last executing test programs: 17m58.861786186s ago: executing program 2 (id=115): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000000500)={[], [{@uid_lt}, {@fowner_gt}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq}, {@smackfstransmute}, {@appraise}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048090}, 0x489c) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0, 0xffffffffffffffb4}, 0x14894) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r7, 0x89b1, &(0x7f0000002880)={'netdevsim0\x00', @ifru_hwaddr}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xfffffc01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 17m48.979356433s ago: executing program 2 (id=127): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$netlink(0x10, 0x3, 0x9) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f00000002c0), 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000380)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007f9, 0x0, 0x0) sendto$inet(r5, &(0x7f00000004c0)="eede", 0x2, 0x44095, 0x0, 0x0) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x7fffffff, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) 17m47.396596341s ago: executing program 2 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001740)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) 17m44.850094442s ago: executing program 2 (id=132): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000000500)={[], [{@uid_lt}, {@fowner_gt}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq}, {@smackfstransmute}, {@appraise}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048090}, 0x489c) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0, 0xffffffffffffffb4}, 0x14894) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r7, 0x89b1, &(0x7f0000002880)={'netdevsim0\x00', @ifru_hwaddr}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xfffffc01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 17m41.910558562s ago: executing program 2 (id=135): landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket(0x15, 0x803, 0xfffffffe) recvmmsg(r3, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x183281, 0x4) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000100)='9', 0x20000108}]) 17m38.959470413s ago: executing program 2 (id=137): io_uring_setup(0x48e, &(0x7f00000001c0)={0x0, 0x2607, 0x0, 0x2, 0x29d}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@gettaction={0x18, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000003380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000003400)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003440)=[{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000034c0)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000004600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004640)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000004680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, r4, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000046c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000004700)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000004780), 0x651, 0x0) recvmmsg(r6, &(0x7f00000047c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004800)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000004880)='/proc/timer_list\x00', 0x0, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000035c0)=""/21, 0x15}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x2}, 0x15}], 0x1, 0x40000141, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, &(0x7f0000001240)="260f01c80f01c3b924020000b803000000ba000000000f300f01c5660f38f61f66b8a7008ee02e0f08c4c1f92ee63681345200000000c4c1fdea7d00", 0x3c}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 17m22.965066936s ago: executing program 32 (id=137): io_uring_setup(0x48e, &(0x7f00000001c0)={0x0, 0x2607, 0x0, 0x2, 0x29d}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@gettaction={0x18, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000003380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000003400)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003440)=[{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000034c0)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000004600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004640)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000004680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, r4, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000046c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000004700)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000004780), 0x651, 0x0) recvmmsg(r6, &(0x7f00000047c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004800)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000004880)='/proc/timer_list\x00', 0x0, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000035c0)=""/21, 0x15}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x2}, 0x15}], 0x1, 0x40000141, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, &(0x7f0000001240)="260f01c80f01c3b924020000b803000000ba000000000f300f01c5660f38f61f66b8a7008ee02e0f08c4c1f92ee63681345200000000c4c1fdea7d00", 0x3c}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 12m36.651749046s ago: executing program 4 (id=661): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000480)={[{@errors_remount}, {@usrquota}, {@bh}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0xae2}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {}]}, 0x3, 0x474, &(0x7f0000000740)="$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") syz_open_dev$dvb_frontend(0x0, 0x8000003, 0x717ac2) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/time\x00') syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000200), 0x1, 0x50a, &(0x7f0000001f40)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) sendmsg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000663000/0x2000)=nil, 0x2000, 0x200000e, 0x80010, r4, 0x0) fdatasync(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 12m30.841393365s ago: executing program 4 (id=666): syz_mount_image$nilfs2(&(0x7f0000000640), &(0x7f0000000680)='./bus\x00', 0x1000004, &(0x7f00000006c0)=ANY=[], 0x5, 0xad0, &(0x7f0000000700)="$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") ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1000, 0x103) 12m28.95895713s ago: executing program 4 (id=671): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000000500)={[], [{@uid_lt}, {@fowner_gt}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq}, {@smackfstransmute}, {@appraise}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048090}, 0x489c) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0, 0xffffffffffffffb4}, 0x14894) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r7, 0x89b1, &(0x7f0000002880)={'netdevsim0\x00', @ifru_hwaddr}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xfffffc01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 12m27.006905407s ago: executing program 4 (id=674): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000001540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x180) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000800)='6', 0x32) fsopen(&(0x7f0000000840)='xfs\x00', 0x1) 12m24.243923653s ago: executing program 4 (id=680): mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x280440e, &(0x7f00000001c0)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@errors_remount}, {@noinit_itable}, {@auto_da_alloc}, {@minixdf}, {@noblock_validity}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@nodioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0xbdb, &(0x7f0000000e80)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") syz_usb_connect(0x6, 0x371, &(0x7f0000001ac0)=ANY=[], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001b40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001bc0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001c00), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001c40), 