port device team_slave_0 added [ 200.540789][ T6013] team0: Port device team_slave_1 added [ 200.669837][ T1275] bridge0: port 3(erspan0) entered disabled state [ 200.716450][ T1275] device erspan0 left promiscuous mode [ 200.752257][ T1275] bridge0: port 3(erspan0) entered disabled state [ 200.833022][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.850275][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.942535][ T6013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.060254][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.067255][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.102427][ T6013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.248270][ T6013] device hsr_slave_0 entered promiscuous mode [ 201.255677][ T6013] device hsr_slave_1 entered promiscuous mode [ 201.262710][ T6013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.270675][ T6013] Cannot create hsr debugfs directory [ 201.626206][ T4230] Bluetooth: hci5: command 0x040f tx timeout [ 201.655046][ T6081] chnl_net:caif_netlink_parms(): no params data found [ 201.758326][ T1275] device hsr_slave_0 left promiscuous mode [ 201.774797][ T1275] device hsr_slave_1 left promiscuous mode [ 201.809457][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.841060][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.860003][ T1275] device bridge_slave_1 left promiscuous mode [ 201.866283][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.919259][ T1275] device bridge_slave_0 left promiscuous mode [ 201.925959][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.040997][ T1275] team0 (unregistering): Port device team_slave_1 removed [ 202.060381][ T1275] team0 (unregistering): Port device team_slave_0 removed [ 202.076288][ T1275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.092184][ T1275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.161543][ T1275] bond0 (unregistering): Released all slaves [ 202.283279][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.290542][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.298319][ T6081] device bridge_slave_0 entered promiscuous mode [ 202.308566][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.316126][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.324231][ T6081] device bridge_slave_1 entered promiscuous mode [ 202.339616][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 202.362515][ T6081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.382378][ T6013] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.393437][ T6013] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.413692][ T6081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.424557][ T6013] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.451589][ T6013] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.471699][ T6081] team0: Port device team_slave_0 added [ 202.511778][ T6081] team0: Port device team_slave_1 added [ 202.553836][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.562248][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.589495][ T6081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.611187][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.625088][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.652786][ T6081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.726687][ T6013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.740390][ T6081] device hsr_slave_0 entered promiscuous mode [ 202.747640][ T6081] device hsr_slave_1 entered promiscuous mode [ 202.755194][ T6081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.764129][ T6081] Cannot create hsr debugfs directory [ 202.785746][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.803298][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.830010][ T6013] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.863221][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.891089][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.919404][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.926561][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.944991][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.962198][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.979124][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 202.985965][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.003688][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.010854][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.061371][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.080824][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.128830][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.140209][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.160622][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.178047][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.188221][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.205476][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.223942][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.242702][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.260501][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.436558][ T6081] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 203.463127][ T6081] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 203.491545][ T6081] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 203.509545][ T6081] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 203.630496][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.654917][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.703413][ T6013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.710729][ T4273] Bluetooth: hci5: command 0x0419 tx timeout [ 203.743353][ T6081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.767559][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.798399][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.810211][ T6081] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.841863][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.855944][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.891024][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.898292][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.929914][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.962102][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.979336][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.004576][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.011873][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.046152][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.080760][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.100960][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.121588][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.134235][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.154124][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.166772][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.203048][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.227762][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.252773][ T6081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.281280][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.295136][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.304302][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.419417][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 204.472575][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.483392][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.515508][ T6013] device veth0_vlan entered promiscuous mode [ 204.570630][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.580394][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.595771][ T6013] device veth1_vlan entered promiscuous mode [ 204.640366][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.648188][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.689838][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.746303][ T6013] device veth0_macvtap entered promiscuous mode [ 204.791865][ T6013] device veth1_macvtap entered promiscuous mode [ 204.819301][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.828040][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.849860][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.869767][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.891020][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.898604][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.937809][ T6081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.946201][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.958602][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.999143][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.030725][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.043818][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.059687][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.071151][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 205.092355][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.126031][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.143612][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.167152][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.189787][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.201956][ T6013] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.239003][ T6013] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.247747][ T6013] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.269055][ T6013] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.480075][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.487943][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.532077][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.559731][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.575462][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.592021][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.649141][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.657830][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.723554][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.749906][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.761186][ T6081] device veth0_vlan entered promiscuous mode [ 205.785231][ T6081] device veth1_vlan entered promiscuous mode [ 205.810378][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.818834][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.839758][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.877287][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.920371][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.948450][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.966732][ T6081] device veth0_macvtap entered promiscuous mode [ 205.984440][ T6081] device veth1_macvtap entered promiscuous mode [ 206.012713][ T6177] device syzkaller0 entered promiscuous mode [ 206.240291][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.251850][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.263664][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.276703][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.287978][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.306420][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 206.315111][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 