last executing test programs: 1m30.672814746s ago: executing program 0 (id=6): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x1c9800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000002400)=ANY=[], 0x3d}) r5 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000088000000000000001000000000000000420000c744240233d8cecbc7442406000000000f01", @ANYRES8=r4], 0xa0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m30.451143589s ago: executing program 0 (id=7): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\xa5\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\x9c\x9e\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xb0a\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbd(T$\xf7\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xe2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\x83\x05\x00\x00\x00\x00\x00\x00\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(\xca\xa5\xf5p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\r\xe4\xef\xf9\xff~\x13\xc22t\xf6\xf4Fs\xdd\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\xd3\t\xf6\xd1\"0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x140, 0x0) close(0x3) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11d) 1m28.644014097s ago: executing program 0 (id=22): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1m13.421672533s ago: executing program 32 (id=22): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 22.983494594s ago: executing program 4 (id=306): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fa, 0x400, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4) 22.855014496s ago: executing program 4 (id=307): socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4b1, &(0x7f0000000500)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB='uni_xlate=0,iocharset=default,uni_xlate=0,uni_xlate=1,codepage=862,shortname=lower,allow_utime=00777777777777777777777,iocharset=maccyrillic,uni_xlate=0,iocharset=cp1251,rodir,shortname=mixed,nnonumtail=1,shortname=lower,unieuid<\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x25, 0x36e, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) lstat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x26) 21.666513784s ago: executing program 4 (id=315): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x204000, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x4000014) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x10000000, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}, {0x20000, 0x4, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004c8, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.122488493s ago: executing program 4 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 20.747024218s ago: executing program 4 (id=328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 20.164934097s ago: executing program 4 (id=329): openat(0xffffffffffffff9c, 0x0, 0x4a142, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {}, 0x20000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000, 0x40000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffffff7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8569, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8878, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0xcca, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x200000], [0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in=@multicast1, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) 19.675908355s ago: executing program 33 (id=329): openat(0xffffffffffffff9c, 0x0, 0x4a142, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {}, 0x20000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000, 0x40000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffffff7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8569, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8878, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0xcca, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x200000], [0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in=@multicast1, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) 10.892623481s ago: executing program 5 (id=384): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_RESET(r0, 0x5514) 10.775314203s ago: executing program 5 (id=385): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) unshare(0x62040200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/sockstat\x00') syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 9.918699306s ago: executing program 5 (id=388): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x1f, {0x1f, 0xa, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f00000002c0)={0x40, 0x10, 0x2, {0x2, 0x11}}, &(0x7f0000000000)={0x0, 0x3, 0x64, @string={0x64, 0x3, "0aeb8f0d73c3506cc6e9e8b6c3e1b0f02b7234433740b9999af1de01aae1e6b001193a2d0a3b08e3fa724450f3ffad2d980169c73e90cc1bf4be433fd5ae138b1b21bbd58e4823f385fbdcafb23d35da8ec94579a2c1d2f57da24c7ddd343a03a6a1"}}, &(0x7f0000000100)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x9, "a9315b5b"}, @global=@item_012={0x0, 0x1, 0x9}, @local=@item_4={0x3, 0x2, 0x5, "b8e40d20"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xf3, 0x1, {0x22, 0xc20}}}}, 0x0) 7.794963179s ago: executing program 3 (id=411): unshare(0x62040200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x700, 0xfdef) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.318928247s ago: executing program 3 (id=414): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000280)=0x7fc, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x7, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 7.204064408s ago: executing program 5 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, 0x0, 0x4014) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)=""/36, &(0x7f0000000000)=0x24) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 7.159243529s ago: executing program 3 (id=418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000000c0)={0xcc, 0x0, 0x5}) 6.981718292s ago: executing program 3 (id=421): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close_range(r0, 0xffffffffffffffff, 0x0) 5.462281235s ago: executing program 1 (id=426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000440)={0x0, 0x31, 0x41, {0x41, 0x10, "9557baf06a12e7d95414baf57032f9e626878ecf1c0e45d34300a943fdde106fdb27f5d50085b3466dee5da2bfc0ef448362d8ae31dbb72bc387e3df4e8a19"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.141966421s ago: executing program 3 (id=435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.784052226s ago: executing program 5 (id=436): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x86) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x6dc11887e1201f73, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.598888609s ago: executing program 1 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000002c0)='./file1\x00', 0x1610, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') statfs(&(0x7f0000000280)='./file1\x00', 0x0) linkat(0xffffffffffffffff, 0x0, r1, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x800, 0x0, 0x22}, 0x18) 2.294851574s ago: executing program 1 (id=440): bind$alg(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x407, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 2.207204395s ago: executing program 3 (id=442): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x4, "52b16000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="001b0000000000ef00cf0c2be0613ef26e5a4490df0a58f5b853f1a75b1ab550f9cb9214a6d30faf3f3f6386eb6c91dc069505c4417f6a749ace1cd8ca093995a91fd77de5e672993dbde3dad316fb6dccec12574c8339f05c25e0aa6aaccb3e7e83907c0859070413c5ff253d9d286471d5924f953afef28d19cd0d3afe6d89b3929140932c36626e41b88026647eced0ba69a92d6738fb34ec7c383320988acf5e98ffb384652cc1324fae729a401679b1f5edd01538b677"], 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10000003) bind$inet(0xffffffffffffffff, 0x0, 0x0) 1.402897368s ago: executing program 5 (id=444): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, &(0x7f0000000080)={0x20, 0x24, 0x19, {0x19, 0x31, "770a73a352a08376b80084282502e81c3d33b873b8f3a5"}}, 0x0, &(0x7f0000000300), 0x0}, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x0, 0x14, 0x4, "064be3cc"}, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, 0x0, 0x40840) 1.018937854s ago: executing program 1 (id=452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 947.040695ms ago: executing program 6 (id=453): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="baa100b000eebad00466edbaf80c66b89067038666efbafc0c66b8f6ffffff66ef66b97e0900000f32f4baf80c66b81e95da8a66efbafc0cb8d474ef84910000f3a7baf80c66b8dc861f8466efbafc0cb000ee3e260f01c3", 0x58}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, 0x0) 932.436465ms ago: executing program 2 (id=454): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x10000) 724.795449ms ago: executing program 2 (id=455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000e40)={0x2, 0x0, @ioapic={0x1000, 0xffffffff, 0x40, 0x4, 0x0, [{0x4, 0x85, 0x8, '\x00', 0x6}, {0xb, 0x84, 0x0, '\x00', 0xa}, {0x6c, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x8, 0x10, '\x00', 0x9}, {0x9, 0x1, 0x3, '\x00', 0xe}, {0x2, 0xff, 0x9, '\x00', 0x1}, {0xf0, 0x3, 0xf7, '\x00', 0xf3}, {0x0, 0xa, 0x40, '\x00', 0x3}, {0x80, 0x74, 0x3, '\x00', 0xd}, {0xe7, 0xfe, 0xfe, '\x00', 0xf}, {0xbe, 0x1, 0x4, '\x00', 0x2}, {0x8, 0x5, 0xf, '\x00', 0x7f}, {0xa6, 0x0, 0xd, '\x00', 0x18}, {0x15, 0x8, 0x0, '\x00', 0x6}, {0x4, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0xa, 0x9, '\x00', 0x2}, {0x5, 0x8, 0x81, '\x00', 0x3}, {0x5, 0x7, 0x80, '\x00', 0x2}, {0xfd, 0x0, 0x5, '\x00', 0x7f}, {0xfd, 0x3, 0xe2, '\x00', 0x2}, {0x0, 0x2, 0x7, '\x00', 0x6}, {0x0, 0xfe, 0xfd, '\x00', 0x9}, {0xe, 0x11, 0x2}, {0xd, 0x9, 0x1, '\x00', 0x8}]}}) 598.49153ms ago: executing program 6 (id=456): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) 533.597821ms ago: executing program 1 (id=457): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x500, 0x0) 453.870673ms ago: executing program 6 (id=458): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000040)="849a89e9", 0x4}], 0x1, 0x0, 0x0, 0x4000}, 0x40400d0) 453.727753ms ago: executing program 2 (id=459): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfdffffff}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @mcast2, 0xc3}}]}, 0x80}, 0x1, 0x7}, 0x0) 431.931663ms ago: executing program 2 (id=460): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8008) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x1, r2, 0x1}) 426.878573ms ago: executing program 1 (id=461): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x5, 0x800, 0x3ff) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 402.277983ms ago: executing program 6 (id=462): r0 = socket$inet(0x2, 0x3, 0x1) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 242.471986ms ago: executing program 2 (id=463): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 241.642866ms ago: executing program 6 (id=464): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200800c, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x200800a, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 177.09µs ago: executing program 2 (id=465): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0xa00, 0x0, 0x3, 0xfffffffe, 0x3, 0xc07}}, 0x120) 0s ago: executing program 6 (id=466): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xffffffff86f50b80) kernel console output (not intermixed with test programs): AN 0 to HW filter on device bond0 [ 344.613379][ T4221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.640356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.658217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.691233][ T4218] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.745081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.764079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.773895][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.781033][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.790533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.798513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.806320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.840594][ T4221] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.850319][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.865847][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.875649][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.882788][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.893986][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.903418][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.912323][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.922129][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.931025][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.943624][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.951487][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.966217][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.977956][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 345.012115][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.021317][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.031342][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.038462][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.046399][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.054322][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.061849][ T4303] Bluetooth: hci4: command 0x041b tx timeout [ 345.062502][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 345.068496][ T4303] Bluetooth: hci2: command 0x041b tx timeout [ 345.082360][ T4303] Bluetooth: hci0: command 0x041b tx timeout [ 345.085295][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.088991][ T4303] Bluetooth: hci1: command 0x041b tx timeout [ 345.103871][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.110985][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.119050][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 345.128108][ T4303] Bluetooth: hci3: command 0x041b tx timeout [ 345.128990][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 345.143195][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 345.152493][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 345.160966][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 345.171272][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 345.182644][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 345.191769][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.206301][ T4218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.223199][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 345.236633][ T4212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.249028][ T4217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.258028][ T4211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.265912][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 345.275002][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.316902][ T4217] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.333734][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.344515][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.360252][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.373023][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.381480][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 345.390904][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 345.415350][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.424654][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.433454][ T589] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.440571][ T589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.451260][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 345.460376][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 345.469709][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 345.484168][ T4212] device veth0_vlan entered promiscuous mode [ 345.513657][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.523014][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.534479][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.543972][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.553363][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.564127][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.577316][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 345.586113][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.595886][ T589] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.603005][ T589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.617189][ T4221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.655150][ T4212] device veth1_vlan entered promiscuous mode [ 345.663098][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.676121][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 345.685103][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.696124][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 345.711158][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 345.753831][ T4211] device veth0_vlan entered promiscuous mode [ 345.770849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.786225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 345.796685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 345.811777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.820708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.830413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.839080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.846859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.865542][ T4211] device veth1_vlan entered promiscuous mode [ 345.879157][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.887747][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 345.896327][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 345.905918][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.913750][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.937091][ T4221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.955117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.963646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.971796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.980982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 345.989695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.002220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.011245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.023476][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.032184][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.042529][ T4218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.058940][ T4212] device veth0_macvtap entered promiscuous mode [ 346.071634][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 346.121687][ T4212] device veth1_macvtap entered promiscuous mode [ 346.137028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.145776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.161512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 346.171977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.181951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.190650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.213334][ T4211] device veth0_macvtap entered promiscuous mode [ 346.236607][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.247548][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 346.256460][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.272765][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.282712][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.307679][ T4211] device veth1_macvtap entered promiscuous mode [ 346.322145][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.332485][ T4218] device veth0_vlan entered promiscuous mode [ 346.343198][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.352197][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.361877][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.370589][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.379378][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.394546][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.406413][ T4212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.415748][ T4212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.424638][ T4212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.433906][ T4212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.452508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.461718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.489235][ T4217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.513975][ T4218] device veth1_vlan entered promiscuous mode [ 346.522395][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.545474][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.558304][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.570810][ T4221] device veth0_vlan entered promiscuous mode [ 346.578399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.587061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.595525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.604107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 346.611747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 346.620148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.629229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.638464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.646346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.681440][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.692834][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.704647][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.733435][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.744487][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.764417][ T4211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.774061][ T4211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.783757][ T4211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.792793][ T4211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.808963][ T4221] device veth1_vlan entered promiscuous mode [ 346.828318][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.837143][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.871821][ T4218] device veth0_macvtap entered promiscuous mode [ 346.913839][ T4218] device veth1_macvtap entered promiscuous mode [ 346.946211][ T4221] device veth0_macvtap entered promiscuous mode [ 346.967790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.976023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.986208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.994983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.003785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 347.035112][ T4221] device veth1_macvtap entered promiscuous mode [ 347.055771][ T4218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.067223][ T4218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.077563][ T4218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.088155][ T4218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.100393][ T4218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.119380][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.130985][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.137720][ T4322] Bluetooth: hci1: command 0x040f tx timeout [ 347.140530][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.145216][ T4322] Bluetooth: hci0: command 0x040f tx timeout [ 347.163227][ T4218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.163280][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.177834][ T4218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.182825][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.199189][ T4322] Bluetooth: hci2: command 0x040f tx timeout [ 347.199287][ T4322] Bluetooth: hci4: command 0x040f tx timeout [ 347.204529][ T4218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.222250][ T4218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.228052][ T4201] Bluetooth: hci3: command 0x040f tx timeout [ 347.234303][ T4218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.270673][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.279298][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.288444][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.299105][ T4218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.308207][ T4218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.316916][ T4218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.326380][ T4218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.352812][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.364440][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.375507][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.378082][ T4221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.384078][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.401839][ T4221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.411943][ T4221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.422887][ T4221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.433323][ T4221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.444290][ T4221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.455693][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.481142][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.491722][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.501295][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.520785][ T4221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.533243][ T4221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.543395][ T4221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.555045][ T4221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.565187][ T4221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.576050][ T4221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.588300][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.622495][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.632807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.632923][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.653410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.663131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.674267][ T4221] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.683918][ T4221] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.699274][ T4221] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.708385][ T4221] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.726701][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.748345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.761134][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.771040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.786654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.795793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.803941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.837120][ T4217] device veth0_vlan entered promiscuous mode [ 347.909855][ T4217] device veth1_vlan entered promiscuous mode [ 347.946153][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.967472][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.004115][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 348.042287][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 348.065359][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.084124][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.096355][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.106693][ T4217] device veth0_macvtap entered promiscuous mode [ 348.122914][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.131170][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.140430][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.162761][ T4217] device veth1_macvtap entered promiscuous mode [ 348.172367][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.181494][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.221426][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.233388][ T4217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.240999][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.253297][ T4217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.263751][ T4217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.274567][ T4217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.284994][ T4217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.296667][ T4217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.321729][ T4217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.338081][ T4217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.351049][ T4217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.362950][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.372391][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.382974][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.392994][ T4333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 348.420986][ T4217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.422481][ T589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.433434][ T4217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.450593][ T589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.462237][ T4217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.473473][ T4217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.483934][ T4217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.508018][ T4217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.522579][ T4217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.534956][ T4217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.579803][ T4217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.594228][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.612164][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.622743][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.627695][ T4322] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 348.658079][ T4217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.682299][ T4217] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.698038][ T4217] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.717371][ T4217] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.893559][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.922933][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.962177][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.001173][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.025767][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.037030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.097957][ T4322] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.109237][ T4322] usb 2-1: config 0 has no interface number 0 [ 349.126983][ T4322] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.151308][ T4322] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.172649][ T4322] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.229218][ T4322] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 349.239244][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.255078][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 349.273607][ T4322] usb 2-1: config 0 descriptor?? [ 349.280921][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 349.288810][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 349.294890][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 349.303020][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 349.642266][ T4362] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 349.673714][ T4362] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 349.838564][ T4377] tipc: Started in network mode [ 349.843668][ T4377] tipc: Node identity 9a3e8a9bf529, cluster identity 4711 [ 349.854689][ T4377] tipc: Enabled bearer , priority 0 [ 349.868522][ T4376] tipc: Disabling bearer [ 349.990372][ T4322] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0001/input/input5 [ 350.083030][ T4322] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0001/input/input6 [ 350.085801][ T4384] kvm: pic: non byte read [ 350.116978][ T4384] kvm: pic: level sensitive irq not supported [ 350.117093][ T4384] kvm: pic: non byte read [ 350.131314][ T4384] kvm: pic: level sensitive irq not supported [ 350.131376][ T4384] kvm: pic: non byte read [ 350.144669][ T4384] kvm: pic: level sensitive irq not supported [ 350.144729][ T4384] kvm: pic: non byte read [ 350.155668][ T4384] kvm: pic: level sensitive irq not supported [ 350.155729][ T4384] kvm: pic: non byte read [ 350.170571][ T4384] kvm: pic: level sensitive irq not supported [ 350.170632][ T4384] kvm: pic: non byte read [ 350.181518][ T4328] Zero length message leads to an empty skb [ 350.188600][ T4384] kvm: pic: level sensitive irq not supported [ 350.188675][ T4384] kvm: pic: non byte read [ 350.208666][ T4322] uclogic 0003:28BD:0042.0001: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 350.300054][ T4322] usb 2-1: USB disconnect, device number 2 [ 351.223342][ T4388] fido_id[4388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 351.356339][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 351.768649][ T1325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 351.897394][ T4260] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 352.010915][ T1325] usb 4-1: Using ep0 maxpacket: 32 [ 352.067461][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 352.137375][ T4260] usb 3-1: Using ep0 maxpacket: 16 [ 352.137613][ T1325] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 352.150955][ T1325] usb 4-1: config 0 has no interface number 0 [ 352.157048][ T1325] usb 4-1: config 0 interface 184 has no altsetting 0 [ 352.227363][ T4323] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 352.257403][ T4260] usb 3-1: config 0 has no interfaces? [ 352.317780][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 352.318432][ T1325] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 352.332966][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.341344][ T1325] usb 4-1: Product: syz [ 352.345528][ T1325] usb 4-1: Manufacturer: syz [ 352.350399][ T1325] usb 4-1: SerialNumber: syz [ 352.356934][ T1325] usb 4-1: config 0 descriptor?? [ 352.398885][ T1325] smsc75xx v1.0.0 [ 352.418184][ T4260] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.427511][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.435528][ T4260] usb 3-1: Product: syz [ 352.439917][ T21] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 352.448523][ T4260] usb 3-1: Manufacturer: syz [ 352.453137][ T4260] usb 3-1: SerialNumber: syz [ 352.458021][ T21] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 352.466645][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 352.476630][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 352.488854][ T4260] usb 3-1: config 0 descriptor?? [ 352.501077][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 352.510833][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 352.524165][ T21] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 352.533341][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.552274][ T21] usb 2-1: config 0 descriptor?? [ 352.617485][ T4323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.627741][ T4323] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.746916][ T4274] usb 3-1: USB disconnect, device number 2 [ 352.787621][ T4323] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.796921][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.811387][ T4323] usb 5-1: Product: syz [ 352.817748][ T21] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 352.828557][ T4323] usb 5-1: Manufacturer: syz [ 352.833148][ T4323] usb 5-1: SerialNumber: syz [ 353.006937][ T21] usb 2-1: USB disconnect, device number 3 [ 353.017394][ C0] usblp0: nonzero read bulk status received: -108 [ 353.040891][ T1325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 353.052444][ T1325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 353.167618][ T4323] usb 5-1: 0:2 : does not exist [ 353.199305][ T4323] usb 5-1: USB disconnect, device number 2 [ 353.212476][ T4419] usblp0: removed [ 353.307645][ T1325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 353.326314][ T1325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 353.336335][ T1325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 353.352404][ T1325] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 353.363047][ T1325] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 353.395986][ T1325] usb 4-1: USB disconnect, device number 2 [ 354.267838][ T4203] udevd[4203]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.577705][ T4322] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 354.585326][ T1325] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 354.600557][ T4260] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 354.847357][ T4322] usb 2-1: Using ep0 maxpacket: 16 [ 354.848975][ T4260] usb 3-1: Using ep0 maxpacket: 32 [ 354.867398][ T1325] usb 4-1: Using ep0 maxpacket: 8 [ 354.977439][ T4260] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 354.985570][ T4260] usb 3-1: config 0 has no interface number 0 [ 354.998046][ T4322] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 355.006288][ T4322] usb 2-1: config 0 has no interface number 0 [ 355.012838][ T4322] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 355.023090][ T1325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 355.029746][ T4322] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 355.039817][ T1325] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 355.049533][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.057917][ T4322] usb 2-1: config 0 interface 41 has no altsetting 0 [ 355.067324][ T1325] usb 4-1: config 0 descriptor?? [ 355.147474][ T4260] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 355.157405][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.165456][ T4260] usb 3-1: Product: syz [ 355.170286][ T4260] usb 3-1: Manufacturer: syz [ 355.174906][ T4260] usb 3-1: SerialNumber: syz [ 355.192121][ T4260] usb 3-1: config 0 descriptor?? [ 355.229273][ T4260] smsc95xx v2.0.0 [ 355.247576][ T4322] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 355.257610][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.265647][ T4322] usb 2-1: Product: syz [ 355.271041][ T4322] usb 2-1: Manufacturer: syz [ 355.275673][ T4322] usb 2-1: SerialNumber: syz [ 355.291535][ T4322] usb 2-1: config 0 descriptor?? [ 355.318470][ T4433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 355.326644][ T4433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 355.391863][ T4457] loop4: detected capacity change from 0 to 512 [ 355.449952][ T4457] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.46: bad orphan inode 13 [ 355.461940][ T4457] ext4_test_bit(bit=12, block=4) = 1 [ 355.467485][ T4457] is_bad_inode(inode)=0 [ 355.471846][ T4457] NEXT_ORPHAN(inode)=0 [ 355.475933][ T4457] max_ino=32 [ 355.479243][ T4457] i_nlink=1 [ 355.482650][ T4457] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 355.542487][ T4433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 355.559378][ T1325] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 355.572059][ T1325] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 355.578984][ T4433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 355.587309][ T1325] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 355.598441][ T1325] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 355.605650][ T1325] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 355.612898][ T1325] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 355.620138][ T1325] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 355.627118][ T1325] lenovo 0003:17EF:6067.0002: unknown main item tag 0x0 [ 355.637358][ T1325] lenovo 0003:17EF:6067.0002: hidraw0: USB HID v0.03 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 355.670722][ T4260] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 355.699597][ T4260] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 355.765383][ T1325] usb 4-1: USB disconnect, device number 3 [ 355.904263][ T4462] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.46: Unrecognised inode hash code 20 [ 355.916267][ T4462] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.46: Corrupt directory, running e2fsck is recommended [ 355.936825][ T4462] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.46: Unrecognised inode hash code 20 [ 355.955438][ T4462] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.46: Corrupt directory, running e2fsck is recommended [ 356.027448][ T4322] Error reading MAC address [ 356.058262][ T4433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 356.065704][ T4433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 356.397417][ T4260] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 356.410130][ T4260] smsc95xx: probe of 3-1:0.67 failed with error -32 [ 356.996378][ T4322] sr9700 2-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, 2a:d3:99:67:25:18 [ 357.028380][ T4322] usb 2-1: USB disconnect, device number 4 [ 357.036514][ T4322] sr9700 2-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 357.417452][ T4322] usb 3-1: USB disconnect, device number 3 [ 357.907859][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 358.504189][ T4498] loop3: detected capacity change from 0 to 512 [ 358.643224][ T4498] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.59: bad orphan inode 13 [ 358.657458][ T4323] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 358.667833][ T4498] ext4_test_bit(bit=12, block=4) = 1 [ 358.673271][ T4498] is_bad_inode(inode)=0 [ 358.715118][ T4498] NEXT_ORPHAN(inode)=0 [ 358.731249][ T4498] max_ino=32 [ 358.734588][ T4498] i_nlink=1 [ 358.772985][ T4498] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 358.812093][ T4505] syzkaller0: create flow: hash 1880320642 index 1 [ 358.824279][ T21] syzkaller0: tun_net_xmit 76 [ 358.831040][ T21] syzkaller0: tun_net_xmit 48 [ 358.847532][ T4260] syzkaller0: tun_net_xmit 76 [ 358.902730][ T4504] syzkaller0: delete flow: hash 1880320642 index 1 [ 359.027542][ T4323] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.046024][ T4323] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 359.080095][ T4323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 359.086779][ T4323] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 359.136558][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.168048][ T4323] usb 3-1: config 0 descriptor?? [ 359.187695][ T4494] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 359.420157][ T4511] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.59: Unrecognised inode hash code 20 [ 359.432635][ T4511] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.59: Corrupt directory, running e2fsck is recommended [ 359.463856][ T4511] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.59: Unrecognised inode hash code 20 [ 359.475891][ T4511] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.59: Corrupt directory, running e2fsck is recommended [ 359.497388][ T21] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 359.650484][ T4323] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 359.660226][ T4323] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 359.668012][ T4323] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 359.675263][ T4323] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 359.682969][ T4323] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 359.692565][ T4323] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 359.700310][ T4323] logitech 0003:046D:C286.0003: unknown main item tag 0x0 [ 359.722383][ T4323] logitech 0003:046D:C286.0003: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0 [ 359.744891][ T4323] logitech 0003:046D:C286.0003: no inputs found [ 359.852807][ T4323] usb 3-1: USB disconnect, device number 4 [ 359.867712][ T21] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.898806][ T21] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 359.927541][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 359.940967][ T4512] fido_id[4512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 359.957061][ T21] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 359.967729][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.987074][ T21] usb 2-1: config 0 descriptor?? [ 360.017716][ T4509] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 360.130798][ T4517] device syzkaller0 entered promiscuous mode [ 360.363225][ T4521] input: syz0 as /devices/virtual/input/input7 [ 360.469548][ T4524] binder: 4520:4524 ioctl 4018620d 0 returned -22 [ 360.484499][ T4524] binder: 4520:4524 ioctl c0306201 0 returned -14 [ 360.525828][ T21] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 360.534283][ T21] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 360.542110][ T21] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 360.549699][ T21] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 360.557221][ T21] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 360.564833][ T21] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 360.572449][ T21] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 361.339048][ T21] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 361.350750][ T21] smartjoyplus 0003:6666:8804.0004: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.1-1/input0 [ 361.362689][ T21] smartjoyplus 0003:6666:8804.0004: no output reports