0x2, 0x141102) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001cc0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000001d40)='./file0\x00', 0x40042, 0x1) write(0xffffffffffffffff, &(0x7f0000001d80)='1', 0x1) mount$overlay(0x0, &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1018400, &(0x7f0000000080)=ANY=[], 0x85, 0x675, &(0x7f0000000800)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0x7}}}, 0x24}}, 0x24044090) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0x19f) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0) sendfile(r1, r2, 0x0, 0x20fffe89) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 12m23.655078857s ago: executing program 4 (id=682): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000800)={r0}) 12m21.234780465s ago: executing program 33 (id=682): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000800)={r0}) 9.69600901s ago: executing program 1 (id=4318): mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x4a102) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f0000000340)='./file0\x00', 0x8001420, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x40, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x4, 0xf82, &(0x7f00000005c0)="$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") ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7.658508348s ago: executing program 1 (id=4322): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001"], 0xfc}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.493182242s ago: executing program 1 (id=4324): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x100) setxattr$trusted_overlay_opaque(&(0x7f0000000dc0)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x2, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000012c0)='ext4\x00', &(0x7f0000001300)='./file1\x00', 0x0, &(0x7f0000001340), 0x1, 0x50f, &(0x7f0000001380)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000019c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001a80), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={0x0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000d00)=ANY=[], 0xa) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c40)=@file={0x1, './file1/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xa4}], 0x2, 0x20000080) 6.31969957s ago: executing program 1 (id=4333): inotify_init() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200490c4}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) listen(r2, 0x5) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c90012000e00050014420a008000400003e3eebab42e92"], 0x17) accept4(r2, 0x0, 0x0, 0x0) 3.965097666s ago: executing program 1 (id=4345): mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x4a102) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f0000000340)='./file0\x00', 0x8001420, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x40, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x4, 0xf82, &(0x7f00000005c0)="$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") ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x58000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 3.864478038s ago: executing program 0 (id=4347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001900)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000001cc0)="05", 0x5dc, 0x4009, &(0x7f0000001d00)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 2.708937346s ago: executing program 3 (id=4351): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./trace\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r1, &(0x7f0000000600)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat(r2, &(0x7f0000000480)='new_id\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='8086 29c0\n', 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x7, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r4, &(0x7f0000000180)=""/220, 0xdc) shutdown(r4, 0x1) 2.699668875s ago: executing program 1 (id=4352): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000100)={0x0, 0x1b6c, 0x10, 0x1, 0x8c}, &(0x7f0000000180), &(0x7f00000006c0), &(0x7f0000000200)) syz_usb_connect(0x0, 0x2b, &(0x7f0000000780)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/ttyUSB0\x00', 0x2, 0x0) dup2(r0, r1) 2.595920068s ago: executing program 0 (id=4353): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) socket$igmp6(0xa, 0x3, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') inotify_add_watch(0xffffffffffffffff, 0x0, 0x449) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.563882759s ago: executing program 0 (id=4354): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x100) setxattr$trusted_overlay_opaque(&(0x7f0000000dc0)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x2, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000012c0)='ext4\x00', &(0x7f0000001300)='./file1\x00', 0x0, &(0x7f0000001340), 0x1, 0x50f, &(0x7f0000001380)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000019c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001a80), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={0x0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000d00)=ANY=[], 0xa) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c40)=@file={0x1, './file1/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xa4}], 0x2, 0x20000080) 2.53521089s ago: executing program 5 (id=4355): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)='-v', 0x2) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000e40)=[{&(0x7f00000003c0)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be", 0xcd}, {&(0x7f00000004c0)="e1", 0x1}, {&(0x7f0000000500)="4cf825f5dc34d1c845549399009f5b4f304ad3f71d7e22c79cc54334aaef4509c1dc0eba665fed19b48d04aec3be8c9dcf274a9d3fc2084feac053c7a3b0a4f7a5206463ad311cef81f93fbd9cdbe8b1f7aba2751186f7fa5471ee3776e0141139eaead7f7d84ef0f98139a14e619a9734a0917ed6374bcdc2984db8fddbad89286e8f68195fb73c7b85364295b1d25743fedf114445d0139f12bdd97f23fca418b3c2ed3c94d74085b840107917c683440c9afb73b1672841926fa00012d48178c18c16cb6808b3f6f34eb9d4e67e95dde3a14cc371043a3e1622d27baa6ca810d7310977aa0d3c0c813358358dadadc39a", 0xf2}, {&(0x7f0000000ec0)="35494f790835d7d6f5b681d4f0660e0413aa818ef88ece5c39aed118bba6cf0404d3b90b14141d112ba38b944cde169be822be9d9a645166f3ee9e94ad5c2ba532b583fed66e2f5ab23df604d2193a371bcf9f8b9667786d7e31ca4cc5c474d8bd095353e48a8433473ecff232eb4fa09b95645ca97eff2682873cdc13531b3092314430cb47b48387998da3815dead1a00122bd54661a42ae8cbb6a3bfdbf8dafdc18f31c3c87df7d18540f12c57d9e8cb1f160d254f1e01c5713968db46d46a5801efb815313d3ca34ff82e342db21b9db302a4d3c9c265333fe0634534d", 0xdf}, {&(0x7f0000000700)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8945e300e0f6a75baa4db97013d3406e64ee7d716d5324a87576d423d72646d88d22506236c2e0b8c4bbde4370e6ddcae7f32b50c67bac0171fbe4d66a02e2b8ef5757eb923510a95b20856e69eaeecf23a1093a0ffc268cc3ceddbdc96a005c50b8ed28c974964e9707ec271", 0x8a}, {&(0x7f0000000c80)="a9864fa7e67e8a248e966e19c52a09cec2633129a0dd29ee6c8c4818ebceb97b1dabe5d234e5a485a62569b5ee1e9cad67f0eb7b101c0acbe7a632dbcf9eabf0a99f5d1232d9d863c72e10ffb187d7039600000000000000082e91fd8164ac469596159b6b84f153b63cc0cc2a0d799f3523a1756e6168a0146218136d879ec977053a78d3dd5c6c969c6daded401e1034c106efade964eb8bb6cfe063120cf9783d5c8c0d7a97a4", 0xa8}, {&(0x7f0000000d40)="e831fcb0e56d0f8f7947b6d6441f09d02fcf533dcc763cc81955dd40148a2128a18584d1dee0e9be48d8dee2642cbf30957f6f18d938ca01f7b11258dfb742", 0x3f}], 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 2.415723782s ago: executing program 5 (id=4356): inotify_init() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200490c4}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) listen(r2, 0x5) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c90012000e00050014420a008000400003e3eebab42e92"], 0x17) accept4(r2, 0x0, 0x0, 