206.323892][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.332771][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.342742][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.353801][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.366792][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.377565][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.390603][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.404241][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.414226][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.431371][ T6081] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.474486][ T6081] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.492689][ T6081] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.499484][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 206.513312][ T6081] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.557851][ T1275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.570860][ T6190] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 206.948021][ T1275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.308054][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 207.369738][ T1275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.108268][ T6210] fuse: Bad value for 'fd' [ 208.434775][ T1275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.579327][ T21] Bluetooth: hci2: command 0x0405 tx timeout [ 208.837232][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.892958][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.344754][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.380421][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 209.681025][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.707057][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.737720][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.122012][ T6257] block device autoloading is deprecated and will be removed. [ 210.177803][ T6253] md: superblock version 12389 not known [ 210.195009][ T6253] md: couldn't set array info. -22 [ 210.227161][ T6259] fuse: Bad value for 'fd' [ 210.277717][ T1275] bridge0: port 3(erspan0) entered disabled state [ 210.312414][ T1275] device erspan0 left promiscuous mode [ 210.353201][ T1275] bridge0: port 3(erspan0) entered disabled state [ 210.461771][ T6257] md: could not open device unknown-block(0,0). [ 210.478871][ T6257] md: md_import_device returned -6 [ 211.388405][ T4201] Bluetooth: hci1: hcon ffff888018dca000 sent 1 < count 256 [ 211.396279][ T4201] Bluetooth: hci1: hcon ffff888018dca000 sent 0 < count 7 [ 211.473122][ T1275] device hsr_slave_0 left promiscuous mode [ 211.676338][ T1275] device hsr_slave_1 left promiscuous mode [ 211.687585][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.697274][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.736499][ T1275] device bridge_slave_1 left promiscuous mode [ 211.808658][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.915876][ T1275] device bridge_slave_0 left promiscuous mode [ 211.926217][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.949218][ T6309] binder: 6297:6309 unknown command 0 [ 211.967520][ T6309] binder: 6297:6309 ioctl c0306201 200000000480 returned -22 [ 212.414175][ T1275] team0 (unregistering): Port device team_slave_1 removed [ 212.435830][ T1275] team0 (unregistering): Port device team_slave_0 removed [ 212.468567][ T1275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.489807][ T1275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.566859][ T1275] bond0 (unregistering): Released all slaves [ 212.636870][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.651892][ T6321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.832554][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 212.893624][ T6346] block device autoloading is deprecated and will be removed. [ 212.949625][ T6338] md: superblock version 12389 not known [ 212.979953][ T6350] fuse: Bad value for 'fd' [ 213.007653][ T6338] md: couldn't set array info. -22 [ 213.110610][ T6354] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 213.174666][ T6347] device syzkaller0 entered promiscuous mode [ 213.286234][ T6338] md: could not open device unknown-block(0,0). [ 213.297646][ T6338] md: md_import_device returned -6 [ 213.311285][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.7.601'. [ 213.459457][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 213.494315][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.604'. [ 213.690789][ T6380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.698849][ T6380] IPv6: NLM_F_CREATE should be set when creating new route [ 214.175827][ T6399] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 214.472081][ T6412] block device autoloading is deprecated and will be removed. [ 214.511057][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.559477][ T6405] md: superblock version 12389 not known [ 214.569820][ T6405] md: couldn't set array info. -22 [ 214.578681][ T6413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.682377][ T6422] fuse: Bad value for 'fd' [ 214.751382][ T6425] 9pnet_virtio: no channels available for device syz [ 214.814727][ T6405] md: could not open device unknown-block(0,0). [ 214.829347][ T4263] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 214.837183][ T6405] md: md_import_device returned -6 [ 215.249193][ T4263] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.277672][ T4263] usb 5-1: config 0 has no interfaces? [ 215.304153][ T4263] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 215.350031][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.395503][ T4263] usb 5-1: config 0 descriptor?? [ 215.479983][ T6452] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 215.626900][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 216.070693][ T6479] binder: BINDER_SET_CONTEXT_MGR already set [ 216.088397][ T6479] binder: 6478:6479 ioctl 4018620d 200000004a80 returned -16 [ 216.307082][ T6490] fuse: Bad value for 'fd' [ 216.829098][ T7] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 216.971563][ T6512] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 217.129374][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 217.259179][ T7] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 217.358638][ T7] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.438747][ T7] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.585803][ T7] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.740933][ T7] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.788271][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.813071][ T4231] usb 5-1: USB disconnect, device number 11 [ 217.882047][ T7] usbtmc 8-1:16.0: bulk endpoints not found [ 217.950821][ T1111] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 217.969056][ T1111] Bluetooth: hci2: Injecting HCI hardware error event [ 217.998809][ T4198] Bluetooth: hci2: hardware error 0x00 [ 218.074967][ T4263] usb 8-1: USB disconnect, device number 2 [ 218.089033][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 218.329178][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 218.449386][ T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.477060][ T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.512019][ T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.536341][ T7] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.569014][ T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.626931][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.714441][ T6551] fuse: Bad value for 'fd' [ 218.909177][ T7] usb 6-1: GET_CAPABILITIES returned 0 [ 218.914827][ T7] usbtmc 6-1:16.0: can't read capabilities [ 219.129066][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 219.141602][ T4263] usb 6-1: USB disconnect, device number 2 [ 219.323737][ T6564] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 219.399067][ T4273] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 220.449269][ T1111] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 220.477362][ T4273] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 220.487321][ T4273] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.501835][ T4273] usb 8-1: config 0 has no interfaces? [ 220.508200][ T4273] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 220.521056][ T4273] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.547627][ T4273] usb 8-1: config 0 descriptor?? [ 220.819096][ T21] usb 8-1: USB disconnect, device number 3 [ 220.896850][ T1111] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.925083][ T1111] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.959033][ T1111] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.968183][ T1111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.009602][ T6608] fuse: Bad value for 'fd' [ 221.169124][ T4273] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 221.276577][ T1111] usb 7-1: usb_control_msg returned -32 [ 221.282752][ T1111] usbtmc 7-1:16.0: can't read capabilities [ 221.359031][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 221.469239][ T4273] usb 5-1: Using ep0 maxpacket: 8 [ 221.609097][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 221.609418][ T4273] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 221.689283][ T6629] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 221.744087][ T4273] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.012204][ T4273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.149969][ T4273] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 222.354252][ T4273] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.488584][ T4273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.559120][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.578433][ T1111] usb 7-1: USB disconnect, device number 2 [ 222.579187][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.601283][ T4273] usbtmc 5-1:16.0: bulk endpoints not found [ 222.604767][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.639691][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.700995][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.729011][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.888417][ T1336] usb 5-1: USB disconnect, device number 12 [ 223.009153][ T13] usb 2-1: GET_CAPABILITIES returned 0 [ 223.036605][ T13] usbtmc 2-1:16.0: can't read capabilities [ 223.309117][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.323181][ T4273] usb 2-1: USB disconnect, device number 7 [ 223.972461][ T6679] 9pnet_virtio: no channels available for device syz [ 224.004383][ T6675] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 224.011401][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 224.020020][ T13] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 224.029347][ T6682] fuse: Bad value for 'fd' [ 224.072862][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 224.339570][ T1336] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 224.381487][ T6686] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 224.400133][ T13] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 224.412574][ T13] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.431704][ T13] usb 7-1: config 0 has no interfaces? [ 224.437497][ T13] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 224.447082][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.461150][ T13] usb 7-1: config 0 descriptor?? [ 224.554943][ T6678] vhci_hcd: connection reset by peer [ 224.573312][ T145] vhci_hcd: stop threads [ 224.589952][ T145] vhci_hcd: release socket [ 224.655417][ T145] vhci_hcd: disconnect device [ 224.735240][ T4273] usb 7-1: USB disconnect, device number 3 [ 225.309103][ T1108] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 225.449065][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 225.469271][ T1111] Bluetooth: hci0: command 0x1407 tx timeout [ 225.534104][ T6743] 9pnet_virtio: no channels available for device syz [ 225.569312][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 225.729049][ T13] usb 6-1: Using ep0 maxpacket: 8 [ 225.739496][ T1108] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.764974][ T1108] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.776375][ T6749] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 225.793254][ T1108] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.803728][ T1108] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.817434][ T1108] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.869130][ T13] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 225.880647][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.888737][ T13] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.919328][ T13] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.935331][ T13] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 226.011343][ T13] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.037909][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.057042][ T6758] fuse: Bad value for 'fd' [ 226.090999][ T13] usbtmc 6-1:16.0: bulk endpoints not found [ 226.179352][ T1108] usb 5-1: GET_CAPABILITIES returned 0 [ 226.186992][ T1108] usbtmc 5-1:16.0: can't read capabilities [ 226.349011][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.361877][ T1108] usb 6-1: USB disconnect, device number 3 [ 226.367849][ T6766] netlink: 64 bytes leftover after parsing attributes in process `syz.1.707'. [ 226.439005][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.450139][ T4273] usb 5-1: USB disconnect, device number 13 [ 227.096127][ T6797] fuse: Bad value for 'fd' [ 227.419096][ T4192] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 227.789219][ T4192] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 227.805107][ T4192] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.826063][ T4192] usb 6-1: config 0 has no interfaces? [ 227.838534][ T4192] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 227.847990][ T4192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.887655][ T4192] usb 6-1: config 0 descriptor?? [ 227.892602][ T6820] device syzkaller1 entered promiscuous mode [ 228.222431][ T21] usb 6-1: USB disconnect, device number 4 [ 228.323220][ T6833] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 228.375556][ T6844] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 228.451739][ T6847] xt_hashlimit: size too large, truncated to 1048576 [ 229.004142][ T6870] fuse: Bad value for 'fd' [ 229.059736][ T1108] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 229.319028][ T1108] usb 7-1: Using ep0 maxpacket: 8 [ 229.337848][ T6881] device syzkaller1 entered promiscuous mode [ 229.439265][ T1108] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 229.455267][ T1108] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.465921][ T1336] vhci_hcd: vhci_device speed not set [ 229.489769][ T1108] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.509995][ T1108] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 229.538081][ T1108] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.549208][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.600268][ T1108] usbtmc 7-1:16.0: bulk endpoints not found [ 229.636128][ T6888] IPVS: Error connecting to the multicast addr [ 229.827470][ T1108] usb 7-1: USB disconnect, device number 4 [ 230.129061][ T4273] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 230.156535][ T6898] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 230.429092][ T4273] usb 2-1: Using ep0 maxpacket: 8 [ 230.580743][ T4273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.621669][ T4273] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.810755][ T4277] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 230.818738][ T4273] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 230.844103][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.854515][ T6916] device syzkaller0 entered promiscuous mode [ 230.864836][ T4273] usb 2-1: Product: syz [ 230.878360][ T4273] usb 2-1: Manufacturer: syz [ 230.894155][ T4273] usb 2-1: SerialNumber: syz [ 230.960382][ T4273] usb 2-1: bad CDC descriptors [ 230.967485][ T4273] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 230.995462][ T4273] usbtest: probe of 2-1:1.0 failed with error -22 [ 231.219785][ T4277] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 231.254015][ T4277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.289127][ T4277] usb 5-1: config 0 has no interfaces? [ 231.294675][ T4277] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 231.339151][ T4277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.362406][ T1108] usb 2-1: USB disconnect, device number 8 [ 231.429925][ T4277] usb 5-1: config 0 descriptor?? [ 231.716934][ T4277] usb 5-1: USB disconnect, device number 14 [ 231.893853][ T6941] fuse: Bad value for 'fd' [ 231.999760][ T6946] IPVS: Error connecting to the multicast addr [ 232.560236][ T6950] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 232.678517][ T6954] device syzkaller0 entered promiscuous mode [ 233.231945][ T1108] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 233.290810][ T6984] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 233.439196][ T6993] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 233.510236][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 233.622271][ T7003] fuse: Bad value for 'fd' [ 233.629596][ T1108] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 233.647839][ T1108] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.660665][ T7002] overlayfs: failed to clone upperpath [ 233.670723][ T1108] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.689625][ T1108] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 233.703872][ T1108] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.717098][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.739334][ T7007] device syzkaller0 entered promiscuous mode [ 233.770488][ T1108] usbtmc 2-1:16.0: bulk endpoints not found [ 233.961532][ T7014] overlayfs: failed to clone upperpath [ 234.011616][ T1108] usb 2-1: USB disconnect, device number 9 [ 234.494364][ T7045] device syzkaller0 entered promiscuous mode [ 234.631386][ T7053] overlayfs: failed to clone upperpath [ 234.781877][ T7062] 9pnet_virtio: no channels available for device syz [ 235.179308][ T7080] fuse: Bad value for 'fd' [ 235.528632][ T7091] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 235.648212][ T7095] device syzkaller0 entered promiscuous mode [ 236.349173][ T4273] Bluetooth: hci3: command 0x1003 tx timeout [ 236.377774][ T4201] Bluetooth: hci3: sending frame failed (-49) [ 236.565712][ T7123] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 236.846160][ T7127] device syzkaller0 entered promiscuous mode [ 236.874307][ T7131] fuse: Bad value for 'fd' [ 237.079560][ T7135] 9pnet_virtio: no channels available for device syz [ 237.164021][ T7139] netlink: 'syz.7.808': attribute type 29 has an invalid length. [ 237.209421][ T7139] netlink: 'syz.7.808': attribute type 29 has an invalid length. [ 237.240406][ T7139] netlink: 'syz.7.808': attribute type 29 has an invalid length. [ 237.253593][ T7139] netlink: 548 bytes leftover after parsing attributes in process `syz.7.808'. [ 237.683414][ T7158] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 237.877433][ T7167] overlayfs: failed to clone upperpath [ 238.419528][ T1111] Bluetooth: hci3: command 0x1001 tx timeout [ 238.425659][ T4201] Bluetooth: hci3: sending frame failed (-49) [ 239.013928][ T7215] fuse: Bad value for 'fd' [ 239.538190][ T7232] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 239.588650][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 239.598668][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 239.606278][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.616348][ T4201] Workqueue: hci1 hci_rx_work [ 239.621052][ T4201] Call Trace: [ 239.624657][ T4201] [ 239.627614][ T4201] dump_stack_lvl+0x188/0x250 [ 239.632333][ T4201] ? show_regs_print_info+0x20/0x20 [ 239.637554][ T4201] ? load_image+0x400/0x400 [ 239.642076][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 239.647195][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 239.651881][ T4201] ? worker_thread+0xaa6/0x1290 [ 239.656740][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 239.661950][ T4201] kobject_add_internal+0x6e0/0xd90 [ 239.667251][ T4201] kobject_add+0x160/0x230 [ 239.671764][ T4201] ? kobject_init+0x1d0/0x1d0 [ 239.676453][ T4201] ? klist_children_get+0x50/0x50 [ 239.681497][ T4201] ? get_device_parent+0x121/0x3f0 [ 239.686617][ T4201] device_add+0x48c/0x1000 [ 239.691045][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 239.695999][ T4201] hci_conn_complete_evt+0x5fd/0x1470 [ 239.701383][ T4201] ? hci_inquiry_result_evt+0x420/0x420 [ 239.706932][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 239.712917][ T4201] ? lock_chain_count+0x20/0x20 [ 239.717964][ T4201] ? __rwlock_init+0x140/0x140 [ 239.722731][ T4201] hci_event_packet+0x903/0x1370 [ 239.727927][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 239.733132][ T4201] ? rcu_lock_release+0x20/0x20 [ 239.737986][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 239.743185][ T4201] hci_rx_work+0x255/0xa10 [ 239.747623][ T4201] process_one_work+0x85f/0x1010 [ 239.752578][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 239.758297][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 239.763590][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 239.768620][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 239.774173][ T4201] ? wq_worker_running+0x97/0x170 [ 239.779204][ T4201] worker_thread+0xaa6/0x1290 [ 239.784244][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 239.789452][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 239.795369][ T4201] kthread+0x436/0x520 [ 239.799449][ T4201] ? rcu_lock_release+0x20/0x20 [ 239.804393][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 239.808983][ T4201] ret_from_fork+0x1f/0x30 [ 239.813419][ T4201] [ 239.829440][ T4201] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 239.843766][ T4201] Bluetooth: hci1: failed to register connection device [ 239.978362][ T7239] device syzkaller0 entered promiscuous mode [ 239.979053][ T1108] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 240.024742][ T7245] binder: 7243:7245 ioctl c0306201 200000000080 returned -14 [ 240.318669][ T7265] fuse: Bad value for 'fd' [ 240.349414][ T1108] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.364179][ T1108] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.388189][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.402707][ T1108] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 240.412918][ T7268] overlayfs: failed to clone upperpath [ 240.419603][ T1108] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 240.509297][ T1111] Bluetooth: hci3: command 0x1009 tx timeout [ 240.549316][ T1108] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.559029][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.573485][ T1108] usb 5-1: Product: syz [ 240.577761][ T1108] usb 5-1: Manufacturer: syz [ 240.620509][ T1108] cdc_wdm 5-1:1.0: skipping garbage [ 240.626903][ T1108] cdc_wdm 5-1:1.0: skipping garbage [ 240.635445][ T7280] netlink: 76 bytes leftover after parsing attributes in process `syz.7.846'. [ 240.640974][ T1108] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 240.657139][ T1108] cdc_wdm 5-1:1.0: Unknown control protocol [ 240.774208][ T7288] netlink: 'syz.7.848': attribute type 7 has an invalid length. [ 241.199987][ T7311] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 241.419050][ T1336] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 241.680574][ T1111] usb 5-1: USB disconnect, device number 15 [ 241.779429][ T1336] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 241.787565][ T1336] usb 2-1: config 0 has no interface number 0 [ 241.794146][ T1336] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.859363][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 241.959273][ T1336] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 241.968387][ T1336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.976907][ T1336] usb 2-1: Product: syz [ 241.981903][ T1336] usb 2-1: Manufacturer: syz [ 241.987219][ T1336] usb 2-1: SerialNumber: syz [ 241.994311][ T1336] usb 2-1: config 0 descriptor?? [ 242.042618][ T1336] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 242.248101][ T4273] usb 2-1: USB disconnect, device number 10 [ 242.267715][ T7354] overlayfs: failed to clone upperpath [ 242.282438][ T4273] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 242.387024][ T7364] netlink: 76 bytes leftover after parsing attributes in process `syz.4.857'. [ 242.748766][ T7379] device syzkaller0 entered promiscuous mode [ 242.868814][ T7384] bridge0: port 3(erspan0) entered blocking state [ 242.875489][ T7384] bridge0: port 3(erspan0) entered forwarding state [ 242.886120][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.897350][ T7384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.906591][ T7384] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.916317][ T7384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.949644][ T7388] fuse: Bad value for 'fd' [ 243.126401][ T7390] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 243.135368][ T7390] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 243.299763][ T1111] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 243.354914][ T7408] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 243.620492][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.714148][ T1111] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.729997][ T1111] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 243.746827][ T1111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.758471][ T1111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 243.778108][ T1111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 243.939282][ T1336] Bluetooth: hci1: command 0x040f tx timeout [ 243.939563][ T1111] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.955215][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.963601][ T1111] usb 2-1: Product: syz [ 243.967831][ T1111] usb 2-1: Manufacturer: syz [ 244.020773][ T1111] cdc_wdm 2-1:1.0: skipping garbage [ 244.033633][ T1111] cdc_wdm 2-1:1.0: skipping garbage [ 244.050325][ T1111] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 244.056280][ T1111] cdc_wdm 2-1:1.0: Unknown control protocol [ 244.934301][ T7491] overlayfs: failed to clone upperpath [ 244.941472][ T7495] netlink: 76 bytes leftover after parsing attributes in process `syz.5.870'. [ 244.988028][ T7499] input: syz1 as /devices/virtual/input/input7 [ 245.082971][ T1336] usb 2-1: USB disconnect, device number 11 [ 245.331082][ T7513] device syzkaller0 entered promiscuous mode [ 245.517188][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.534850][ T7523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.727531][ T7537] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 245.857573][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 245.902680][ T7544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.918482][ T7544] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.941014][ T7544] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.961847][ T7544] device geneve2 entered promiscuous mode [ 245.978287][ T7547] netlink: 76 bytes leftover after parsing attributes in process `syz.1.886'. [ 246.169240][ T7565] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 246.175986][ T7565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.230515][ T7565] vhci_hcd vhci_hcd.0: Device attached [ 246.509190][ T1108] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 246.708208][ T7596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.730048][ T1111] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 246.744485][ T7596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.766775][ T7596] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.815205][ T7596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.954985][ T7569] vhci_hcd: connection reset by peer [ 246.961798][ T145] vhci_hcd: stop threads [ 246.966083][ T145] vhci_hcd: release socket [ 246.979222][ T145] vhci_hcd: disconnect device [ 247.169404][ T1111] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 247.188597][ T1111] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 247.216860][ T1111] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 247.236782][ T1111] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 247.269529][ T1111] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 247.279173][ T1336] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 247.339363][ T4263] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 247.356649][ T7633] overlayfs: failed to clone upperpath [ 247.439536][ T1111] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 247.459112][ T1111] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 247.467679][ T1111] usb 7-1: Product: syz [ 247.477697][ T1111] usb 7-1: Manufacturer: syz [ 247.533947][ T1336] usb 2-1: Using ep0 maxpacket: 8 [ 247.552506][ T1111] cdc_wdm 7-1:1.0: skipping garbage [ 247.562757][ T1111] cdc_wdm 7-1:1.0: skipping garbage [ 247.576688][ T1111] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 247.587691][ T1111] cdc_wdm 7-1:1.0: Unknown control protocol [ 247.666312][ T1336] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 247.676467][ T1336] usb 2-1: config 179 has no interface number 0 [ 247.690923][ T1336] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 247.707759][ T1336] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 247.727167][ T4263] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 247.735548][ T1336] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 247.754413][ T4263] usb 5-1: config 0 has no interface number 0 [ 247.761987][ T4263] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.781503][ T1336] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 247.797922][ T1336] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 247.811685][ T1336] usb 2-1: config 179 interface 65 has no altsetting 0 [ 247.818572][ T1336] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 247.827737][ T1336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.880076][ T1336] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 247.949328][ T4263] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 247.966299][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.975317][ T4263] usb 5-1: Product: syz [ 247.979917][ T4263] usb 5-1: Manufacturer: syz [ 247.984564][ T4263] usb 5-1: SerialNumber: syz [ 247.992078][ T4263] usb 5-1: config 0 descriptor?? [ 248.033995][ T4263] yurex 5-1:0.50: USB YUREX device now attached to Yurex #1 [ 248.089885][ T4263] usb 2-1: USB disconnect, device number 12 [ 248.109536][ T4263] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 248.259908][ T1336] usb 5-1: USB disconnect, device number 16 [ 248.271302][ T1336] yurex 5-1:0.50: USB YUREX #1 now disconnected [ 248.594846][ T4277] usb 7-1: USB disconnect, device number 5 [ 249.188604][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.216316][ T7667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.279258][ T7669] netlink: 76 bytes leftover after parsing attributes in process `syz.6.902'. [ 249.409195][ T4273] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 249.526982][ T7675] device syzkaller0 entered promiscuous mode [ 249.543629][ T7682] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 249.820283][ T4273] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 249.828405][ T4273] usb 6-1: config 0 has no interface number 0 [ 249.834772][ T4273] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.009343][ T4273] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 250.018809][ T4273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.027577][ T4273] usb 6-1: Product: syz [ 250.032000][ T4273] usb 6-1: Manufacturer: syz [ 250.036619][ T4273] usb 6-1: SerialNumber: syz [ 250.050611][ T4273] usb 6-1: config 0 descriptor?? [ 250.103134][ T4273] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 250.314757][ T4273] usb 6-1: USB disconnect, device number 5 [ 250.346778][ T4273] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 250.921214][ T7694] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 251.179335][ T4273] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 251.551253][ T7713] device syzkaller0 entered promiscuous mode [ 251.609377][ T4273] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.618084][ T4273] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 251.619033][ T1108] vhci_hcd: vhci_device speed not set [ 251.655558][ T4273] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 251.673330][ T4273] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 251.691049][ T4273] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 251.819539][ T4273] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.839774][ T4273] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 251.856309][ T4273] usb 6-1: Product: syz [ 251.863771][ T7722] loop1: detected capacity change from 0 to 512 [ 251.870629][ T1111] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 251.878559][ T4273] usb 6-1: Manufacturer: syz [ 251.910885][ T7722] ======================================================= [ 251.910885][ T7722] WARNING: The mand mount option has been deprecated and [ 251.910885][ T7722] and is ignored by this kernel. Remove the mand [ 251.910885][ T7722] option from the mount to silence this warning. [ 251.910885][ T7722] ======================================================= [ 251.946021][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.960125][ T4273] cdc_wdm 6-1:1.0: skipping garbage [ 251.966697][ T4273] cdc_wdm 6-1:1.0: skipping garbage [ 251.992283][ T4273] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 252.007293][ T7722] EXT4-fs (loop1): Ignoring removed bh option [ 252.021085][ T4273] cdc_wdm 6-1:1.0: Unknown control protocol [ 252.027139][ T7722] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 252.045028][ T7722] EXT4-fs (loop1): Ignoring removed bh option [ 252.055335][ T7722] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.117722][ T7722] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,mblk_io_submit,grpquota,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 252.140850][ T7722] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.256590][ T7727] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 252.263161][ T7727] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 252.272354][ T7727] vhci_hcd