found [ 361.378366][ T21] usb 2-1: USB disconnect, device number 5 [ 361.436643][ T4533] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 361.523041][ T4533] overlayfs: failed to set xattr on upper [ 361.540861][ T4533] overlayfs: ...falling back to index=off,metacopy=off. [ 361.566509][ T4541] fido_id[4541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 361.695122][ T4548] loop3: detected capacity change from 0 to 512 [ 361.820864][ T4548] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.77: bad orphan inode 13 [ 361.839261][ T4548] ext4_test_bit(bit=12, block=4) = 1 [ 361.847643][ T4548] is_bad_inode(inode)=0 [ 361.863658][ T4548] NEXT_ORPHAN(inode)=0 [ 361.885414][ T4548] max_ino=32 [ 361.892927][ T4548] i_nlink=1 [ 361.896137][ T4548] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 361.901401][ T4562] binder: 4561:4562 ioctl c018620c 200000000000 returned -1 [ 362.042149][ T21] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 362.478179][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 362.538402][ T21] usb 5-1: not running at top speed; connect to a high speed hub [ 362.657889][ T21] usb 5-1: config 1 has an invalid interface number: 2 but max is 1 [ 362.683795][ T21] usb 5-1: config 1 has an invalid interface number: 57 but max is 1 [ 362.773254][ T21] usb 5-1: config 1 has no interface number 0 [ 362.831554][ T21] usb 5-1: config 1 has no interface number 1 [ 362.851019][ T21] usb 5-1: config 1 interface 2 altsetting 8 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 362.881387][ T21] usb 5-1: config 1 interface 2 has no altsetting 0 [ 362.900391][ T4571] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.77: Unrecognised inode hash code 20 [ 362.916353][ T21] usb 5-1: config 1 interface 57 has no altsetting 0 [ 362.957043][ T4571] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.77: Corrupt directory, running e2fsck is recommended [ 362.970789][ T4571] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.77: Unrecognised inode hash code 20 [ 362.982099][ T4571] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.77: Corrupt directory, running e2fsck is recommended [ 363.017309][ T4322] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 363.077580][ T21] usb 5-1: New USB device found, idVendor=1514, idProduct=2008, bcdDevice=57.90 [ 363.096916][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.105087][ T21] usb 5-1: Product: syz [ 363.109451][ T21] usb 5-1: Manufacturer: syz [ 363.114067][ T21] usb 5-1: SerialNumber: syz [ 363.287346][ T4322] usb 3-1: Using ep0 maxpacket: 16 [ 363.337387][ T4267] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 363.438018][ T4322] usb 3-1: config 0 has no interfaces? [ 363.455624][ T21] ftdi_sio 5-1:1.2: FTDI USB Serial Device converter detected [ 363.469220][ T21] usb 5-1: Detected FT2232C [ 363.487523][ T21] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 363.507451][ T21] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 363.551237][ T21] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 363.629457][ T21] usb 5-1: USB disconnect, device number 3 [ 363.630983][ T4322] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.650591][ T21] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 363.655148][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.673770][ T4322] usb 3-1: Product: syz [ 363.682678][ T21] ftdi_sio 5-1:1.2: device disconnected [ 363.683348][ T4322] usb 3-1: Manufacturer: syz [ 363.693459][ T4322] usb 3-1: SerialNumber: syz [ 363.701516][ T4322] usb 3-1: config 0 descriptor?? [ 363.767561][ T4267] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 363.776641][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.787104][ T4267] usb 2-1: config 0 descriptor?? [ 363.956116][ T21] usb 3-1: USB disconnect, device number 5 [ 364.063422][ T4267] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 364.267457][ T4267] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 364.277649][ T4267] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 364.288548][ T4267] asix: probe of 2-1:0.0 failed with error -71 [ 364.303150][ T4267] usb 2-1: USB disconnect, device number 6 [ 364.784660][ T4602] loop2: detected capacity change from 0 to 512 [ 365.130130][ T4602] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.97: bad orphan inode 13 [ 365.321593][ T4602] ext4_test_bit(bit=12, block=4) = 1 [ 365.443495][ T4602] is_bad_inode(inode)=0 [ 365.461936][ T4602] NEXT_ORPHAN(inode)=0 [ 365.466061][ T4602] max_ino=32 [ 365.483372][ T4606] overlayfs: failed to set xattr on upper [ 365.511731][ T4602] i_nlink=1 [ 365.515097][ T4602] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 365.536981][ T4606] overlayfs: ...falling back to index=off,metacopy=off. [ 365.645917][ T4606] overlayfs: failed to resolve './file0': -2 [ 365.888084][ T4615] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.97: Unrecognised inode hash code 20 [ 365.899431][ T4615] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.97: Corrupt directory, running e2fsck is recommended [ 365.914208][ T4615] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.97: Unrecognised inode hash code 20 [ 365.925656][ T4615] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.97: Corrupt directory, running e2fsck is recommended [ 366.167413][ T4322] Bluetooth: hci5: command 0x1003 tx timeout [ 366.173779][ T4229] Bluetooth: hci5: sending frame failed (-49) [ 366.446251][ T4624] loop8: detected capacity change from 0 to 8 [ 366.615530][ T4628] capability: warning: `syz.1.106' uses deprecated v2 capabilities in a way that may be insecure [ 366.675497][ T4570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.813791][ T4570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.826002][ T4639] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 366.858292][ T4618] chnl_net:caif_netlink_parms(): no params data found [ 366.919764][ T4570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.076392][ T4570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.884481][ T4618] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.962537][ T4618] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.003813][ T4618] device bridge_slave_0 entered promiscuous mode [ 368.112536][ T4618] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.120699][ T4618] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.149325][ T4618] device bridge_slave_1 entered promiscuous mode [ 368.254295][ T4322] Bluetooth: hci5: command 0x1001 tx timeout [ 368.261689][ T4229] Bluetooth: hci5: sending frame failed (-49) [ 368.279496][ T4668] loop1: detected capacity change from 0 to 512 [ 368.306566][ T4618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.338059][ T4322] Bluetooth: hci6: command 0x0409 tx timeout [ 368.365941][ T4618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.444615][ T4668] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.115: bad orphan inode 13 [ 368.457893][ T4668] ext4_test_bit(bit=12, block=4) = 1 [ 368.467042][ T4668] is_bad_inode(inode)=0 [ 368.484287][ T4668] NEXT_ORPHAN(inode)=0 [ 368.510580][ T4668] max_ino=32 [ 368.513834][ T4668] i_nlink=1 [ 368.517024][ T4668] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 368.557441][ T4567] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 368.663619][ T4618] team0: Port device team_slave_0 added [ 368.728093][ T4618] team0: Port device team_slave_1 added [ 368.761141][ T4681] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 368.843814][ T4693] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.115: Unrecognised inode hash code 20 [ 368.855601][ T4693] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.115: Corrupt directory, running e2fsck is recommended [ 368.870567][ T4693] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.115: Unrecognised inode hash code 20 [ 368.882431][ T4693] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.115: Corrupt directory, running e2fsck is recommended [ 369.198595][ T4618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.205744][ T4618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.274249][ T4695] kvm: pic: non byte read [ 369.295265][ T4695] kvm: pic: non byte read [ 369.311244][ T4695] kvm: pic: non byte read [ 369.328893][ T4695] kvm: pic: non byte read [ 369.336378][ T4618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.393393][ T4618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.400992][ T4618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.427785][ T4618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.507819][ T4567] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 369.521566][ T4567] usb 3-1: config 0 interface 0 has no altsetting 0 [ 369.547395][ T4567] usb 3-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 369.556573][ T4567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.653624][ T4567] usb 3-1: config 0 descriptor?? [ 369.722513][ T4618] device hsr_slave_0 entered promiscuous mode [ 369.736379][ T4618] device hsr_slave_1 entered promiscuous mode [ 369.745474][ T4618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.759152][ T4618] Cannot create hsr debugfs directory [ 369.877398][ T4267] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 370.157595][ T4267] usb 2-1: Using ep0 maxpacket: 16 [ 370.312912][ T4267] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.422385][ T4267] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 370.551288][ T4267] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.591943][ T4267] usb 2-1: config 1 interface 0 has no altsetting 0 [ 370.613155][ T1325] Bluetooth: hci5: command 0x1009 tx timeout [ 370.625108][ T4322] Bluetooth: hci6: command 0x041b tx timeout [ 370.690639][ T4567] wacom 0003:056A:032F.0005: unknown main item tag 0x0 [ 370.699688][ T4567] wacom 0003:056A:032F.0005: unknown main item tag 0x0 [ 370.710551][ T4567] wacom 0003:056A:032F.0005: unknown main item tag 0x0 [ 370.730820][ T4567] wacom 0003:056A:032F.0005: unknown main item tag 0x0 [ 370.742482][ T4618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 370.753379][ T4567] wacom 0003:056A:032F.0005: unknown main item tag 0x0 [ 370.767173][ T4567] wacom 0003:056A:032F.0005: unknown main item tag 0x0 [ 370.785558][ T4567] wacom 0003:056A:032F.0005: unknown main item tag 0x0 [ 370.797417][ T4567] wacom 0003:056A:032F.0005: unknown main item tag 0x0 [ 370.807806][ T4267] usb 2-1: New USB device found, idVendor=0525, idProduct=d5a8, bcdDevice= 0.00 [ 370.818928][ T4567] wacom 0003:056A:032F.0005: hidraw0: USB HID v0.08 Device [HID 056a:032f] on usb-dummy_hcd.2-1/input0 [ 370.831104][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.831138][ T4267] usb 2-1: Product: syz [ 370.831153][ T4267] usb 2-1: Manufacturer: syz [ 370.843465][ T4618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 370.870674][ T4618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 370.877317][ T4267] usb 2-1: SerialNumber: syz [ 370.902845][ T4323] usb 3-1: USB disconnect, device number 6 [ 370.953244][ T4618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 371.002026][ T4723] fido_id[4723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 371.151470][ T4267] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xD5A8 [ 371.173828][ T4736] overlayfs: failed to get inode (-116) [ 371.183934][ T4736] overlayfs: failed to get inode (-116) [ 371.336466][ T4618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.537455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #142!!! [ 371.639828][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 371.657272][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 371.667261][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 371.670108][ T21] usb 2-1: USB disconnect, device number 7 [ 371.676383][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 371.692321][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 371.703393][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 371.721831][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 371.737266][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 371.769414][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.770343][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 371.823094][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.925399][ T4700] usblp0:failed reading printer status (-71) [ 371.970653][ T4699] usblp0: removed [ 372.237019][ T4747] loop3: detected capacity change from 0 to 512 [ 372.275058][ T4618] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.312614][ T4747] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.129: bad orphan inode 13 [ 372.332940][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.355724][ T4747] ext4_test_bit(bit=12, block=4) = 1 [ 372.361558][ T4747] is_bad_inode(inode)=0 [ 372.365742][ T4747] NEXT_ORPHAN(inode)=0 [ 372.370646][ T4747] max_ino=32 [ 372.373949][ T4747] i_nlink=1 [ 372.377139][ T4747] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 372.378218][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.461556][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.468723][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.501850][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 372.572163][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.581421][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.590349][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.597531][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.667975][ T4267] Bluetooth: hci6: command 0x040f tx timeout [ 372.691954][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 372.718310][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.017667][ T4764] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.129: Unrecognised inode hash code 20 [ 373.029080][ T4764] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.129: Corrupt directory, running e2fsck is recommended [ 373.042133][ T4764] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.129: Unrecognised inode hash code 20 [ 373.053660][ T4764] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.129: Corrupt directory, running e2fsck is recommended [ 373.801617][ T4570] device hsr_slave_0 left promiscuous mode [ 373.873609][ T4570] device hsr_slave_1 left promiscuous mode [ 373.933629][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.943935][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.985338][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.016705][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.043565][ T4570] device bridge_slave_1 left promiscuous mode [ 374.055574][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.129050][ T4570] device bridge_slave_0 left promiscuous mode [ 374.135389][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.180773][ T4570] device veth1_macvtap left promiscuous mode [ 374.187818][ T4570] device veth0_macvtap left promiscuous mode [ 374.193996][ T4570] device veth1_vlan left promiscuous mode [ 374.210036][ T4570] device veth0_vlan left promiscuous mode [ 374.287448][ T1108] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 374.657623][ T1108] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 