0x0) 1.568752752s ago: executing program 0 (id=4357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000015c0), 0x0, 0x10, &(0x7f0000001600), 0xfffffffffffffd64}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001640)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8d) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f00000016c0)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x6, 0x14, &(0x7f0000001840)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000001900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r0}, &(0x7f0000001980), &(0x7f00000019c0)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001a00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001a40)={r2, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000001a80)=ANY=[], 0x0) 1.561894063s ago: executing program 3 (id=4358): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 1.529194373s ago: executing program 5 (id=4359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0xffffffff}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)}], 0x1}, 0x20004014) 1.427873356s ago: executing program 3 (id=4360): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x44, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.391057487s ago: executing program 0 (id=4361): mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x4a102) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f0000000340)='./file0\x00', 0x8001420, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x40, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x4, 0xf82, &(0x7f00000005c0)="$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") ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x58000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 1.311871479s ago: executing program 3 (id=4362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001900)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000001cc0)="05", 0x5dc, 0x4009, &(0x7f0000001d00)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 858.719859ms ago: executing program 5 (id=4363): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) socket$igmp6(0xa, 0x3, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') inotify_add_watch(0xffffffffffffffff, 0x0, 0x449) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 640.941454ms ago: executing program 3 (id=4364): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)='-v', 0x2) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000e40)=[{&(0x7f00000003c0)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be", 0xcd}, {&(0x7f00000004c0)="e1", 0x1}, {&(0x7f0000000ec0)="35494f790835d7d6f5b681d4f0660e0413aa818ef88ece5c39aed118bba6cf0404d3b90b14141d112ba38b944cde169be822be9d9a645166f3ee9e94ad5c2ba532b583fed66e2f5ab23df604d2193a371bcf9f8b9667786d7e31ca4cc5c474d8bd095353e48a8433473ecff232eb4fa09b95645ca97eff2682873cdc13531b3092314430cb47b48387998da3815dead1a00122bd54661a42ae8cbb6a3bfdbf8dafdc18f31c3c87df7d18540f12c57d9e8cb1f160d254f1e01c5713968db46d46a5801efb815313d3ca34ff82e342db21b9db302a4d3c9c265333fe0634534d35", 0xe0}, {&(0x7f0000000700)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8945e300e0f6a75baa4db97013d3406e64ee7d716d5324a87576d423d72646d88d22506236c2e0b8c4bbde4370e6ddcae7f32b50c67bac0171fbe4d66a02e2b8ef5757eb923510a95b20856e69eaeecf23a1093a0ffc268cc3ceddbdc96a005c50b8ed28c974964e9707ec271", 0x8a}, {&(0x7f0000000c80)="a9864fa7e67e8a248e966e19c52a09cec2633129a0dd29ee6c8c4818ebceb97b1dabe5d234e5a485a62569b5ee1e9cad67f0eb7b101c0acbe7a632dbcf9eabf0a99f5d1232d9d863c72e10ffb187d7039600000000000000082e91fd8164ac469596159b6b84f153b63cc0cc2a0d799f3523a1756e6168a0146218136d879ec977053a78d3dd5c6c969c6daded401e1034c106efade964eb8bb6cfe063120cf9783d5c8c0d7a97a4", 0xa8}, {&(0x7f0000000d40)="e831fcb0e56d0f8f7947b6d6441f09d02fcf533dcc763cc81955dd40148a2128a18584d1dee0e9be48d8dee2642cbf30957f6f18d938ca01f7b11258dfb742", 0x3f}], 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 344.605242ms ago: executing program 0 (id=4365): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x100) setxattr$trusted_overlay_opaque(&(0x7f0000000dc0)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x2, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000012c0)='ext4\x00', &(0x7f0000001300)='./file1\x00', 0x0, &(0x7f0000001340), 0x1, 0x50f, &(0x7f0000001380)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000019c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001a80), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={0x0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000d00)=ANY=[], 0xa) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c40)=@file={0x1, './file1/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xa4}], 0x2, 0x20000080) 199.015055ms ago: executing program 5 (id=4366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 141.973126ms ago: executing program 3 (id=4367): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./trace\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r1, &(0x7f0000000600)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat(r2, &(0x7f0000000480)='new_id\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='8086 29c0\n', 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x7, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r4, &(0x7f0000000180)=""/220, 0xdc) shutdown(r4, 0x1) 0s ago: executing program 5 (id=4368): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): ewly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.109948][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.128449][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.153273][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.170822][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.181914][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.198918][T13983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.213300][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.228654][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.240761][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.257239][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.273513][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.284790][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.306267][T13983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.353257][T13983] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.375844][T13983] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.392241][T13983] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.416162][T13983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.505641][T14246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2457'. [ 904.547063][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.564461][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.613912][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.621779][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.515462][T13069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 905.531053][T13069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 905.546794][T13069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 905.557231][T14269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2465'. [ 905.559854][T13069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 905.575677][T13069] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 905.583129][T13069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 905.735011][ T1136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.786926][T14266] rxe_eth0 speed is unknown, defaulting to 1000 [ 905.859208][ T1136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.986266][ T1136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.111694][ T1136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.158546][T14290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2474'. [ 907.538960][T14266] chnl_net:caif_netlink_parms(): no