vhci_hcd.0: Device attached [ 252.349627][ T1111] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 252.358034][ T1111] usb 7-1: config 0 has no interface number 0 [ 252.376286][ T1111] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.539091][ T1336] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 252.550240][ T7728] vhci_hcd: connection closed [ 252.551936][ T9] vhci_hcd: stop threads [ 252.572231][ T9] vhci_hcd: release socket [ 252.578227][ T9] vhci_hcd: disconnect device [ 252.589455][ T1111] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 252.598671][ T1111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.614708][ T1111] usb 7-1: Product: syz [ 252.616755][ T7734] loop4: detected capacity change from 0 to 2048 [ 252.620539][ T1111] usb 7-1: Manufacturer: syz [ 252.636351][ T1111] usb 7-1: SerialNumber: syz [ 252.645083][ T1111] usb 7-1: config 0 descriptor?? [ 252.692808][ T1111] yurex 7-1:0.50: USB YUREX device now attached to Yurex #1 [ 252.715123][ T7734] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 252.931552][ T1108] usb 7-1: USB disconnect, device number 6 [ 252.960110][ T1108] yurex 7-1:0.50: USB YUREX #1 now disconnected [ 253.022452][ T4192] usb 6-1: USB disconnect, device number 6 [ 253.132749][ T7740] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 254.058068][ T7751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.938'. [ 254.245615][ T7755] loop1: detected capacity change from 0 to 512 [ 254.302679][ T7758] loop4: detected capacity change from 0 to 256 [ 254.391087][ T7755] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 254.455050][ T7755] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 254.651078][ T7755] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 254.682256][ T7766] device syzkaller0 entered promiscuous mode [ 254.897270][ T26] audit: type=1800 audit(1780386396.416:3): pid=7769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.939" name="file1" dev="loop4" ino=1048635 res=0 errno=0 [ 255.127834][ T4273] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 255.144097][ T4273] Bluetooth: hci4: Injecting HCI hardware error event [ 255.145895][ T7755] EXT4-fs (loop1): 1 truncate cleaned up [ 255.168662][ T4201] Bluetooth: hci4: hardware error 0x00 [ 255.193555][ T7755] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 255.217847][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.705678][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.579272][ T4188] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /213/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.589749][ T7778] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 256.607720][ T7778] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.615269][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.639080][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 256.659961][ T7778] vhci_hcd vhci_hcd.0: Device attached [ 256.666800][ T4188] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 256.719768][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 256.726713][ T4188] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /213/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.748280][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.759421][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 256.766513][ T4188] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 256.789327][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 256.796868][ T4188] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /213/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.818381][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.849012][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 256.869609][ T4188] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 256.920050][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 256.926982][ T4188] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /213/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.948536][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.960709][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 256.967687][ T4188] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 257.106223][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 257.147787][ T4188] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /213/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 257.438477][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 257.583140][ T7784] vhci_hcd: connection closed [ 257.583782][ T1275] vhci_hcd: stop threads [ 257.604058][ T4188] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 257.682940][ T1275] vhci_hcd: release socket [ 257.707906][ T1275] vhci_hcd: disconnect device [ 257.748909][ T1108] vhci_hcd: vhci_device speed not set [ 257.769207][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 258.458657][ T1336] vhci_hcd: vhci_device speed not set [ 258.477308][ T7795] loop5: detected capacity change from 0 to 2048 [ 258.623600][ T7805] loop6: detected capacity change from 0 to 1024 [ 258.649982][ T7795] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 259.442641][ T7824] loop4: detected capacity change from 0 to 2048 [ 259.499308][ T7827] device syzkaller0 entered promiscuous mode [ 259.518100][ T7824] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 260.710123][ T13] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 261.079788][ T13] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 261.143443][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.384145][ T13] usb 7-1: config 0 descriptor?? [ 261.580548][ T13] cp210x 7-1:0.0: cp210x converter detected [ 261.700876][ T7845] loop5: detected capacity change from 0 to 2048 [ 261.749445][ T7851] loop4: detected capacity change from 0 to 512 [ 261.798425][ T7845] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 261.866871][ T7845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.904923][ T7851] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 261.953861][ T7851] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.124599][ T26] audit: type=1800 audit(1780386403.646:4): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.966" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 262.239247][ T13] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 262.255549][ T13] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 262.287876][ T156] bridge0: port 3(erspan0) entered disabled state [ 262.302941][ T156] device erspan0 left promiscuous mode [ 262.331186][ T13] usb 7-1: cp210x converter now attached to ttyUSB0 [ 262.359912][ T156] bridge0: port 3(erspan0) entered disabled state [ 262.365981][ T13] usb 7-1: USB disconnect, device number 7 [ 262.406850][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 262.442764][ T13] cp210x 7-1:0.0: device disconnected [ 262.494940][ T7873] loop5: detected capacity change from 0 to 2048 [ 262.682294][ T7873] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 262.688489][ T7878] device syzkaller0 entered promiscuous mode [ 263.648185][ T7890] loop6: detected capacity change from 0 to 128 [ 264.472503][ T7890] EXT4-fs (loop6): mounted filesystem without journal. Opts: noquota,max_batch_time=0x0000000001000004,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 264.549383][ T7894] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 264.568815][ T7890] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 264.602106][ T4273] Bluetooth: hci0: command 0x0409 tx timeout [ 264.675655][ T7890] EXT4-fs error (device loop6): make_indexed_dir:2333: inode #2: block 18: comm syz.6.977: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 264.762402][ T156] device hsr_slave_0 left promiscuous mode [ 264.784587][ T156] device hsr_slave_1 left promiscuous mode [ 266.078721][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.129086][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.152968][ T156] device bridge_slave_1 left promiscuous mode [ 266.163351][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.357129][ T7919] loop6: detected capacity change from 0 to 512 [ 266.368120][ T156] device bridge_slave_0 left promiscuous mode [ 266.381639][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.412422][ T7919] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 266.483654][ T7919] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 266.514996][ T7919] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.615048][ T7919] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 266.670854][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 266.811866][ T7932] loop6: detected capacity change from 0 to 512 [ 266.834274][ T7932] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 266.906026][ T7932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e01c, mo2=0102] [ 266.916050][ T7932] System zones: 1-12 [ 266.934184][ T7932] EXT4-fs (loop6): orphan cleanup on readonly fs [ 266.958598][ T7932] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.984: bg 0: block 361: padding at end of block bitmap is not set [ 267.035110][ T156] team0 (unregistering): Port device team_slave_1 removed [ 267.047490][ T7932] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 267.062418][ T7932] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.984: invalid indirect mapped block 1358954509 (level 0) [ 267.098635][ T7932] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.984: invalid indirect mapped block 2 (level 2) [ 267.120530][ T156] team0 (unregistering): Port device team_slave_0 removed [ 267.167885][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.179206][ T7932] EXT4-fs (loop6): 1 truncate cleaned up [ 267.184888][ T7932] EXT4-fs (loop6): mounted filesystem without journal. Opts: abort,auto_da_alloc,discard,grpid,lazytime,errors=continue. Quota mode: none. [ 267.208622][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.416811][ T156] bond0 (unregistering): Released all slaves [ 267.606163][ T7874] chnl_net:caif_netlink_parms(): no params data found [ 267.715751][ T7944] device syzkaller0 entered promiscuous mode [ 268.237709][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.277219][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.310240][ T7874] device bridge_slave_0 entered promiscuous mode [ 268.345601][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.376270][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.404887][ T7874] device bridge_slave_1 entered promiscuous mode [ 268.448428][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.486802][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.541552][ T7874] team0: Port device team_slave_0 added [ 268.570794][ T7874] team0: Port device team_slave_1 added [ 268.593706][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.602210][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.629866][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.659610][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.666993][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.694084][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.739124][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 268.788340][ T7874] device hsr_slave_0 entered promiscuous mode [ 268.795570][ T7874] device hsr_slave_1 entered promiscuous mode [ 268.802822][ T7874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.811528][ T7874] Cannot create hsr debugfs directory [ 269.123934][ T7874] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 269.200824][ T7874] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 