375.041708][ T1108] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 375.140066][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 375.176076][ T1108] usb 2-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 375.230537][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.386269][ T4274] Bluetooth: hci6: command 0x0419 tx timeout [ 375.428024][ T1108] usb 2-1: config 0 descriptor?? [ 375.477835][ T4782] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 376.213935][ T1108] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 376.224771][ T1108] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 376.232229][ T1108] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 376.241076][ T1108] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 376.243712][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 376.250671][ T1108] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 376.263170][ T1108] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 376.270362][ T1108] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 376.277870][ T1108] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 376.291657][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 376.291928][ T1108] wacom 0003:056A:032A.0006: hidraw0: USB HID v0.08 Device [HID 056a:032a] on usb-dummy_hcd.1-1/input0 [ 376.325238][ T1108] usb 2-1: USB disconnect, device number 8 [ 376.325546][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.368572][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.389339][ T4812] fido_id[4812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 376.487833][ T4570] bond0 (unregistering): Released all slaves [ 376.567001][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.578323][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.587059][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.596772][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.605963][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.614408][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.659841][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.673717][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.682733][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.699438][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.995672][ T4823] kvm: emulating exchange as write [ 377.132494][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.192572][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.521550][ T4618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.049137][ T4215] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 378.137927][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.148383][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.211033][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.227449][ T4267] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 378.228153][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.260900][ T4618] device veth0_vlan entered promiscuous mode [ 378.281810][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.297925][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.322267][ T4618] device veth1_vlan entered promiscuous mode [ 378.376410][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 378.387892][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 378.406378][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.426881][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.452448][ T4618] device veth0_macvtap entered promiscuous mode [ 378.481968][ T4618] device veth1_macvtap entered promiscuous mode [ 378.497821][ T4215] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 378.508912][ T4267] usb 4-1: Using ep0 maxpacket: 16 [ 378.521316][ T4215] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 378.542691][ T4618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.543360][ T4215] usb 3-1: config 0 interface 0 has no altsetting 0 [ 378.574053][ T4618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.577874][ T4215] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 378.599464][ T4618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.616957][ T4215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.625169][ T4618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.625185][ T4618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.625201][ T4618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.625211][ T4618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.625224][ T4618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.677612][ T4267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.708047][ T4215] usb 3-1: config 0 descriptor?? [ 378.723340][ T4267] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 378.732491][ T4618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.742641][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.750853][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.765278][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 378.777628][ T4827] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 378.784854][ T4267] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 378.794351][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.795374][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 378.823944][ T4267] usb 4-1: config 0 descriptor?? [ 378.848387][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 378.861607][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 378.879165][ T4618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.898544][ T4618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.917312][ T4618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.940007][ T4618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.967056][ T4618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.993503][ T4201] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 378.997333][ T4618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.042690][ T4618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.073862][ T4618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.113475][ T4618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.127685][ T4215] usbhid 3-1:0.0: can't add hid device: -71 [ 379.136210][ T4215] usbhid: probe of 3-1:0.0 failed with error -71 [ 379.165439][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.176177][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.197861][ T4215] usb 3-1: USB disconnect, device number 7 [ 379.212893][ T4618] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.250437][ T4618] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.267389][ T4201] usb 2-1: Using ep0 maxpacket: 16 [ 379.291074][ T4618] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.316891][ T4618] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.387768][ T4201] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 379.408896][ T4201] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.451670][ T4201] usb 2-1: config 0 has no interface number 0 [ 380.122793][ T4830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.158607][ T4830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.167750][ T4201] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 380.179473][ T4201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.228890][ T4569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.231663][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 380.237035][ T4569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.264796][ T4201] usb 2-1: Product: syz [ 380.271876][ T4201] usb 2-1: Manufacturer: syz [ 380.276682][ T4201] usb 2-1: SerialNumber: syz [ 380.302645][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 380.303504][ T4201] usb 2-1: config 0 descriptor?? [ 380.567594][ T4322] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 380.607818][ T4201] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 380.614273][ T4201] usb 2-1: No valid video chain found. [ 380.668627][ T4201] usb 2-1: USB disconnect, device number 9 [ 380.978484][ T4322] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.075528][ T4322] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.375807][ T4322] usb 3-1: config 0 interface 0 has no altsetting 0 [ 381.558933][ T4322] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 381.647694][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.677542][ T4267] usbhid 4-1:0.0: can't add hid device: -71 [ 381.697473][ T4267] usbhid: probe of 4-1:0.0 failed with error -71 [ 381.698081][ T4907] device batadv_slave_1 entered promiscuous mode [ 381.711946][ T4906] device batadv_slave_1 left promiscuous mode [ 381.751778][ T4322] usb 3-1: config 0 descriptor?? [ 381.770386][ T4267] usb 4-1: USB disconnect, device number 4 [ 383.271622][ T4926] loop1: detected capacity change from 0 to 512 [ 383.385401][ T4926] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.163: bad orphan inode 13 [ 383.410185][ T4322] hid-generic 0003:05AC:029F.0007: unknown main item tag 0x0 [ 383.438488][ T4322] hid-generic 0003:05AC:029F.0007: unknown main item tag 0x0 [ 383.457554][ T4267] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 383.465096][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 383.485567][ T4926] ext4_test_bit(bit=12, block=4) = 1 [ 383.485780][ T4322] hid-generic 0003:05AC:029F.0007: hidraw0: USB HID v8.00 Device [HID 05ac:029f] on usb-dummy_hcd.2-1/input0 [ 383.491065][ T4926] is_bad_inode(inode)=0 [ 383.513373][ T4926] NEXT_ORPHAN(inode)=0 [ 383.521453][ T4926] max_ino=32 [ 383.524821][ T4926] i_nlink=1 [ 383.535007][ T4926] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.621502][ T4201] usb 3-1: USB disconnect, device number 8 [ 383.727744][ T4267] usb 4-1: Using ep0 maxpacket: 16 [ 383.856345][ T4935] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.163: Unrecognised inode hash code 20 [ 383.868038][ T4935] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.163: Corrupt directory, running e2fsck is recommended [ 383.882754][ T4935] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.163: Unrecognised inode hash code 20 [ 383.894223][ T4935] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.163: Corrupt directory, running e2fsck is recommended [ 383.918590][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 384.068408][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.214919][ T21] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.244706][ T4934] fido_id[4934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 384.330700][ T21] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 384.387386][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.447538][ T4267] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.463442][ T4267] usb 4-1: config 0 interface 0 has no altsetting 0 [ 384.463497][ T21] usb 6-1: config 0 descriptor?? [ 384.470425][ T4267] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 384.484828][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.501607][ T4267] usb 4-1: config 0 descriptor?? [ 384.546344][ T4943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 385.217512][ T4323] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 385.256172][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0008/input/input14 [ 385.607404][ T4323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.645020][ T21] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 385.687365][ T4323] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.721846][ T4267] hid-generic 0003:0458:5014.0009: unknown main item tag 0x0 [ 385.729694][ T4267] hid-generic 0003:0458:5014.0009: unknown main item tag 0x0 [ 385.737469][ T4267] hid-generic 0003:0458:5014.0009: unknown main item tag 0x0 [ 385.744891][ T4267] hid-generic 0003:0458:5014.0009: unknown main item tag 0x0 [ 385.756291][ T4267] hid-generic 0003:0458:5014.0009: unknown main item tag 0x0 [ 385.764169][ T4267] hid-generic 0003:0458:5014.0009: unknown main item tag 0x0 [ 385.775932][ T4267] hid-generic 0003:0458:5014.0009: unknown main item tag 0x0 [ 385.783413][ T4267] hid-generic 0003:0458:5014.0009: unknown main item tag 0x0 [ 385.794131][ T21] usb 6-1: USB disconnect, device number 2 [ 385.803221][ T4267] hid-generic 0003:0458:5014.0009: hidraw1: USB HID v0.08 Device [HID 0458:5014] on usb-dummy_hcd.3-1/input0 [ 385.852030][ T4267] usb 4-1: USB disconnect, device number 5 [ 385.857846][ T4323] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 385.872362][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 385.925470][ T4323] usb 5-1: SerialNumber: syz [ 386.841790][ T4323] usb 5-1: 0:2 : does not exist [ 386.849927][ T4323] usb 5-1: unit 5: unexpected type 0x0a [ 386.942636][ T4323] usb 5-1: USB disconnect, device number 4 [ 387.261451][ T4975] fido_id[4975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 387.372218][ T4977] fido_id[4977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 387.407627][ T4988] loop1: detected capacity change from 0 to 512 [ 387.482063][ T4203] udevd[4203]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.606800][ T4988] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.175: bad orphan inode 13 [ 387.622395][ T4988] ext4_test_bit(bit=12, block=4) = 1 [ 387.628250][ T4988] is_bad_inode(inode)=0 [ 387.632435][ T4988] NEXT_ORPHAN(inode)=0 [ 387.638823][ T4988] max_ino=32 [ 387.644803][ T4988] i_nlink=1 [ 387.649187][ T4988] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 387.939954][ T5002] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.175: Unrecognised inode hash code 20 [ 387.951444][ T5002] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.175: Corrupt directory, running e2fsck is recommended [ 387.965281][ T5002] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.175: Unrecognised inode hash code 20 [ 387.976789][ T5002] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.175: Corrupt directory, running e2fsck is recommended [ 390.500389][ T5024] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 390.927470][ T4323] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 391.167479][ T4323] usb 5-1: Using ep0 maxpacket: 32 [ 391.287391][ T4323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.307866][ T4323] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 391.316975][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.412138][ T4323] usb 5-1: config 0 descriptor?? [ 391.516724][ T4323] rndis_host: probe of 5-1:0.0 failed with error -22 [ 391.865117][ T4323] usb 5-1: USB disconnect, device number 5 [ 392.273485][ T5065] loop3: detected capacity change from 0 to 256 [ 394.962331][ T4323] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 395.342923][ T4323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 395.425635][ T4323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.639234][ T4323] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 395.765092][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.880022][ T4323] usb 6-1: config 0 descriptor?? [ 396.088066][ T4323] usb 6-1: can't set config #0, error -71 [ 396.095401][ T4323] usb 6-1: USB disconnect, device number 3 [ 396.161131][ T5109] binder: 5108:5109 ioctl c0306201 2000000003c0 returned -14 [ 396.967478][ T4267] Bluetooth: hci6: command 0x0405 tx timeout [ 399.047425][ T13] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 399.498480][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.608094][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.858164][ T13] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 399.902328][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 399.957283][ T13] usb 3-1: SerialNumber: syz [ 400.310221][ T13] usb 3-1: 0:2 : does not exist [ 402.362830][ T13] usb 3-1: USB disconnect, device number 9 [ 402.588840][ T4231] udevd[4231]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.067320][ T4769] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 403.103392][ T5207] overlayfs: failed to get inode (-116) [ 403.157931][ T5207] overlayfs: failed to get inode (-116) [ 403.347555][ T4769] usb 3-1: Using ep0 maxpacket: 32 [ 403.477698][ T4769] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.682750][ T4769] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.705324][ T4769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.723575][ T4769] usb 3-1: Product: syz [ 403.738516][ T4769] usb 3-1: Manufacturer: syz [ 403.743242][ T4769] usb 3-1: SerialNumber: syz [ 404.725694][ T5246] loop5: detected capacity change from 0 to 512 [ 404.747686][ T4769] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 404.793076][ T4769] cdc_ncm 3-1:1.0: bind() failure [ 404.801689][ T4769] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 404.853629][ T5246] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.239: bad orphan inode 13 [ 404.864222][ T5246] ext4_test_bit(bit=12, block=4) = 1 [ 404.872575][ T5246] is_bad_inode(inode)=0 [ 404.873834][ T4769] cdc_ncm 3-1:1.1: bind() failure [ 404.876939][ T5246] NEXT_ORPHAN(inode)=0 [ 404.885926][ T5246] max_ino=32 [ 404.889733][ T5246] i_nlink=1 [ 404.892920][ T5246] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 404.926912][ T5258] binder: 5257:5258 ioctl 4018620d 0 returned -22 [ 405.106035][ T4769] usb 3-1: USB disconnect, device number 10 [ 405.210373][ T5260] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.239: Unrecognised inode hash code 20 [ 405.221936][ T5260] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.239: Corrupt directory, running e2fsck is recommended [ 405.236588][ T5260] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.239: Unrecognised inode hash code 20 [ 405.248221][ T5260] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.239: Corrupt directory, running e2fsck is recommended [ 407.157415][ T4267] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 407.237446][ T13] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 407.397463][ T4267] usb 5-1: Using ep0 maxpacket: 16 [ 407.557576][ T4267] usb 5-1: unable to get BOS descriptor or descriptor too short [ 407.597496][ T13] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.605641][ T13] usb 6-1: config 0 has no interface number 0 [ 407.615639][ T5310] loop1: detected capacity change from 0 to 512 [ 407.626383][ T13] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.657640][ T4267] usb 5-1: config 192 has an invalid interface number: 225 but max is 0 [ 407.666353][ T4267] usb 5-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 407.680976][ T13] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.717353][ T13] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.740864][ T4267] usb 5-1: config 192 has no interface number 0 [ 407.743588][ T5310] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.256: bad orphan inode 13 [ 407.754529][ T13] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 407.767619][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.884628][ T5310] ext4_test_bit(bit=12, block=4) = 1 [ 407.892823][ T13] usb 6-1: config 0 descriptor?? [ 407.907671][ T4267] usb 5-1: New USB device found, idVendor=0421, idProduct=0481, bcdDevice=bf.2b [ 407.925832][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.932843][ T5310] is_bad_inode(inode)=0 [ 407.939130][ T5310] NEXT_ORPHAN(inode)=0 [ 407.943227][ T5310] max_ino=32 [ 407.946435][ T5310] i_nlink=1 [ 407.950335][ T5310] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 407.982636][ T4267] usb 5-1: Product: syz [ 407.990112][ T4267] usb 5-1: Manufacturer: syz [ 407.995013][ T4267] usb 5-1: SerialNumber: syz [ 408.002344][ T5320] netlink: 'syz.3.257': attribute type 11 has an invalid length. [ 408.265198][ T5331] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.256: Unrecognised inode hash code 20 [ 408.276723][ T5331] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.256: Corrupt directory, running e2fsck is recommended [ 408.290634][ T5331] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.256: Unrecognised inode hash code 20 [ 408.302820][ T5331] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.256: Corrupt directory, running e2fsck is recommended [ 408.826545][ T4267] rndis_wlan 5-1:192.225: skipping garbage [ 408.835500][ T13] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.000A/input/input15 [ 408.850505][ T4267] usb 5-1: bad CDC descriptors [ 408.901908][ T4267] rndis_host 5-1:192.225: skipping garbage [ 408.931927][ T4267] usb 5-1: bad CDC descriptors [ 409.027488][ T4288] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 409.095682][ T13] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.000A/input/input16 [ 409.109749][ T4267] cdc_acm 5-1:192.225: Zero length descriptor references [ 409.116826][ T4267] cdc_acm: probe of 5-1:192.225 failed with error -22 [ 409.127583][ T13] uclogic 0003:28BD:0042.000A: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 409.628106][ T4288] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 409.757788][ T4288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.765985][ T4288] usb 4-1: Product: syz [ 409.779465][ T4288] usb 4-1: Manufacturer: syz [ 409.811822][ T4288] usb 4-1: SerialNumber: syz [ 409.853540][ T4288] usb 4-1: config 0 descriptor?? [ 409.902566][ T4267] usb 5-1: USB disconnect, device number 6 [ 409.929192][ T13] usb 6-1: USB disconnect, device number 4 [ 410.177077][ T5367] fido_id[5367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 410.287485][ T4201] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 410.577618][ T4201] usb 3-1: Using ep0 maxpacket: 32 [ 410.698572][ T4201] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 410.822939][ T4201] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 410.878591][ T4201] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 410.938217][ T4201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 411.027602][ T4201] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 411.061257][ T4201] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 411.116174][ T4201] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 411.143529][ T5378] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 411.166910][ T4201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.167458][ T5378] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 411.204571][ T4201] usb 3-1: config 0 descriptor?? [ 411.257605][ T4288] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 411.288413][ T4288] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 411.363553][ T4288] asix: probe of 4-1:0.0 failed with error -71 [ 411.397546][ T4288] usb 4-1: USB disconnect, device number 6 [ 411.469352][ T4201] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 411.603395][ T5401] usb usb8: usbfs: process 5401 (syz.1.270) did not claim interface 0 before use [ 411.680270][ T4288] usb 3-1: USB disconnect, device number 11 [ 411.707307][ C1] usblp0: nonzero read bulk status received: -108 [ 411.880863][ T5365] usblp0: removed [ 411.937646][ T4260] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 412.138021][ T5427] tipc: Can't bind to reserved service type 2 [ 412.193579][ T4260] usb 6-1: Using ep0 maxpacket: 16 [ 412.257974][ T4769] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 412.317627][ T4260] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 412.333106][ T4260] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.343761][ T4260] usb 6-1: config 1 has no interface number 0 [ 412.350534][ T4260] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 412.364022][ T4260] usb 6-1: config 1 interface 105 has no altsetting 0 [ 412.530691][ T4769] usb 2-1: Using ep0 maxpacket: 32 [ 412.547757][ T4260] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 412.562623][ T4260] usb 6-1: New USB device strings: Mfr=1, Product=35, SerialNumber=3 [ 412.572268][ T4260] usb 6-1: Product: syz [ 412.576538][ T4260] usb 6-1: Manufacturer: syz [ 412.581750][ T4260] usb 6-1: SerialNumber: syz [ 412.665264][ T4769] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 412.693986][ T4769] usb 2-1: config 0 has no interface number 0 [ 412.724339][ T4769] usb 2-1: config 0 interface 184 has no altsetting 0 [ 412.782876][ T5242] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 412.893067][ T4260] aqc111: probe of 6-1:1.105 failed with error -22 [ 412.908099][ T4769] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 412.933924][ T4769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.953190][ T4769] usb 2-1: Product: syz [ 412.957472][ T4201] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 412.965572][ T4769] usb 2-1: Manufacturer: syz [ 412.970690][ T4769] usb 2-1: SerialNumber: syz [ 412.983613][ T4769] usb 2-1: config 0 descriptor?? [ 413.052731][ T4769] smsc75xx v1.0.0 [ 413.095650][ T4260] usb 6-1: USB disconnect, device number 5 [ 413.197296][ T4201] usb 3-1: Using ep0 maxpacket: 16 [ 413.242612][ T5242] usb 4-1: config 5 has an invalid interface number: 19 but max is 0 [ 413.263926][ T5242] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 413.291278][ T5242] usb 4-1: config 5 has no interface number 0 [ 413.308979][ T5242] usb 4-1: config 5 interface 19 has no altsetting 0 [ 413.317605][ T4201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.334337][ T4201] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 413.358020][ T4201] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 413.367186][ T4201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.378230][ T4201] usb 3-1: config 0 descriptor?? [ 413.483340][ T5242] usb 4-1: New USB device found, idVendor=0bda, idProduct=ffef, bcdDevice=89.d6 [ 413.502668][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.532552][ T5242] usb 4-1: Product: syz [ 413.546957][ T5242] usb 4-1: Manufacturer: syz [ 413.552945][ T5242] usb 4-1: SerialNumber: syz [ 413.687428][ T4769] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 413.706395][ T4769] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 413.859258][ T4201] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 413.873374][ T4201] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 413.883340][ T4201] microsoft 0003:045E:07DA.000B: usage index exceeded [ 413.899597][ T4201] microsoft 0003:045E:07DA.000B: item 0 4 2 0 parsing failed [ 413.903699][ T5242] usb 4-1: bad CDC descriptors [ 413.914228][ T5242] usb 4-1: bad CDC descriptors [ 413.932849][ T4201] microsoft 0003:045E:07DA.000B: parse failed [ 413.939093][ T4201] microsoft: probe of 0003:045E:07DA.000B failed with error -22 [ 413.941637][ T5242] usb 4-1: USB disconnect, device number 7 [ 414.047431][ T5495] loop4: detected capacity change from 0 to 512 [ 414.077593][ T4201] usb 3-1: USB disconnect, device number 12 [ 414.113481][ T5495] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.291: bad orphan inode 13 [ 414.186880][ T5495] ext4_test_bit(bit=12, block=4) = 1 [ 414.209436][ T5495] is_bad_inode(inode)=0 [ 414.213725][ T5495] NEXT_ORPHAN(inode)=0 [ 414.218178][ T5495] max_ino=32 [ 414.221488][ T5495] i_nlink=1 [ 414.224774][ T5495] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 414.484256][ T5500] 9pnet: p9_fd_create_tcp (5500): problem connecting socket to 127.0.0.1 [ 414.573699][ T5501] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.291: Unrecognised inode hash code 20 [ 414.585885][ T5501] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.291: Corrupt directory, running e2fsck is recommended [ 414.599884][ T5501] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.291: Unrecognised inode hash code 20 [ 414.611278][ T5501] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.291: Corrupt directory, running e2fsck is recommended [ 415.305982][ T26] audit: type=1326 audit(1751222205.882:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.5.297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f18da7929 code=0x0 [ 415.658893][ T4769] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 415.676628][ T4769] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 415.696933][ T4769] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 415.714373][ T4769] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 415.732968][ T4769] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 415.755305][ T4769] usb 2-1: USB disconnect, device number 10 [ 416.174185][ T5541] loop4: detected capacity change from 0 to 512 [ 416.289413][ T5541] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.307: bad orphan inode 13 [ 416.317758][ T5541] ext4_test_bit(bit=12, block=4) = 1 [ 416.323438][ T5541] is_bad_inode(inode)=0 [ 416.397382][ T5541] NEXT_ORPHAN(inode)=0 [ 416.401605][ T5541] max_ino=32 [ 416.404827][ T5541] i_nlink=1 [ 416.419127][ T5541] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.726647][ T5556] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.307: Unrecognised inode hash code 20 [ 416.738207][ T5556] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.307: Corrupt directory, running e2fsck is recommended [ 416.751940][ T5556] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.307: Unrecognised inode hash code 20 [ 416.763341][ T5556] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.307: Corrupt directory, running e2fsck is recommended [ 417.563976][ T5564] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 417.598035][ T5564] kvm: pic: non byte read [ 417.609339][ T5564] kvm: pic: non byte read [ 417.619622][ T5564] kvm: pic: non byte read [ 417.624728][ T5564] kvm: pic: non byte read [ 417.926617][ T5585] ======================================================= [ 417.926617][ T5585] WARNING: The mand mount option has been deprecated and [ 417.926617][ T5585] and is ignored by this kernel. Remove the mand [ 417.926617][ T5585] option from the mount to silence this warning. [ 417.926617][ T5585] ======================================================= [ 418.085277][ T5595] loop1: detected capacity change from 0 to 512 [ 418.124913][ T5595] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.326: bad orphan inode 13 [ 418.137798][ T5595] ext4_test_bit(bit=12, block=4) = 1 [ 418.143125][ T5595] is_bad_inode(inode)=0 [ 418.174223][ T5595] NEXT_ORPHAN(inode)=0 [ 418.213215][ T5595] max_ino=32 [ 418.241413][ T5595] i_nlink=1 [ 418.259446][ T5595] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 418.581388][ T5603] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.326: Unrecognised inode hash code 20 [ 418.592813][ T5603] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.326: Corrupt directory, running e2fsck is recommended [ 418.606513][ T5603] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.326: Unrecognised inode hash code 20 [ 418.617935][ T5603] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.326: Corrupt directory, running e2fsck is recommended [ 419.020641][ T4570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.204976][ T4570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.336106][ T4570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.441964][ T4570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.487284][ T13] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 419.797540][ T5242] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 419.974241][ T4288] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 420.002210][ T13] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 420.011064][ T13] usb 6-1: config 0 has no interface number 0 [ 420.017256][ T13] usb 6-1: config 0 interface 41 has no altsetting 0 [ 420.027000][ T4570] tipc: Left network mode [ 420.066370][ T5620] chnl_net:caif_netlink_parms(): no params data found [ 420.198132][ T5242] usb 4-1: config 0 has no interfaces? [ 420.230347][ T5242] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 420.257532][ T4288] usb 3-1: Using ep0 maxpacket: 8 [ 420.335953][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.378084][ T4288] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 420.416630][ T4288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.505316][ T5242] usb 4-1: config 0 descriptor?? [ 420.539098][ T4288] usb 3-1: config 0 descriptor?? [ 420.877516][ T13] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 420.886935][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.895348][ T13] usb 6-1: Product: syz [ 420.899815][ T13] usb 6-1: Manufacturer: syz [ 420.904446][ T13] usb 6-1: SerialNumber: syz [ 420.920843][ T13] usb 6-1: config 0 descriptor?? [ 420.931103][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.946395][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.954912][ T5620] device bridge_slave_0 entered promiscuous mode [ 420.976664][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.984324][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.001682][ T5620] device bridge_slave_1 entered promiscuous mode [ 421.029000][ T5645] fuse: Bad value for 'fd' [ 421.032636][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.091674][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.129140][ T5620] team0: Port device team_slave_0 added [ 421.138752][ T5620] team0: Port device team_slave_1 added [ 421.162300][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.171177][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.207731][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.228658][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.235853][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.263708][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.358808][ T5620] device hsr_slave_0 entered promiscuous mode [ 421.376433][ T5620] device hsr_slave_1 entered promiscuous mode [ 421.402147][ T5620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.417507][ T5620] Cannot create hsr debugfs directory [ 421.688929][ T4201] Bluetooth: hci0: command 0x0409 tx timeout [ 421.736864][ T4570] device hsr_slave_0 left promiscuous mode [ 421.766821][ T4570] device hsr_slave_1 left promiscuous mode [ 421.784967][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.793371][ T5674] loop1: detected capacity change from 0 to 512 [ 421.796278][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.810240][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.824893][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.835070][ T4570] device bridge_slave_1 left promiscuous mode [ 421.855104][ T13] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 421.874840][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.885917][ T4570] device bridge_slave_0 left promiscuous mode [ 421.902441][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.929175][ T4570] device veth1_macvtap left promiscuous mode [ 421.945709][ T4570] device veth0_macvtap left promiscuous mode [ 421.947092][ T5674] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.342: bad orphan inode 13 [ 421.952874][ T4570] device veth1_vlan left promiscuous mode [ 421.984897][ T4570] device veth0_vlan left promiscuous mode [ 421.989623][ T5674] ext4_test_bit(bit=12, block=4) = 1 [ 422.008607][ T5674] is_bad_inode(inode)=0 [ 422.012797][ T5674] NEXT_ORPHAN(inode)=0 [ 422.016876][ T5674] max_ino=32 [ 422.021464][ T5674] i_nlink=1 [ 422.024673][ T5674] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 422.327821][ T5682] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.342: Unrecognised inode hash code 20 [ 422.339561][ T5682] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.342: Corrupt directory, running e2fsck is recommended [ 422.353368][ T5682] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.342: Unrecognised inode hash code 20 [ 422.364775][ T5682] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.342: Corrupt directory, running e2fsck is recommended [ 422.715462][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 422.728760][ T4201] usb 4-1: USB disconnect, device number 8 [ 422.775518][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 422.848187][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.871073][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.927397][ T4288] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 422.939499][ T4288] asix: probe of 3-1:0.0 failed with error -71 [ 422.959333][ T4288] usb 3-1: USB disconnect, device number 13 [ 423.102554][ T4570] bond0 (unregistering): Released all slaves [ 423.310486][ T5620] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 423.358956][ T5620] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 423.367447][ T13] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 423.391317][ T13] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 423.405560][ T13] CoreChips: probe of 6-1:0.41 failed with error -71 [ 423.443869][ T13] usb 6-1: USB disconnect, device number 6 [ 423.463084][ T5620] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 423.507215][ T5620] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.546289][ T5703] netlink: 'syz.1.350': attribute type 27 has an invalid length. [ 423.617545][ T4201] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 423.799816][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 423.877462][ T4201] usb 3-1: Using ep0 maxpacket: 16 [ 424.027456][ T4201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.068881][ T4201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.114933][ T4201] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.139542][ T4201] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 424.155991][ T4201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.202369][ T4201] usb 3-1: config 0 descriptor?? [ 424.251611][ T5703] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.260140][ T5703] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.487356][ T4567] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 424.721853][ T4201] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 424.739519][ T4201] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 424.756678][ T4201] microsoft 0003:045E:07DA.000C: no inputs found [ 424.765106][ T4201] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 424.776749][ T5703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.800594][ T5703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.847552][ T4567] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.862746][ T4567] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.944149][ T4274] usb 3-1: USB disconnect, device number 14 [ 425.027523][ T4567] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 425.043067][ T4567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.051381][ T4567] usb 6-1: Product: syz [ 425.055565][ T4567] usb 6-1: Manufacturer: syz [ 425.066832][ T4567] usb 6-1: SerialNumber: syz [ 425.370189][ T5703] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.379296][ T5703] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.388592][ T5703] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.398069][ T5703] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.408400][ T4567] usb 6-1: 0:2 : does not exist [ 425.446490][ T4567] usb 6-1: USB disconnect, device number 7 [ 425.716797][ T5703] syz.1.350 (5703) used greatest stack depth: 20480 bytes left [ 425.857824][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 425.879776][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.925100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.948071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.989620][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.057719][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 426.099348][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 426.147663][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.154812][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.201709][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 426.238389][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 426.304426][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 426.338396][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.345617][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.383815][ T5759] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 426.403069][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 426.437391][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 426.446440][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.487594][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.496207][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.504487][ T5759] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 426.532852][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.573888][ T5620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 426.601360][ T5620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.633173][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.649050][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.684870][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.720492][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 426.761429][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.819690][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 427.267634][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.279151][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.313722][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.596210][ T5825] binder: 5823:5825 ioctl 4018620d 0 returned -22 [ 427.855097][ T5841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.382'. [ 428.090178][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 428.116323][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.126213][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 428.146365][ T5620] device veth0_vlan entered promiscuous mode [ 428.153492][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 428.162711][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 428.176727][ T5620] device veth1_vlan entered promiscuous mode [ 428.183554][ T4215] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 428.195869][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.205231][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 428.213704][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 428.242175][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 428.258865][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 428.268361][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 428.286892][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 428.306522][ T5620] device veth0_macvtap entered promiscuous mode [ 428.320311][ T5620] device veth1_macvtap entered promiscuous mode [ 428.365411][ T5620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.383511][ T5620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.394880][ T5620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.411528][ T5620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.422906][ T5620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.439365][ T5620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.456254][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.481929][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 428.498328][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 428.509660][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 428.518167][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 428.534275][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.555510][ T5620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.577959][ T4215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.589168][ T5620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.607364][ T4215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.627400][ T5620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.647359][ T4215] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 428.667527][ T13] usb 2-1: config index 0 descriptor too short (expected 50204, got 796) [ 428.676163][ T13] usb 2-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 428.684551][ T5620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.695609][ T4215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.714019][ T5620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.715862][ T13] usb 2-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 428.741412][ T4215] usb 4-1: config 0 descriptor?? [ 428.759949][ T5620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.760583][ T13] usb 2-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 428.801771][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.816806][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 428.831658][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 428.848447][ T5620] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.863482][ T5620] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.873194][ T5620] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.891764][ T5620] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.957652][ T13] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 428.988087][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.011216][ T13] usb 2-1: Product: syz [ 429.034806][ T13] usb 2-1: Manufacturer: syz [ 429.039957][ T13] usb 2-1: SerialNumber: syz [ 429.128023][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.166896][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.210490][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.225325][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 429.234691][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.247709][ T4215] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 429.252561][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 429.369281][ T1325] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 429.397764][ T13] usb 2-1: USB disconnect, device