params data found [ 907.659298][T13069] Bluetooth: hci3: command tx timeout [ 907.804286][T14315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2483'. [ 908.201283][T14266] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.213071][T14266] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.232221][T14266] bridge_slave_0: entered allmulticast mode [ 908.246628][T14266] bridge_slave_0: entered promiscuous mode [ 908.284907][T14266] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.293473][T14266] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.301914][T14266] bridge_slave_1: entered allmulticast mode [ 908.309795][T14266] bridge_slave_1: entered promiscuous mode [ 908.439227][T14266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.521704][T14266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.638625][T14266] team0: Port device team_slave_0 added [ 908.653238][T14266] team0: Port device team_slave_1 added [ 908.830613][T14266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.852401][T14266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.886739][T14266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.908307][T14266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.920311][T14266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.000071][T14266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.292266][ T27] audit: type=1804 audit(1792053323.435:118): pid=14371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2494" name="/newroot/27/tracing/uprobe_events" dev="tracefs" ino=1051 res=1 errno=0 [ 909.425432][T14266] hsr_slave_0: entered promiscuous mode [ 909.450600][T14266] hsr_slave_1: entered promiscuous mode [ 909.466849][T14266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 909.484396][T14266] Cannot create hsr debugfs directory [ 909.496850][T14378] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 909.530790][ T1136] hsr_slave_0: left promiscuous mode [ 909.537148][ T1136] hsr_slave_1: left promiscuous mode [ 909.554116][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.564511][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.598343][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.614091][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.653325][ T1136] bridge_slave_1: left allmulticast mode [ 909.663531][ T1136] bridge_slave_1: left promiscuous mode [ 909.689475][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.705984][ T1136] bridge_slave_0: left allmulticast mode [ 909.733839][ T1136] bridge_slave_0: left promiscuous mode [ 909.735580][T13069] Bluetooth: hci3: command tx timeout [ 909.749805][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.880552][ T1136] veth1_macvtap: left promiscuous mode [ 909.903898][ T1136] veth0_macvtap: left promiscuous mode [ 909.909603][ T1136] veth1_vlan: left promiscuous mode [ 909.919099][ T1136] veth0_vlan: left promiscuous mode [ 910.499664][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 910.549741][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 910.601193][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.641940][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.962076][ T1136] bond0 (unregistering): Released all slaves [ 911.315615][T14398] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2501'. [ 911.562038][ T1136] IPVS: stop unused estimator thread 0... [ 911.814082][T13069] Bluetooth: hci3: command tx timeout [ 911.909740][T14420] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 912.161835][T14266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 912.202272][T14266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 912.227764][T14266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 912.281445][T14266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 912.317131][T14434] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2510'. [ 912.490487][T14266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.542626][T14266] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.572570][T13203] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.579850][T13203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.621224][T13203] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.629503][T13203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.680716][T14266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 912.705698][T14266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 912.743235][T14446] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 913.384180][T14266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.443296][T14473] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2521'. [ 913.533182][T14266] veth0_vlan: entered promiscuous mode [ 913.565016][T14266] veth1_vlan: entered promiscuous mode [ 913.699147][T14266] veth0_macvtap: entered promiscuous mode [ 913.729087][T14266] veth1_macvtap: entered promiscuous mode [ 913.772826][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.783675][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.793949][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.853418][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.907359][T13069] Bluetooth: hci3: command tx timeout [ 913.966276][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.986978][T14485] loop3: detected capacity change from 0 to 4096 [ 914.151906][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.163043][T14487] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 914.353004][T14266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.918208][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.009601][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.120283][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.198823][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.281467][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.371574][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.476366][T14266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.541176][T14266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.621397][T14266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.710038][T14266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.781644][T14266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.571765][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.602885][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.725522][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.733423][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.341762][T14565] loop0: detected capacity change from 0 to 4096 [ 919.559012][T14567] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 921.584371][T14615] loop3: detected capacity change from 0 to 4096 [ 921.755239][T14616] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 922.698530][T14606] rxe_eth0 speed is unknown, defaulting to 1000 [ 926.258394][T14657] FAULT_INJECTION: forcing a failure. [ 926.258394][T14657] name failslab, interval 1, probability 0, space 0, times 0 [ 926.271570][T14657] CPU: 1 PID: 14657 Comm: syz.3.2565 Not tainted syzkaller #0 [ 926.279071][T14657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 926.289190][T14657] Call Trace: [ 926.292495][T14657] [ 926.295448][T14657] dump_stack_lvl+0x18c/0x250 [ 926.300171][T14657] ? show_regs_print_info+0x20/0x20 [ 926.305424][T14657] ? load_image+0x420/0x420 [ 926.309986][T14657] should_fail_ex+0x394/0x4c0 [ 926.314709][T14657] should_failslab+0x9/0x20 [ 926.319256][T14657] slab_pre_alloc_hook+0x59/0x300 [ 926.324312][T14657] ? ip6_pol_route+0x166/0x1360 [ 926.329191][T14657] kmem_cache_alloc+0x5a/0x2c0 [ 926.333998][T14657] ? dst_alloc+0x105/0x170 [ 926.338450][T14657] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 926.344120][T14657] dst_alloc+0x105/0x170 [ 926.348404][T14657] ip6_pol_route+0x9fa/0x1360 [ 926.353113][T14657] ? ip6_pol_route+0x166/0x1360 [ 926.358004][T14657] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 926.363684][T14657] ? __lock_acquire+0x135d/0x7eb0 [ 926.368756][T14657] fib6_rule_lookup+0x35d/0x580 [ 926.373641][T14657] ? skb_header_pointer+0x120/0x120 [ 926.378876][T14657] ? fib6_lookup+0x2d0/0x2d0 [ 926.383509][T14657] ? read_lock_is_recursive+0x20/0x20 [ 926.388949][T14657] ip6_route_output_flags+0x364/0x5d0 [ 926.394358][T14657] ? ip6_route_output_flags+0x2e/0x5d0 [ 926.399857][T14657] ip6_dst_lookup_tail+0x1a5/0x1660 [ 926.405104][T14657] ? ip6_dst_lookup+0x60/0x60 [ 926.409824][T14657] ? read_lock_is_recursive+0x20/0x20 [ 926.415228][T14657] ? debug_objects_fill_pool+0x8b/0x790 [ 926.420816][T14657] ip6_dst_lookup_flow+0x48/0xe0 [ 926.425790][T14657] ? ip6_dst_lookup_tail+0x1660/0x1660 [ 926.431281][T14657] addr_resolve+0x60b/0x1f30 [ 926.435908][T14657] ? addr_resolve+0x10a/0x1f30 [ 926.440706][T14657] ? process_one_req+0x540/0x540 [ 926.445671][T14657] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 926.451691][T14657] ? __lock_acquire+0x7eb0/0x7eb0 [ 926.456754][T14657] ? lock_chain_count+0x20/0x20 [ 926.461645][T14657] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 926.467577][T14657] ? _raw_spin_unlock+0x40/0x40 [ 926.472469][T14657] ? __debug_object_init+0xec/0x450 [ 926.477724][T14657] rdma_resolve_ip+0x462/0x850 [ 926.482530][T14657] rdma_resolve_addr+0x6cb/0x20f0 [ 926.487605][T14657] ? cma_check_port+0x980/0x980 [ 926.492492][T14657] ? preempt_schedule_thunk+0x1a/0x30 [ 926.497921][T14657] ? __mutex_lock+0x321/0xc80 [ 926.502635][T14657] ? do_raw_spin_unlock+0x121/0x230 [ 926.507885][T14657] ? __might_fault+0xc6/0x120 [ 926.512596][T14657] ? __might_fault+0xaa/0x120 [ 926.517315][T14657] ucma_resolve_ip+0x21f/0x2d0 [ 926.522118][T14657] ? ucma_bind_ip+0x250/0x250 [ 926.526832][T14657] ? try_to_wake_up+0x6f5/0x10e0 [ 926.531807][T14657] ? __might_fault+0xc6/0x120 [ 926.536517][T14657] ? __might_fault+0xaa/0x120 [ 926.541233][T14657] ucma_write+0x252/0x2f0 [ 926.545599][T14657] ? ucma_get_global_nl_info+0x70/0x70 [ 926.551093][T14657] ? fsnotify_perm+0x5d/0x5e0 [ 926.555822][T14657] ? security_file_permission+0x79/0xa0 [ 926.561409][T14657] ? ucma_get_global_nl_info+0x70/0x70 [ 926.566904][T14657] vfs_write+0x299/0x9a0 [ 926.571207][T14657] ? file_end_write+0x250/0x250 [ 926.576098][T14657] ? __fget_files+0x28/0x460 [ 926.580724][T14657] ? __fget_files+0x3fc/0x460 [ 926.585451][T14657] ? __fdget_pos+0x1d8/0x330 [ 926.590088][T14657] ? ksys_write+0x74/0x260 [ 926.594542][T14657] ksys_write+0x151/0x260 [ 926.598914][T14657] ? __ia32_sys_read+0x90/0x90 [ 926.603714][T14657] ? lockdep_hardirqs_on+0x98/0x150 [ 926.608950][T14657] do_syscall_64+0x55/0xb0 [ 926.613389][T14657] ? clear_bhb_loop+0x40/0x90 [ 926.618095][T14657] ? clear_bhb_loop+0x40/0x90 [ 926.622803][T14657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.628732][T14657] RIP: 0033:0x7f7b6a19e559 [ 926.633172][T14657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.652807][T14657] RSP: 002b:00007f7b6b060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 926.661256][T14657] RAX: ffffffffffffffda RBX: 00007f7b6a425fa0 RCX: 00007f7b6a19e559 [ 926.669258][T14657] RDX: 0000000000000048 RSI: 0000200000000400 RDI: 0000000000000007 [ 926.677266][T14657] RBP: 00007f7b6a2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 926.685269][T14657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.693281][T14657] R13: 00007f7b6a426038 R14: 00007f7b6a425fa0 R15: 00007ffd74223158 [ 926.701309][T14657] [ 927.309632][T14677] loop3: detected capacity change from 0 to 4096 [ 927.480407][T14678] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 931.324920][T14708] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 931.629318][T14717] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9 [ 931.659022][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.674183][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.756926][T14723] loop1: detected capacity change from 0 to 4096 [ 931.795432][T14725] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 932.116882][T14732] FAULT_INJECTION: forcing a failure. [ 932.116882][T14732] name failslab, interval 1, probability 0, space 0, times 0 [ 932.163868][T14732] CPU: 0 PID: 14732 Comm: syz.1.2589 Not tainted syzkaller #0 [ 932.171401][T14732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 932.181486][T14732] Call Trace: [ 932.184790][T14732] [ 932.187741][T14732] dump_stack_lvl+0x18c/0x250 [ 932.192447][T14732] ? show_regs_print_info+0x20/0x20 [ 932.197673][T14732] ? load_image+0x420/0x420 [ 932.202211][T14732] ? __might_sleep+0xe0/0xe0 [ 932.206831][T14732] ? __lock_acquire+0x7eb0/0x7eb0 [ 932.211903][T14732] should_fail_ex+0x394/0x4c0 [ 932.216640][T14732] should_failslab+0x9/0x20 [ 932.221181][T14732] slab_pre_alloc_hook+0x59/0x300 [ 932.226245][T14732] kmem_cache_alloc+0x5a/0x2c0 [ 932.231058][T14732] ? security_file_alloc+0x34/0x120 [ 932.236303][T14732] security_file_alloc+0x34/0x120 [ 932.241379][T14732] init_file+0x94/0x1f0 [ 932.245572][T14732] alloc_empty_file+0xb7/0x1d0 [ 932.250371][T14732] alloc_file+0x5b/0x600 [ 932.254654][T14732] alloc_file_pseudo+0x184/0x210 [ 932.259627][T14732] ? fput+0x1a0/0x1a0 [ 932.263645][T14732] ? mas_destroy+0x20a0/0x20a0 [ 932.268442][T14732] __shmem_file_setup+0x23c/0x2c0 [ 932.273506][T14732] shmem_zero_setup+0x8d/0x130 [ 932.278324][T14732] mmap_region+0x1225/0x2090 [ 932.282945][T14732] ? file_mmap_ok+0x170/0x170 [ 932.287651][T14732] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 932.293219][T14732] ? cap_mmap_addr+0x157/0x2b0 [ 932.298027][T14732] do_mmap+0x98f/0x10a0 [ 932.302225][T14732] ? mlock_future_ok+0xf0/0xf0 [ 932.307004][T14732] ? down_write+0x200/0x200 [ 932.311524][T14732] vm_mmap_pgoff+0x1c4/0x3f0 [ 932.316128][T14732] ? account_locked_vm+0x200/0x200 [ 932.321251][T14732] ? ksys_mmap_pgoff+0xf3/0x720 [ 932.326107][T14732] ? __x64_sys_mmap+0x7a/0x130 [ 932.330870][T14732] do_syscall_64+0x55/0xb0 [ 932.335290][T14732] ? clear_bhb_loop+0x40/0x90 [ 932.339964][T14732] ? clear_bhb_loop+0x40/0x90 [ 932.344641][T14732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 932.350541][T14732] RIP: 0033:0x7fef42f9e559 [ 932.354956][T14732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.374568][T14732] RSP: 002b:00007fef43de1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 932.382994][T14732] RAX: ffffffffffffffda RBX: 00007fef43225fa0 RCX: 00007fef42f9e559 [ 932.390983][T14732] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 932.398952][T14732] RBP: 00007fef430358b0 R08: ffffffffffffffff R09: 0000000000000000 [ 932.406925][T14732] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 932.414895][T14732] R13: 00007fef43226038 R14: 00007fef43225fa0 R15: 00007ffcb06d0078 [ 932.422878][T14732] [ 932.567252][T14743] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2594'. [ 932.625082][T14744] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 933.189749][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2605'. [ 934.556071][T14797] batman_adv: batadv0: Adding interface: syz_tun [ 934.562480][T14797] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.592753][T14797] batman_adv: batadv0: Interface activated: syz_tun [ 935.043944][ T6806] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 935.224392][ T6806] usb 4-1: Using ep0 maxpacket: 16 [ 935.233731][ T6806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 935.253343][ T6806] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 935.263277][ T6806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.271865][ T6806] usb 4-1: Product: syz [ 935.276827][ T6806] usb 4-1: Manufacturer: syz [ 935.281578][ T6806] usb 4-1: SerialNumber: syz [ 935.289993][ T6806] usb 4-1: config 0 descriptor?? [ 935.300440][ T6806] hub 4-1:0.0: bad descriptor, ignoring hub [ 935.306978][ T6806] hub: probe of 4-1:0.0 failed with error -5 [ 935.315928][ T6806] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 935.615342][ T23] usb 4-1: USB disconnect, device number 2 [ 936.348634][T14841] jffs2: notice: (14841) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 936.479091][T14846] loop1: detected capacity change from 0 to 512 [ 936.512638][T14848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2632'. [ 936.547634][T14846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.564179][T14846] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 937.798360][T14266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.107700][T14878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2642'. [ 938.337682][T14888] loop0: detected capacity change from 0 to 512 [ 938.384305][T14888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.397660][T14888] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.565053][T14895] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2649'. [ 939.076579][T14906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2654'. [ 939.238546][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.330833][T14910] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2658'. [ 939.672350][T14916] loop3: detected capacity change from 0 to 32768 [ 940.457363][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2664'. [ 940.858288][T13069] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 941.353214][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 942.942385][T15003] fuse: Bad value for 'fd' [ 944.135283][T15027] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2697'. [ 944.233216][T15028] loop3: detected capacity change from 0 to 4096 [ 944.523970][T15036] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 946.159379][T15070] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2709'. [ 946.734157][ T5832] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 947.055084][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 947.151730][ T5832] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 947.187870][ T5832] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 947.240590][ T5832] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 947.297845][ T5832] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 947.339634][ T5832] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.384050][ T5832] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 947.427682][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.307128][ T5832] usb 1-1: usb_control_msg returned -32 [ 948.312792][ T5832] usbtmc 1-1:16.0: can't read capabilities [ 948.395686][T15104] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2723'. [ 948.821073][ T5832] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 948.882014][ T5832] wiimote 0005:057E:0306.0004: New device registered [ 949.054288][T14407] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 949.336896][T15117] wiimote 0005:057E:0306.0004: Unhandled report 32 size 1 [ 949.494717][T15117] wiimote 0005:057E:0306.0004: Event data for report 0 was too short (2 vs 1) [ 949.530715][T15116] wiimote 0005:057E:0306.0004: Device removed [ 949.545333][T14407] usb 2-1: no configurations [ 949.571352][T14407] usb 2-1: can't read configurations, error -22 [ 949.605880][ T9] usb 1-1: USB disconnect, device number 6 [ 949.974315][ T6806] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 950.055842][ T6806] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input11 [ 950.114046][ T6806] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input12 [ 950.139736][ T6806] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input10 [ 950.786746][T15145] loop0: detected capacity change from 0 to 32768 [ 952.247685][T15187] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 952.437699][T15193] CIFS: Attempting to mount //127.0.0.1/share [ 952.518183][T15195] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 952.539360][T15193] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 952.573038][T15193] CIFS: VFS: cifs_mount failed w/return code = -11 [ 952.887060][T15205] loop3: detected capacity change from 0 to 32768 [ 953.851948][T15221] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2759'. [ 953.969757][T15225] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2761'. [ 955.096079][T15245] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2769'. [ 955.668140][T15262] loop3: detected capacity change from 0 to 4096 [ 955.771764][T15267] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 956.572727][T15277] CIFS: Attempting to mount //127.0.0.1/share [ 956.658447][T15279] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 956.697581][T15277] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 956.721501][T15277] CIFS: VFS: cifs_mount failed w/return code = -11 [ 956.890471][T15287] loop3: detected capacity change from 0 to 512 [ 956.932776][T15287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.964744][T15287] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.341438][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.411378][T15306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2788'. [ 957.605671][T15312] CIFS: Attempting to mount //127.0.0.1/share [ 958.509836][T15312] CIFS: VFS: cifs_mount failed w/return code = -112 [ 958.551616][T15324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2795'. [ 958.783078][T15325] loop1: detected capacity change from 0 to 4096 [ 958.928476][T15331] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 959.001638][T15330] syzkaller0: entered promiscuous mode [ 959.045948][T15330] syzkaller0: entered allmulticast mode [ 960.110892][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2807'. [ 962.488844][T15362] loop1: detected capacity change from 0 to 4096 [ 962.524185][T15372] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 963.294191][T15396] ip_tables: iptables: counters copy to user failed while replacing table [ 965.383722][T15434] CIFS: Attempting to mount //127.0.0.1/share [ 965.459431][T15434] CIFS: VFS: Error connecting to socket. Aborting operation. [ 965.469859][T15434] CIFS: VFS: cifs_mount failed w/return code = -111 [ 965.673206][T15423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 966.939046][T15454] loop0: detected capacity change from 0 to 512 [ 966.988057][T15454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.039996][T15459] loop3: detected capacity change from 0 to 4096 [ 967.069092][T15454] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.099172][T15465] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 967.908655][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.629378][T15492] loop3: detected capacity change from 0 to 512 [ 968.737829][T15492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.756178][T15492] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 969.815636][T15522] loop0: detected capacity change from 0 to 32768 [ 971.199103][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.242127][T15545] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2877'. [ 971.366912][T15547] CIFS: Attempting to mount //127.0.0.1/share [ 971.454157][T15550] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 971.471744][T15547] CIFS: VFS: cifs_mount failed w/return code = -112 [ 971.717197][T15558] loop5: detected capacity change from 0 to 7 [ 971.749192][T15558] Dev loop5: unable to read RDB block 7 [ 971.765682][T15558] loop5: AHDI p1 p2 p3 [ 971.780363][T15558] loop5: partition table partially beyond EOD, truncated [ 971.805350][T15558] loop5: p1 start 1601398130 is beyond EOD, truncated [ 971.818248][T15558] loop5: p2 start 1702059890 is beyond EOD, truncated [ 972.393266][T15570] loop0: detected capacity change from 0 to 512 [ 972.411341][T15572] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2886'. [ 