269.280513][ T7874] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 269.310937][ T7874] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 269.660762][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.740667][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.749499][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.801094][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.880979][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.907454][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.918077][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.925205][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.993305][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.016392][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.026369][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.042685][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.049949][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.061083][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.080502][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.103256][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.142162][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.172121][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.198562][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.221858][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.269812][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.305375][ T7874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.327220][ T7874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.354593][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.365538][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.380193][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.780688][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.788158][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.819112][ T1336] Bluetooth: hci0: command 0x0419 tx timeout [ 270.859572][ T8005] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 271.240929][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.762137][ T8023] loop4: detected capacity change from 0 to 256 [ 272.853570][ T26] audit: type=1326 audit(1780386414.376:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.7.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865b043e59 code=0x7ffc0000 [ 272.904327][ T8023] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 272.963644][ T26] audit: type=1326 audit(1780386414.426:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.7.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865b043e59 code=0x7ffc0000 [ 273.033504][ T26] audit: type=1326 audit(1780386414.426:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.7.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865b043e59 code=0x7ffc0000 [ 273.156114][ T26] audit: type=1326 audit(1780386414.426:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.7.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f865b00468e code=0x7ffc0000 [ 273.287588][ T26] audit: type=1326 audit(1780386414.426:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.7.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865b043e59 code=0x7ffc0000 [ 273.341741][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.362546][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.421512][ T26] audit: type=1326 audit(1780386414.436:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.7.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f865b043e59 code=0x7ffc0000 [ 273.461873][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.491397][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.552001][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.569366][ T26] audit: type=1326 audit(1780386414.436:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.7.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f865b043e59 code=0x7ffc0000 [ 273.598431][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.631959][ T7874] device veth0_vlan entered promiscuous mode [ 273.728801][ T7874] device veth1_vlan entered promiscuous mode [ 273.735150][ T26] audit: type=1326 audit(1780386414.436:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.7.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865b043e59 code=0x7ffc0000 [ 273.948698][ T8060] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 274.742710][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.760660][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.839397][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.047711][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.402960][ T7874] device veth0_macvtap entered promiscuous mode [ 275.416228][ T8083] loop6: detected capacity change from 0 to 512 [ 275.456439][ T7874] device veth1_macvtap entered promiscuous mode [ 275.561502][ T8083] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 275.686605][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.703415][ T8093] capability: warning: `syz.5.1008' uses 32-bit capabilities (legacy support in use) [ 275.727788][ T8083] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 275.737528][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.761938][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.776455][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.804200][ T8083] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.822163][ T26] audit: type=1800 audit(1780386417.346:13): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1006" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 275.838985][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.902372][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.981182][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.994710][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.015238][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.054873][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.073437][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.096591][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.123955][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.138893][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.168336][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.216595][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.281492][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.472734][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.486724][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.666653][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.716633][ T7874] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.763454][ T7874] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.781084][ T7874] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.790357][ T7874] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.972626][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.014721][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.040082][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.141399][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.164180][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.195523][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.622908][ T8120] loop6: detected capacity change from 0 to 2048 [ 278.567829][ T8137] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 278.921998][ T8120] EXT4-fs (loop6): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 280.169616][ T8144] loop8: detected capacity change from 0 to 128 [ 280.210070][ T8144] UDF-fs: bad mount option "" or missing value [ 281.269545][ T8166] loop8: detected capacity change from 0 to 2048 [ 281.860594][ T8184] capability: warning: `syz.8.1029' uses deprecated v2 capabilities in a way that may be insecure [ 282.160000][ T8189] overlayfs: failed to clone upperpath [ 282.198653][ T8191] device syzkaller0 entered promiscuous mode [ 283.360213][ T8210] loop6: detected capacity change from 0 to 128 [ 283.431682][ T8210] UDF-fs: bad mount option "" or missing value [ 284.684523][ T8228] loop4: detected capacity change from 0 to 2048 [ 284.823748][ T4201] Bluetooth: Wrong link type (-57) [ 284.899306][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1041'. [ 284.922981][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1041'. [ 285.071241][ T8245] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 286.076146][ T8258] loop8: detected capacity change from 0 to 1024 [ 286.178433][ T8259] device syzkaller0 entered promiscuous mode [ 286.246728][ T8258] hfsplus: cannot replace xattr [ 286.589277][ T1336] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 286.849518][ T8284] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 287.409104][ T1336] usb 7-1: config 0 has no interfaces? [ 287.604200][ T1336] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 287.613393][ T1336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.627629][ T1336] usb 7-1: config 0 descriptor?? [ 287.831488][ T8288] loop5: detected capacity change from 0 to 2048 [ 288.163350][ T4277] usb 7-1: USB disconnect, device number 8 [ 288.553192][ T8313] loop8: detected capacity change from 0 to 2048 [ 289.094181][ T8313] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 290.029797][ T8341] loop5: detected capacity change from 0 to 128 [ 290.860725][ T8341] UDF-fs: bad mount option "" or missing value [ 291.067354][ T8345] device syzkaller0 entered promiscuous mode [ 291.441408][ T8363] loop6: detected capacity change from 0 to 256 [ 291.533764][ T8363] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 291.595356][ T8363] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 292.842113][ T4232] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 294.579126][ T4232] usb 9-1: config 0 has no interfaces? [ 294.584669][ T4232] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 294.634354][ T4232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.702334][ T4232] usb 9-1: config 0 descriptor?? [ 294.959358][ T4273] usb 9-1: USB disconnect, device number 2 [ 295.047531][ T8419] loop4: detected capacity change from 0 to 128 [ 296.420634][ T8419] UDF-fs: bad mount option "" or missing value [ 299.136118][ T8454] loop4: detected capacity change from 0 to 512 [ 299.229214][ T8445] syz.5.1094 (8445) used greatest stack depth: 18512 bytes left [ 299.252923][ T8454] EXT4-fs (loop4): Ignoring removed oldalloc option [ 299.286493][ T8454] EXT4-fs (loop4): Unrecognized mount option "subj_user=i_version" or missing value [ 302.729842][ T8485] loop6: detected capacity change from 0 to 256 [ 302.780585][ T8485] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 302.810576][ T8486] device syzkaller0 entered promiscuous mode [ 302.869122][ T4273] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 303.241720][ T8485] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1102'. [ 303.251263][ T4273] usb 5-1: config 0 has no interfaces? [ 303.256789][ T4273] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 303.297031][ T4273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.353681][ T4273] usb 5-1: config 0 descriptor?? [ 303.564159][ T21] usb 5-1: USB disconnect, device number 17 [ 305.744352][ T8525] loop8: detected capacity change from 0 to 512 [ 305.745123][ T8530] loop5: detected capacity change from 0 to 2048 [ 305.837880][ T8525] EXT4-fs (loop8): Ignoring removed oldalloc option [ 305.852361][ T8525] EXT4-fs (loop8): Unrecognized mount option "subj_user=i_version" or missing value [ 305.872361][ T8530] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 310.539023][ T4232] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 313.399055][ T4232] usb 6-1: device descriptor read/all, error -71 [ 316.341075][ T8615] loop5: detected capacity change from 0 to 2048 [ 316.480029][ T8615] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 316.515408][ T8637] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1130'. [ 316.627883][ T8642] overlayfs: failed to clone upperpath [ 317.790285][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.224202][ T8674] loop4: detected capacity change from 0 to 1764 [ 318.347532][ T8681] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 318.689171][ T8690] loop6: detected capacity change from 0 to 512 [ 318.789220][ T8690] EXT4-fs (loop6): Ignoring removed oldalloc option [ 318.796203][ T8690] EXT4-fs (loop6): Unrecognized mount option "subj_user=i_version" or missing value [ 321.241938][ T8708] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 321.558327][ T8714] loop8: detected capacity change from 0 to 2048 [ 321.657713][ T8714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.659336][ T8733] loop6: detected capacity change from 0 to 2048 [ 323.819965][ T8733] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 325.059760][ T4542] Bluetooth: hci1: command 0x0406 tx timeout [ 325.776988][ T8781] 9pnet: Insufficient options for proto=fd [ 328.603198][ T8802] Illegal XDP return value 4294967294, expect packet loss! [ 330.717278][ T8837] loop4: detected capacity change from 0 to 2048 [ 331.088083][ T8847] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 333.109308][ T8837] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 335.996778][ T8922] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 338.498559][ T8949] loop8: detected capacity change from 0 to 256 [ 338.658850][ T8949] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 343.708257][ T8981] loop5: detected capacity change from 0 to 2048 [ 343.808842][ T4193] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 343.818691][ T4193] CPU: 1 PID: 4193 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 343.826272][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 343.836352][ T4193] Workqueue: hci1 hci_rx_work [ 343.841062][ T4193] Call Trace: [ 343.844361][ T4193] [ 343.847323][ T4193] dump_stack_lvl+0x188/0x250 [ 343.852039][ T4193] ? show_regs_print_info+0x20/0x20 [ 343.857261][ T4193] ? load_image+0x400/0x400 [ 343.861820][ T4193] sysfs_create_dir_ns+0x26a/0x290 [ 343.867102][ T4193] ? sysfs_warn_dup+0xa0/0xa0 [ 343.871808][ T4193] ? process_one_work+0x85f/0x1010 [ 343.876951][ T4193] ? do_raw_spin_unlock+0x11d/0x230 [ 343.882186][ T4193] kobject_add_internal+0x6e0/0xd90 [ 343.887420][ T4193] kobject_add+0x160/0x230 [ 343.891863][ T4193] ? kobject_init+0x1d0/0x1d0 [ 343.896684][ T4193] ? klist_children_get+0x50/0x50 [ 343.901749][ T4193] ? get_device_parent+0x121/0x3f0 [ 343.906896][ T4193] device_add+0x48c/0x1000 [ 343.911355][ T4193] hci_conn_add_sysfs+0xd1/0x1e0 [ 343.916324][ T4193] le_conn_complete_evt+0xc4b/0x15c0 [ 343.921660][ T4193] ? cs_le_create_conn+0x5e0/0x5e0 [ 343.926912][ T4193] ? __mutex_trylock_common+0x155/0x260 [ 343.932618][ T4193] hci_le_meta_evt+0x285/0x3cb0 [ 343.937555][ T4193] ? hci_event_packet+0x37e/0x1370 [ 343.942706][ T4193] ? __lock_acquire+0x7d10/0x7d10 [ 343.947776][ T4193] ? hci_remote_host_features_evt+0x290/0x290 [ 343.953874][ T4193] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 343.959632][ T4193] ? mark_lock+0x94/0x320 [ 343.963988][ T4193] ? mutex_unlock+0x10/0x10 [ 343.968529][ T4193] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 343.974547][ T4193] ? lock_chain_count+0x20/0x20 [ 343.979429][ T4193] ? __rwlock_init+0x140/0x140 [ 343.984219][ T4193] hci_event_packet+0xe4b/0x1370 [ 343.989183][ T4193] ? lockdep_hardirqs_on+0x94/0x140 [ 343.994511][ T4193] ? rcu_lock_release+0x20/0x20 [ 343.999395][ T4193] ? hci_send_to_monitor+0x9c/0x4a0 [ 344.004623][ T4193] hci_rx_work+0x255/0xa10 [ 344.009086][ T4193] process_one_work+0x85f/0x1010 [ 344.014069][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 344.019723][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 344.025055][ T4193] ? _raw_spin_lock_irq+0xb7/0xf0 [ 344.030100][ T4193] ? _raw_spin_lock_irqsave+0x100/0x100 [ 344.035679][ T4193] ? wq_worker_running+0x97/0x170 [ 344.040734][ T4193] worker_thread+0xaa6/0x1290 [ 344.045478][ T4193] kthread+0x436/0x520 [ 344.049572][ T4193] ? rcu_lock_release+0x20/0x20 [ 344.054447][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 344.059174][ T4193] ret_from_fork+0x1f/0x30 [ 344.063634][ T4193] [ 344.066728][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.088959][ T4193] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 344.102345][ T4193] Bluetooth: hci1: failed to register connection device [ 344.160708][ T8981] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 346.005112][ T9016] loop6: detected capacity change from 0 to 256 [ 346.051693][ T9016] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 346.263785][ T9021] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1227'. [ 349.140158][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1217'. [ 353.157678][ T9057] loop5: detected capacity change from 0 to 2048 [ 353.226504][ T9057] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 354.006780][ T9082] loop4: detected capacity change from 0 to 256 [ 354.541117][ T9082] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 355.037778][ T9082] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 355.124829][ T9082] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 358.375140][ T9115] loop5: detected capacity change from 0 to 256 [ 358.482848][ T9115] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 358.697931][ T9122] loop4: detected capacity change from 0 to 2048 [ 358.931702][ T9122] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 360.417907][ T9147] binder: 9143:9147 ioctl c0306201 0 returned -14 [ 364.964459][ T9195] overlayfs: missing 'lowerdir' [ 368.431401][ T9224] loop5: detected capacity change from 0 to 1024 [ 368.481318][ T9224] EXT4-fs (loop5): Ignoring removed orlov option [ 368.533148][ T9224] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 368.554021][ T9224] EXT4-fs (loop5): orphan cleanup on readonly fs [ 368.591967][ T9224] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1258: Invalid inode table block 0 in block_group 0 [ 368.645981][ T9224] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 368.674766][ T9224] EXT4-fs error (device loop5): ext4_quota_write:6648: inode #3: comm syz.5.1258: mark_inode_dirty error [ 368.693958][ T9224] Quota error (device loop5): write_blk: dquota write failed [ 368.709054][ T9224] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 369.103106][ T9224] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1258: Failed to acquire dquot type 0 [ 370.076447][ T9224] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1258: Invalid inode table block 0 in block_group 0 [ 370.118132][ T9224] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 370.180029][ T9224] EXT4-fs error (device loop5): ext4_ext_truncate:4472: inode #15: comm syz.5.1258: mark_inode_dirty error [ 370.199548][ T9238] loop6: detected capacity change from 0 to 1024 [ 370.216444][ T9224] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1258: Invalid inode table block 0 in block_group 0 [ 370.281166][ T9224] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 370.322457][ T9224] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 370.376986][ T9224] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1258: Invalid inode table block 0 in block_group 0 [ 370.426569][ T9224] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 370.474856][ T9224] EXT4-fs error (device loop5): ext4_truncate:4286: inode #15: comm syz.5.1258: mark_inode_dirty error [ 370.547015][ T9224] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 370.622909][ T9255] overlayfs: missing 'lowerdir' [ 370.642678][ T9224] EXT4-fs (loop5): 1 truncate cleaned up [ 370.652976][ T9224] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000040,stripe=0x0000000000000007,resuid=0x0000000000000000,lazytime,data_err=ignore,grpid,block_validity,orlov,,errors=continue. Quota mode: writeback. [ 370.748709][ T9262] loop6: detected capacity change from 0 to 128 [ 374.093902][ T9309] overlayfs: missing 'lowerdir' [ 374.916507][ T9311] loop6: detected capacity change from 0 to 256 [ 374.922140][ T9313] loop8: detected capacity change from 0 to 256 [ 375.003182][ T9311] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 375.043255][ T9317] loop5: detected capacity change from 0 to 512 [ 375.100573][ T9313] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 375.167558][ T9317] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 375.229527][ T26] audit: type=1800 audit(1780386516.756:14): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1292" name="file1" dev="loop8" ino=1048651 res=0 errno=0 [ 376.604052][ T9317] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.1295: bad orphan inode 131083 [ 376.638444][ T9317] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 377.991963][ T9342] loop5: detected capacity change from 0 to 1024 [ 378.525108][ T9350] overlayfs: missing 'lowerdir' [ 378.582007][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.358010][ T9359] loop5: detected capacity change from 0 to 1024 [ 380.413821][ T9359] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 380.511016][ T9359] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 380.748627][ T26] audit: type=1800 audit(1780386522.266:15): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1309" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 380.773682][ T9359] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 380.818207][ T26] audit: type=1800 audit(1780386522.296:16): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1309" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 380.911913][ T26] audit: type=1800 audit(1780386522.296:17): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1309" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 380.960092][ T9375] loop8: detected capacity change from 0 to 512 [ 381.007699][ T9375] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 381.067400][ T9375] EXT4-fs error (device loop8): ext4_orphan_get:1432: comm syz.8.1311: bad orphan inode 131083 [ 381.135820][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1313'. [ 381.209049][ T9375] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.923490][ T9406] overlayfs: missing 'lowerdir' [ 384.350326][ T9410] device syzkaller0 entered promiscuous mode [ 384.367831][ T9412] loop4: detected capacity change from 0 to 2048 [ 384.531317][ T9412] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 385.198200][ T9422] loop8: detected capacity change from 0 to 1024 [ 387.425435][ T9433] loop6: detected capacity change from 0 to 512 [ 388.243971][ T9433] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 388.380252][ T9433] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.1329: bad orphan inode 131083 [ 388.447507][ T9433] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 389.079704][ T9449] overlayfs: missing 'lowerdir' [ 390.073563][ T9468] xt_hashlimit: max too large, truncated to 1048576 [ 390.226584][ T9463] device syzkaller0 entered promiscuous mode [ 390.353538][ T9475] loop6: detected capacity change