number 11 [ 429.447480][ T4215] playstation 0003:054C:0DF2.000D: Failed to retrieve feature with reportID 9: -71 [ 429.456843][ T4215] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense pairing info: -71 [ 429.494447][ T4215] playstation 0003:054C:0DF2.000D: Failed to get MAC address from DualSense [ 429.522238][ T4215] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 429.539302][ T4215] playstation: probe of 0003:054C:0DF2.000D failed with error -71 [ 429.575328][ T4215] usb 4-1: USB disconnect, device number 9 [ 429.744541][ T5892] fido_id[5892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 429.787686][ T1325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.815117][ T1325] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 429.848795][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.869637][ T1325] usb 6-1: config 0 descriptor?? [ 430.360758][ T1325] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 430.758537][ T5932] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 430.777489][ T4323] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 430.792192][ T5932] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 431.017460][ T4323] usb 3-1: Using ep0 maxpacket: 32 [ 431.157551][ T4323] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 431.165765][ T4323] usb 3-1: config 0 has no interface number 0 [ 431.199087][ T4323] usb 3-1: config 0 interface 184 has no altsetting 0 [ 431.237770][ T1325] lenovo 0003:17EF:6047.000E: Sensitivity setting failed: -71 [ 431.255734][ T1325] usb 6-1: USB disconnect, device number 8 [ 431.362354][ T4323] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 431.392106][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.427321][ T4323] usb 3-1: Product: syz [ 431.431572][ T4323] usb 3-1: Manufacturer: syz [ 431.456571][ T4323] usb 3-1: SerialNumber: syz [ 431.464295][ T5980] fido_id[5980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 431.502456][ T4323] usb 3-1: config 0 descriptor?? [ 431.548532][ T4323] smsc75xx v1.0.0 [ 431.883908][ T6004] netlink: 'syz.5.417': attribute type 27 has an invalid length. [ 431.977421][ T4567] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 432.237340][ T4567] usb 2-1: Using ep0 maxpacket: 8 [ 432.359461][ T4567] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 432.369129][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 432.378493][ T4567] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 10 [ 432.390115][ T4567] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 24929, setting to 1024 [ 432.401615][ T4567] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 432.411419][ T4567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.427420][ T4323] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 432.452004][ T4323] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 432.477427][ T4323] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 432.492402][ T4323] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 432.502451][ T4323] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 432.513327][ T4323] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 432.526407][ T4323] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 432.541993][ T4323] usb 3-1: USB disconnect, device number 15 [ 432.607347][ T21] usb 7-1: Using ep0 maxpacket: 16 [ 432.727602][ T4567] usb 2-1: string descriptor 0 read error: -71 [ 432.737571][ T21] usb 7-1: config 0 has no interfaces? [ 432.776158][ T4567] usb 2-1: USB disconnect, device number 12 [ 432.789797][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.797549][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.897498][ T21] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.912748][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.927528][ T21] usb 7-1: Product: syz [ 432.941943][ T21] usb 7-1: Manufacturer: syz [ 432.952052][ T21] usb 7-1: SerialNumber: syz [ 432.970928][ T21] usb 7-1: config 0 descriptor?? [ 433.029173][ T4230] udevd[4230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.256405][ T4260] usb 7-1: USB disconnect, device number 2 [ 434.222967][ T6032] binder: 6031:6032 ioctl c0306201 0 returned -14 [ 434.467342][ T4274] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 434.578594][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.645522][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.720274][ T4274] usb 2-1: Using ep0 maxpacket: 8 [ 434.851361][ T4274] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 434.870383][ T4274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.906975][ T4274] usb 2-1: config 0 descriptor?? [ 435.242383][ T6048] loop2: detected capacity change from 0 to 512 [ 435.392762][ T6048] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.433: bad orphan inode 13 [ 435.419357][ T4274] prodikeys 0003:041E:2801.000F: unknown main item tag 0x4 [ 435.437141][ T6004] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.444494][ T4274] prodikeys 0003:041E:2801.000F: item fetching failed at offset 4/5 [ 435.446563][ T6004] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.464255][ T6004] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.467501][ T6048] ext4_test_bit(bit=12, block=4) = 1 [ 435.473356][ T6004] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.513971][ T6048] is_bad_inode(inode)=0 [ 435.516807][ T4274] prodikeys 0003:041E:2801.000F: hid parse failed [ 435.527408][ T6048] NEXT_ORPHAN(inode)=0 [ 435.531505][ T6048] max_ino=32 [ 435.534712][ T6048] i_nlink=1 [ 435.545242][ T4274] prodikeys: probe of 0003:041E:2801.000F failed with error -22 [ 435.548857][ T6048] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.671126][ T21] usb 2-1: USB disconnect, device number 13 [ 435.894423][ T6060] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.433: Unrecognised inode hash code 20 [ 435.905978][ T6060] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.433: Corrupt directory, running e2fsck is recommended [ 435.919673][ T6060] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.433: Unrecognised inode hash code 20 [ 435.931039][ T6060] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.433: Corrupt directory, running e2fsck is recommended [ 437.447697][ T4215] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 437.717634][ T4215] usb 4-1: Using ep0 maxpacket: 32 [ 437.858478][ T4215] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 437.876923][ T4215] usb 4-1: config 0 has no interface number 0 [ 437.917482][ T4260] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 438.048604][ T4215] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 438.086510][ T4215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.105320][ T4215] usb 4-1: Product: syz [ 438.109894][ T4215] usb 4-1: Manufacturer: syz [ 438.114523][ T4215] usb 4-1: SerialNumber: syz [ 438.146049][ T4215] usb 4-1: config 0 descriptor?? [ 438.188378][ T4215] smsc95xx v2.0.0 [ 438.287597][ T4260] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.315263][ T4260] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.325668][ T4260] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 438.336285][ T4260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.358908][ T4260] usb 6-1: config 0 descriptor?? [ 438.633142][ T4215] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 438.665049][ T4215] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 438.683491][ T6148] binder: 6143:6148 ioctl c0306201 200000000380 returned -14 [ 438.737175][ T6143] page:ffffea00015494c0 refcount:4 mapcount:1 mapping:ffff8880798747b8 index:0x0 pfn:0x55253 [ 438.748048][ T6143] memcg:ffff888076ee0000 [ 438.752307][ T6143] aops:shmem_aops ino:43a [ 438.756665][ T6143] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 438.766510][ T6143] raw: 00fff00000080015 ffffea0001687088 ffffea0001c5f2c8 ffff8880798747b8 [ 438.775113][ T6143] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888076ee0000 [ 438.783710][ T6143] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 438.790911][ T6143] page_owner tracks the page as allocated [ 438.796634][ T6143] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 6148, ts 438682214692, free_ts 438673679091 [ 438.811410][ T6143] get_page_from_freelist+0x1b77/0x1c60 [ 438.816974][ T6143] __alloc_pages+0x1e1/0x470 [ 438.821587][ T6143] alloc_pages_vma+0x393/0x7c0 [ 438.826368][ T6143] shmem_alloc_and_acct_page+0x427/0xb70 [ 438.832015][ T6143] shmem_getpage_gfp+0x14f4/0x2d40 [ 438.837144][ T6143] shmem_read_mapping_page_gfp+0x96/0x100 [ 438.842880][ T6143] udmabuf_create+0x878/0x1540 [ 438.847671][ T6143] udmabuf_ioctl+0x1d1/0x2c0 [ 438.852285][ T6143] __se_sys_ioctl+0xfa/0x170 [ 438.856907][ T6143] do_syscall_64+0x4c/0xa0 [ 438.861349][ T6143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.867260][ T6143] page last free stack trace: [ 438.871952][ T6143] free_unref_page_prepare+0x637/0x6c0 [ 438.877424][ T6143] free_unref_page_list+0x122/0x7e0 [ 438.882642][ T6143] release_pages+0x184b/0x1bb0 [ 438.887431][ T6143] tlb_finish_mmu+0x164/0x2e0 [ 438.892119][ T6143] exit_mmap+0x3a6/0x5f0 [ 438.896381][ T6143] __mmput+0x115/0x3b0 [ 438.900476][ T6143] exit_mm+0x567/0x6c0 [ 438.904555][ T6143] do_exit+0x5a1/0x20a0 [ 438.908721][ T6143] do_group_exit+0x12e/0x300 [ 438.913435][ T6143] __x64_sys_exit_group+0x3b/0x40 [ 438.918480][ T6143] do_syscall_64+0x4c/0xa0 [ 438.922904][ T6143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.928923][ T6143] ------------[ cut here ]------------ [ 438.934381][ T6143] kernel BUG at mm/filemap.c:166! [ 438.939449][ T6143] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 438.945533][ T6143] CPU: 1 PID: 6143 Comm: syz.1.461 Not tainted 5.15.186-syzkaller #0 [ 438.953619][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.963774][ T6143] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 438.970204][ T6143] Code: e8 29 5b da ff 4c 89 f7 48 c7 c6 c0 fa 12 8a e8 aa db 0d 00 0f 0b e8 13 5b da ff 4c 89 f7 48 c7 c6 00 fb 12 8a e8 94 db 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 5a da ff eb 5d e8 f1 5a da ff 4c 89 f7 [ 438.989824][ T6143] RSP: 0018:ffffc9000312f688 EFLAGS: 00010046 [ 438.995929][ T6143] RAX: 95b7dace68968400 RBX: 0000000000000000 RCX: ffff88807b920000 [ 439.003919][ T6143] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 439.011896][ T6143] RBP: 1ffffd40002a9299 R08: dffffc0000000000 R09: ffffed1017224f24 [ 439.019876][ T6143] R10: ffffed1017224f24 R11: 1ffff11017224f23 R12: ffffea00015494c0 [ 439.027861][ T6143] R13: dffffc0000000000 R14: ffffea00015494c0 R15: ffffea00015494c8 [ 439.035844][ T6143] FS: 0000555560438500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 439.044783][ T6143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.051395][ T6143] CR2: 000000110c2f96fc CR3: 000000007494f000 CR4: 00000000003506e0 [ 439.059381][ T6143] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 439.067366][ T6143] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 439.075352][ T6143] Call Trace: [ 439.078634][ T6143] [ 439.081572][ T6143] __delete_from_page_cache+0xbf/0x6b0 [ 439.087045][ T6143] ? _raw_spin_lock_irq+0x7a/0xe0 [ 439.092083][ T6143] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 439.099122][ T6143] ? _raw_spin_lock_irq+0xab/0xe0 [ 439.104172][ T6143] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 439.109558][ T6143] ? unmap_mapping_page+0x26b/0x320 [ 439.114773][ T6143] ? page_mapping+0x30e/0x440 [ 439.119455][ T6143] delete_from_page_cache+0x121/0x190 [ 439.124836][ T6143] truncate_inode_page+0x8d/0xb0 [ 439.129789][ T6143] shmem_undo_range+0x49b/0x1840 [ 439.134774][ T6143] ? __lock_acquire+0x13ad/0x7c60 [ 439.139817][ T6143] ? shmem_truncate_range+0xa0/0xa0 [ 439.145043][ T6143] ? do_raw_spin_lock+0x11d/0x280 [ 439.150077][ T6143] ? __rwlock_init+0x140/0x140 [ 439.154852][ T6143] shmem_evict_inode+0x20d/0xa00 [ 439.159806][ T6143] ? _raw_spin_unlock+0x24/0x40 [ 439.164661][ T6143] ? inode_wait_for_writeback+0x1b0/0x200 [ 439.170386][ T6143] ? shmem_free_in_core_inode+0xb0/0xb0 [ 439.175942][ T6143] ? do_raw_spin_lock+0x11d/0x280 [ 439.180979][ T6143] ? bit_waitqueue+0x30/0x30 [ 439.185580][ T6143] ? do_raw_spin_unlock+0x11d/0x230 [ 439.190788][ T6143] ? shmem_free_in_core_inode+0xb0/0xb0 [ 439.196349][ T6143] evict+0x485/0x870 [ 439.200255][ T6143] ? proc_nr_inodes+0x320/0x320 [ 439.205111][ T6143] ? do_raw_spin_unlock+0x11d/0x230 [ 439.210313][ T6143] ? _raw_spin_unlock+0x24/0x40 [ 439.215184][ T6143] __dentry_kill+0x431/0x650 [ 439.219786][ T6143] dentry_kill+0xb8/0x290 [ 439.224126][ T6143] dput+0xd8/0x1a0 [ 439.227860][ T6143] __fput+0x5ee/0x930 [ 439.231855][ T6143] task_work_run+0x125/0x1a0 [ 439.236461][ T6143] exit_to_user_mode_loop+0x10f/0x130 [ 439.241845][ T6143] exit_to_user_mode_prepare+0xb1/0x140 [ 439.247413][ T6143] syscall_exit_to_user_mode+0x16/0x40 [ 439.252889][ T6143] do_syscall_64+0x58/0xa0 [ 439.257336][ T6143] ? clear_bhb_loop+0x30/0x80 [ 439.262025][ T6143] ? clear_bhb_loop+0x30/0x80 [ 439.266716][ T6143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 439.272618][ T6143] RIP: 0033:0x7f94b6d70929 [ 439.277047][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.296670][ T6143] RSP: 002b:00007fffbe202dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 439.305108][ T6143] RAX: 0000000000000000 RBX: 00007f94b6f99ba0 RCX: 00007f94b6d70929 [ 439.313088][ T6143] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 439.321067][ T6143] RBP: 00007f94b6f99ba0 R08: 00000000000000a0 R09: 00000009be2030bf [ 439.329039][ T6143] R10: 00000000003ffd38 R11: 0000000000000246 R12: 000000000006b463 [ 439.337010][ T6143] R13: 00007fffbe202ec0 R14: ffffffffffffffff R15: 00007fffbe202ee0 [ 439.344990][ T6143] [ 439.348017][ T6143] Modules linked in: [ 439.351918][ T6143] ---[ end trace 1b7e8f6f60630a93 ]--- [ 439.357371][ T6143] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 439.363787][ T6143] Code: e8 29 5b da ff 4c 89 f7 48 c7 c6 c0 fa 12 8a e8 aa db 0d 00 0f 0b e8 13 5b da ff 4c 89 f7 48 c7 c6 00 fb 12 8a e8 94 db 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 5a da ff eb 5d e8 f1 5a da ff 4c 89 f7 [ 439.383472][ T6143] RSP: 0018:ffffc9000312f688 EFLAGS: 00010046 [ 439.389536][ T6143] RAX: 95b7dace68968400 RBX: 0000000000000000 RCX: ffff88807b920000 [ 439.397515][ T6143] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 439.405483][ T6143] RBP: 1ffffd40002a9299 R08: dffffc0000000000 R09: ffffed1017224f24 [ 439.413456][ T6143] R10: ffffed1017224f24 R11: 1ffff11017224f23 R12: ffffea00015494c0 [ 439.421427][ T6143] R13: dffffc0000000000 R14: ffffea00015494c0 R15: ffffea00015494c8 [ 439.429399][ T6143] FS: 0000555560438500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 439.438341][ T6143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.445068][ T6143] CR2: 000000110c2f96fc CR3: 000000007494f000 CR4: 00000000003506e0 [ 439.453044][ T6143] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 439.461016][ T6143] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 439.469005][ T6143] Kernel panic - not syncing: Fatal exception [ 439.475395][ T6143] Kernel Offset: disabled [ 439.479724][ T6143] Rebooting in 86400 seconds..