from 0 to 1024 [ 390.876875][ T9486] loop6: detected capacity change from 0 to 512 [ 391.678435][ T9487] loop8: detected capacity change from 0 to 2048 [ 391.787973][ T9493] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 391.797072][ T9493] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 391.903176][ T9487] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 391.940214][ T9486] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 392.101534][ T9486] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.954134][ T4232] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 393.024336][ T9504] loop4: detected capacity change from 0 to 128 [ 393.149746][ T26] audit: type=1800 audit(1780386534.676:18): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1350" name="file1" dev="loop4" ino=1048652 res=0 errno=0 [ 393.235162][ T26] audit: type=1800 audit(1780386534.716:19): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1350" name="file1" dev="loop4" ino=1048652 res=0 errno=0 [ 393.319242][ T4232] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.660747][ T4232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.754219][ T4232] usb 7-1: config 0 descriptor?? [ 394.819246][ T4232] usb 7-1: can't set config #0, error -71 [ 394.829335][ T4232] usb 7-1: USB disconnect, device number 9 [ 395.053764][ T9513] device syzkaller0 entered promiscuous mode [ 396.343612][ T9532] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 396.357939][ T9532] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 398.625550][ T9545] loop5: detected capacity change from 0 to 8 [ 398.713345][ T9545] squashfs: Unknown parameter 'þ' [ 399.210579][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1363'. [ 400.813368][ T9552] loop4: detected capacity change from 0 to 2048 [ 400.981157][ T9552] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x58 != 0xd4 [ 401.001738][ T9552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.017476][ T9552] UDF-fs: error (device loop4): udf_read_inode: (ino 1376) failed !bh [ 401.026277][ T9552] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 401.605000][ T9559] loop5: detected capacity change from 0 to 2048 [ 401.861955][ T9566] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 401.878650][ T9566] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 402.095070][ T9559] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 403.395773][ T9580] device syzkaller0 entered promiscuous mode [ 404.750981][ T9592] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 404.788609][ T9592] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 404.971645][ T9590] loop8: detected capacity change from 0 to 8192 [ 405.005290][ T9597] loop5: detected capacity change from 0 to 128 [ 405.290236][ T9597] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 406.045179][ T9597] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 406.074698][ T9612] overlayfs: missing 'lowerdir' [ 406.170804][ T9619] loop6: detected capacity change from 0 to 2048 [ 406.283944][ T9616] device syzkaller0 entered promiscuous mode [ 406.298099][ T9619] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 407.428266][ T13] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 407.699433][ T9632] loop5: detected capacity change from 0 to 2048 [ 407.803196][ T9632] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 407.820145][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.831164][ T13] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 407.840768][ T13] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 407.850281][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.861290][ T13] usb 5-1: config 0 descriptor?? [ 408.208463][ T13] Bluetooth: Can't get state to change to load ram patch err [ 408.320644][ T13] Bluetooth: Loading patch file failed [ 408.441460][ T9608] page:ffffea00014062c0 refcount:4 mapcount:1 mapping:ffff8880737d6098 index:0x0 pfn:0x5018b [ 408.452372][ T9608] memcg:ffff88807eb68000 [ 408.456642][ T9608] aops:shmem_aops ino:65 [ 408.460905][ T9608] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 408.470736][ T9608] raw: 00fff00000080015 ffffea0001406288 ffffea0001406308 ffff8880737d6098 [ 408.472719][ T13] ath3k: probe of 5-1:0.0 failed with error -121 [ 408.479346][ T9608] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88807eb68000 [ 408.494313][ T9608] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 408.501361][ T9608] page_owner tracks the page as allocated [ 408.507071][ T9608] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 9609, ts 406027739228, free_ts 404775071637 [ 408.521821][ T9608] get_page_from_freelist+0x1bbd/0x1ca0 [ 408.527375][ T9608] __alloc_pages+0x1ee/0x480 [ 408.531963][ T9608] alloc_pages_vma+0x393/0x7c0 [ 408.536737][ T9608] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 408.542395][ T9608] shmem_getpage_gfp+0x14f4/0x2d40 [ 408.547593][ T9608] shmem_read_mapping_page_gfp+0x96/0x100 [ 408.553306][ T9608] udmabuf_create+0x895/0x1570 [ 408.558064][ T9608] udmabuf_ioctl+0x1f3/0x300 [ 408.562655][ T9608] __se_sys_ioctl+0xfa/0x170 [ 408.567267][ T9608] do_syscall_64+0x4c/0xa0 [ 408.571674][ T9608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.577562][ T9608] page last free stack trace: [ 408.582224][ T9608] free_unref_page_prepare+0x637/0x6c0 [ 408.587676][ T9608] free_unref_page_list+0x119/0x820 [ 408.592867][ T9608] release_pages+0x186c/0x1be0 [ 408.597620][ T9608] __pagevec_release+0x6d/0xe0 [ 408.602388][ T9608] shmem_undo_range+0x62b/0x1930 [ 408.607319][ T9608] shmem_evict_inode+0x220/0xa40 [ 408.612247][ T9608] evict+0x4c9/0x8d0 [ 408.616162][ T9608] do_unlinkat+0x3e7/0x710 [ 408.620571][ T9608] __x64_sys_unlink+0x45/0x50 [ 408.625239][ T9608] do_syscall_64+0x4c/0xa0 [ 408.629645][ T9608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.635586][ T9608] ------------[ cut here ]------------ [ 408.641044][ T9608] kernel BUG at mm/filemap.c:166! [ 408.646063][ T9608] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 408.652119][ T9608] CPU: 1 PID: 9608 Comm: syz.4.1381 Not tainted syzkaller #0 [ 408.659482][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 408.669705][ T9608] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 408.676129][ T9608] Code: e8 09 16 db ff 4c 89 f7 48 c7 c6 00 0a 33 8a e8 ba fb 0d 00 0f 0b e8 f3 15 db ff 4c 89 f7 48 c7 c6 40 0a 33 8a e8 a4 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 d8 15 db ff eb 5d e8 d1 15 db ff 4c 89 f7 [ 408.695729][ T9608] RSP: 0018:ffffc900030ff688 EFLAGS: 00010046 [ 408.701790][ T9608] RAX: 1625d6e4ce4b1700 RBX: 0000000000000000 RCX: 0000000000000000 [ 408.709751][ T9608] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff5200061fec4 [ 408.717717][ T9608] RBP: 1ffffd4000280c59 R08: ffff8880b912795b R09: fffff5200061fe80 [ 408.725677][ T9608] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffea00014062c0 [ 408.733637][ T9608] R13: dffffc0000000000 R14: ffffea00014062c0 R15: ffffea00014062c8 [ 408.741611][ T9608] FS: 0000555558856500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 408.750530][ T9608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.757105][ T9608] CR2: 000055559175a4e8 CR3: 000000001f5cd000 CR4: 00000000003526e0 [ 408.765083][ T9608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.773053][ T9608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.781018][ T9608] Call Trace: [ 408.784307][ T9608] [ 408.787232][ T9608] __delete_from_page_cache+0xbe/0x6d0 [ 408.792700][ T9608] ? _raw_spin_lock_irq+0x86/0xf0 [ 408.797719][ T9608] ? lockdep_hardirqs_off+0x70/0x100 [ 408.803022][ T9608] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 408.810040][ T9608] ? _raw_spin_lock_irq+0xb7/0xf0 [ 408.815054][ T9608] ? _raw_spin_lock_irqsave+0x100/0x100 [ 408.820590][ T9608] ? page_mapping+0x30e/0x440 [ 408.825273][ T9608] delete_from_page_cache+0x121/0x190 [ 408.830638][ T9608] truncate_inode_page+0x8d/0xb0 [ 408.835569][ T9608] shmem_undo_range+0x53c/0x1930 [ 408.840536][ T9608] ? __schedule+0x11f7/0x43c0 [ 408.845206][ T9608] ? shmem_truncate_range+0xa0/0xa0 [ 408.850399][ T9608] ? do_raw_spin_lock+0x128/0x2f0 [ 408.855414][ T9608] ? __rwlock_init+0x140/0x140 [ 408.860182][ T9608] shmem_evict_inode+0x220/0xa40 [ 408.865548][ T9608] ? inode_wait_for_writeback+0x1df/0x220 [ 408.871263][ T9608] ? shmem_free_in_core_inode+0xb0/0xb0 [ 408.876799][ T9608] ? do_raw_spin_lock+0x128/0x2f0 [ 408.881813][ T9608] ? bit_waitqueue+0x30/0x30 [ 408.886441][ T9608] ? do_raw_spin_unlock+0x11d/0x230 [ 408.891650][ T9608] ? shmem_free_in_core_inode+0xb0/0xb0 [ 408.897188][ T9608] evict+0x4c9/0x8d0 [ 408.901075][ T9608] ? proc_nr_inodes+0x320/0x320 [ 408.905935][ T9608] ? do_raw_spin_unlock+0x11d/0x230 [ 408.911134][ T9608] ? _raw_spin_unlock+0x24/0x40 [ 408.915975][ T9608] __dentry_kill+0x431/0x650 [ 408.920566][ T9608] dentry_kill+0xb8/0x290 [ 408.924915][ T9608] dput+0xd8/0x1a0 [ 408.928657][ T9608] __fput+0x5ee/0x930 [ 408.932647][ T9608] task_work_run+0x125/0x1a0 [ 408.937228][ T9608] exit_to_user_mode_loop+0x10f/0x130 [ 408.942586][ T9608] exit_to_user_mode_prepare+0xee/0x180 [ 408.948119][ T9608] syscall_exit_to_user_mode+0x16/0x40 [ 408.953571][ T9608] do_syscall_64+0x58/0xa0 [ 408.957974][ T9608] ? clear_bhb_loop+0x30/0x80 [ 408.962653][ T9608] ? clear_bhb_loop+0x30/0x80 [ 408.967316][ T9608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.973210][ T9608] RIP: 0033:0x7f6a43609e59 [ 408.977645][ T9608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.997238][ T9608] RSP: 002b:00007ffc93269db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 409.005639][ T9608] RAX: 0000000000000000 RBX: 00007ffc93269ea0 RCX: 00007f6a43609e59 [ 409.013597][ T9608] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 409.021559][ T9608] RBP: 0000000000062ec7 R08: 0000000000000001 R09: 0000000000000000 [ 409.029517][ T9608] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007ffc93269ee0 [ 409.037491][ T9608] R13: 00007f6a43882fac R14: 0000000000063b78 R15: 00007f6a43882fa0 [ 409.045454][ T9608] [ 409.048461][ T9608] Modules linked in: [ 409.052345][ T9608] ---[ end trace 484b3ae229962e2d ]--- [ 409.057784][ T9608] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 409.064204][ T9608] Code: e8 09 16 db ff 4c 89 f7 48 c7 c6 00 0a 33 8a e8 ba fb 0d 00 0f 0b e8 f3 15 db ff 4c 89 f7 48 c7 c6 40 0a 33 8a e8 a4 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 d8 15 db ff eb 5d e8 d1 15 db ff 4c 89 f7 [ 409.083798][ T9608] RSP: 0018:ffffc900030ff688 EFLAGS: 00010046 [ 409.089865][ T9608] RAX: 1625d6e4ce4b1700 RBX: 0000000000000000 RCX: 0000000000000000 [ 409.097839][ T9608] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff5200061fec4 [ 409.105798][ T9608] RBP: 1ffffd4000280c59 R08: ffff8880b912795b R09: fffff5200061fe80 [ 409.113767][ T9608] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffea00014062c0 [ 409.121742][ T9608] R13: dffffc0000000000 R14: ffffea00014062c0 R15: ffffea00014062c8 [ 409.129729][ T9608] FS: 0000555558856500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 409.139508][ T9608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.146105][ T9608] CR2: 000055559175a4e8 CR3: 000000001f5cd000 CR4: 00000000003526e0 [ 409.154073][ T9608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.162066][ T9608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 409.170063][ T9608] Kernel panic - not syncing: Fatal exception [ 409.176508][ T9608] Kernel Offset: disabled [ 409.180833][ T9608] Rebooting in 86400 seconds..