972.453035][T15570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.514223][T15570] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 972.710900][T15581] CIFS: Attempting to mount //127.0.0.1/share [ 972.784087][T15583] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 972.803026][T15581] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 972.820529][T15581] CIFS: VFS: cifs_mount failed w/return code = -11 [ 972.845176][ T5831] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 973.054253][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 973.070309][ T5831] usb 4-1: unable to get BOS descriptor or descriptor too short [ 973.088076][ T5831] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 973.101750][ T5831] usb 4-1: config 0 has no interface number 0 [ 973.126325][ T5831] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 973.170889][ T5831] usb 4-1: config 0 interface 88 has no altsetting 0 [ 973.203613][ T5831] usb 4-1: string descriptor 0 read error: -22 [ 973.219096][ T5831] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 973.239507][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 973.266517][ T5831] usb 4-1: config 0 descriptor?? [ 973.308016][ T5831] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input14 [ 973.521114][ T5831] usb 4-1: USB disconnect, device number 3 [ 974.827926][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.063828][T15613] syzkaller0: entered promiscuous mode [ 975.073394][T15613] syzkaller0: entered allmulticast mode [ 977.082250][T15633] loop0: detected capacity change from 0 to 512 [ 977.162568][T15633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.229714][T15633] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.253693][T15644] syzkaller0: entered promiscuous mode [ 977.263921][T15644] syzkaller0: entered allmulticast mode [ 978.562640][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.377093][ T23] wiimote 0005:057E:0306.0005: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 981.396103][ T23] wiimote 0005:057E:0306.0005: New device registered [ 981.426758][T15716] wiimote 0005:057E:0306.0005: Device removed [ 981.494248][T15718] fido_id[15718]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 981.544275][ T34] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 981.904793][ T34] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 981.916029][ T34] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 981.927813][ T34] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 981.937635][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 981.945757][ T34] usb 1-1: Product: syz [ 981.950344][ T34] usb 1-1: Manufacturer: syz [ 982.671153][ T34] iuu_phoenix 1-1:1.0: iuu_phoenix converter detected [ 982.690069][ T34] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 982.701483][ T34] usb 1-1: USB disconnect, device number 7 [ 982.745166][ T34] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 982.772325][ T34] iuu_phoenix 1-1:1.0: device disconnected [ 982.797950][T15297] udevd[15297]: setting owner of /dev/bus/usb/001/007 to uid=0, gid=0 failed: No such file or directory [ 983.282536][T15755] CIFS: Attempting to mount //127.0.0.1/share [ 983.339156][T15756] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 983.374153][T15755] CIFS: VFS: cifs_mount failed w/return code = -112 [ 983.784732][T15763] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 983.794694][T15763] Bluetooth: hci0: command 0x0406 tx timeout [ 983.805522][T15763] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 983.821642][T15763] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 983.830109][T15763] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 983.839318][T15763] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 983.847103][T15763] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 984.608852][T15762] rxe_eth0 speed is unknown, defaulting to 1000 [ 984.761077][ T7541] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.937816][ T7541] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.965089][T15778] syzkaller0: entered promiscuous mode [ 984.973051][T15778] syzkaller0: entered allmulticast mode [ 985.106041][ T7541] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.296291][ T7541] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.988026][T13069] Bluetooth: hci4: command tx timeout [ 986.221788][T15762] chnl_net:caif_netlink_parms(): no params data found [ 986.228892][ T34] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 986.476089][ T34] usb 1-1: no configurations [ 986.480752][ T34] usb 1-1: can't read configurations, error -22 [ 986.545570][T15762] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.552715][T15762] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.585142][T15762] bridge_slave_0: entered allmulticast mode [ 986.603457][T15762] bridge_slave_0: entered promiscuous mode [ 986.689806][T15762] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.699418][T15762] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.707572][T15762] bridge_slave_1: entered allmulticast mode [ 986.719284][T15762] bridge_slave_1: entered promiscuous mode [ 986.829104][T15762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.875770][T15823] syzkaller0: entered promiscuous mode [ 986.888036][T15823] syzkaller0: entered allmulticast mode [ 986.901752][T15762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.020305][T15762] team0: Port device team_slave_0 added [ 988.049542][T15762] team0: Port device team_slave_1 added [ 988.063997][T13069] Bluetooth: hci4: command tx timeout [ 988.266798][T15762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.284000][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.346021][T15762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.375779][T15762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.382784][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.416772][T15762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.335072][T15762] hsr_slave_0: entered promiscuous mode [ 989.371421][T15762] hsr_slave_1: entered promiscuous mode [ 989.388548][T15762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 989.410219][T15762] Cannot create hsr debugfs directory [ 989.815857][ T5832] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 990.054461][ T7541] hsr_slave_0: left promiscuous mode [ 990.060778][ T7541] hsr_slave_1: left promiscuous mode [ 990.080152][ T5832] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.100238][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.112197][ T5832] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 990.124065][ T7541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.134038][T13069] Bluetooth: hci4: command tx timeout [ 990.140161][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.150129][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.174674][ T7541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.182583][ T5832] as10x_usb: device has been detected [ 990.189323][ T5832] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 990.219636][ T7541] bridge_slave_1: left allmulticast mode [ 990.233405][ T5832] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 990.250138][ T7541] bridge_slave_1: left promiscuous mode [ 990.262264][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.304914][ T7541] bridge_slave_0: left allmulticast mode [ 990.311279][ T7541] bridge_slave_0: left promiscuous mode [ 990.322635][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.402274][ T5832] as10x_usb: error during firmware upload part1 [ 990.419583][ T5832] Registered device Abilis Systems DVB-Titan [ 990.440721][ T7541] veth1_macvtap: left promiscuous mode [ 990.464566][ T7541] veth0_macvtap: left promiscuous mode [ 990.470274][ T7541] veth1_vlan: left promiscuous mode [ 990.484003][ T7541] veth0_vlan: left promiscuous mode [ 991.177657][ T5832] usb 2-1: USB disconnect, device number 7 [ 991.265432][ T5832] Unregistered device Abilis Systems DVB-Titan [ 991.270664][ T5832] as10x_usb: device has been disconnected [ 991.471006][ T7541] team_slave_1 (unregistering): left promiscuous mode [ 991.478338][ T7541] team_slave_1 (unregistering): left allmulticast mode [ 991.491029][ T7541] team0 (unregistering): Port device team_slave_1 removed [ 991.541273][ T7541] team_slave_0 (unregistering): left promiscuous mode [ 991.548202][ T7541] team_slave_0 (unregistering): left allmulticast mode [ 991.556394][ T7541] team0 (unregistering): Port device team_slave_0 removed [ 991.604263][ T7541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.651246][ T7541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.110632][ T7541] bond0 (unregistering): Released all slaves [ 992.214266][T13069] Bluetooth: hci4: command tx timeout [ 992.331384][T15918] syzkaller0: entered promiscuous mode [ 992.341545][T15918] syzkaller0: entered allmulticast mode [ 992.845091][T15953] CIFS: Attempting to mount //127.0.0.1/share [ 993.099919][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.108759][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.675432][T15953] CIFS: VFS: cifs_mount failed w/return code = -112 [ 994.704562][T13069] Bluetooth: hci3: command 0x0406 tx timeout [ 995.798778][T15990] loop3: detected capacity change from 0 to 4096 [ 995.888979][T15991] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 996.824305][ T6806] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 997.044295][ T6806] usb 4-1: no configurations [ 997.053322][ T6806] usb 4-1: can't read configurations, error -22 [ 998.161156][T16022] syzkaller0: entered promiscuous mode [ 998.171376][T16022] syzkaller0: entered allmulticast mode [ 999.905303][T15763] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1001.079676][T15762] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1001.108790][T15762] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1001.167110][T15762] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1001.238631][T15762] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1001.410053][T15762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.454017][T14407] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1001.459304][T15762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.501388][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.508618][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.544968][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.552171][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.674884][T14407] usb 1-1: no configurations [ 1001.679584][T14407] usb 1-1: can't read configurations, error -22 [ 1002.307300][T16077] jffs2: notice: (16077) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1002.608252][T15762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.754715][T16117] random: crng reseeded on system resumption [ 1003.990680][T15762] veth0_vlan: entered promiscuous mode [ 1004.045570][T15762] veth1_vlan: entered promiscuous mode [ 1004.128172][T15762] veth0_macvtap: entered promiscuous mode [ 1004.160595][T15762] veth1_macvtap: entered promiscuous mode [ 1004.191754][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.218130][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.243897][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.259900][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.282300][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.299672][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.321402][T15762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.351801][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.374728][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.409023][T15763] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 1004.416081][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.433950][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.445115][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.456366][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.468146][T15762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.513497][T15762] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.522779][T16142] CIFS: Attempting to mount //127.0.0.1/share [ 1004.528064][T15762] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.538166][T15762] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.551132][T15762] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.562957][T16142] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1004.581495][T16142] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1004.728877][T13203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.749311][T13203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.804400][T13203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.819640][T13203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.417866][T15763] Bluetooth: hci2: command 0x0406 tx timeout [ 1006.329711][T16190] loop3: detected capacity change from 0 to 4096 [ 1006.576451][T16195] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1006.994327][T16198] lo: entered promiscuous mode [ 1007.111287][T16198] tunl0: entered promiscuous mode [ 1007.178408][T16198] gre0: entered promiscuous mode [ 1007.354763][T16198] gretap0: entered promiscuous mode [ 1007.405605][T16198] erspan0: entered promiscuous mode [ 1007.454760][T16198] ip_vti0: entered promiscuous mode [ 1007.486753][T16198] ip6_vti0: entered promiscuous mode [ 1007.524750][T16198] sit0: entered promiscuous mode [ 1007.595622][T16198] ip6tnl0: entered promiscuous mode [ 1007.629638][T16198] ip6gre0: entered promiscuous mode [ 1007.642669][T16222] fuse: Unknown parameter 'group_i00000000000000000000' [ 1007.646688][T16198] batman_adv: batadv0: Interface deactivated: syz_tun [ 1007.668155][T16198] syz_tun: entered promiscuous mode [ 1007.703383][T16198] ip6gretap0: entered promiscuous mode [ 1007.729166][T16198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.738095][T16198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.747870][T13069] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1007.748996][T15763] Bluetooth: hci1: command 0x1003 tx timeout [ 1007.780115][T16198] bridge0: entered promiscuous mode [ 1007.855276][T16198] bond0: entered promiscuous mode [ 1007.865001][T16198] bond_slave_0: entered promiscuous mode [ 1007.870815][T16198] bond_slave_1: entered promiscuous mode [ 1007.910937][T16198] team0: entered promiscuous mode [ 1007.923392][T16198] team_slave_0: entered promiscuous mode [ 1007.938531][T16198] team_slave_1: entered promiscuous mode [ 1007.972066][T16198] dummy0: entered promiscuous mode [ 1008.011023][T16198] nlmon0: entered promiscuous mode [ 1008.032151][T16198] caif0: entered promiscuous mode [ 1008.047841][T16198] batadv0: entered promiscuous mode [ 1008.078287][T16198] vxcan0: entered promiscuous mode [ 1008.093616][T16198] vxcan1: entered promiscuous mode [ 1008.112586][T16198] veth0: entered promiscuous mode [ 1008.143480][T16198] veth1: entered promiscuous mode [ 1008.168667][T16198] wg0: entered promiscuous mode [ 1008.188469][T16198] wg1: entered promiscuous mode [ 1008.216738][T16198] wg2: entered promiscuous mode [ 1008.242648][T16198] veth0_to_bridge: entered promiscuous mode [ 1008.294803][T16198] veth1_to_bridge: entered promiscuous mode [ 1008.350607][T16198] veth0_to_bond: entered promiscuous mode [ 1008.379198][T16198] veth1_to_bond: entered promiscuous mode [ 1008.401376][T16198] veth0_to_team: entered promiscuous mode [ 1008.439136][T16198] veth1_to_team: entered promiscuous mode [ 1008.548108][T16198] veth0_to_batadv: entered promiscuous mode [ 1008.566877][T16198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.606081][T16198] batadv_slave_0: entered promiscuous mode [ 1008.681691][T16198] veth1_to_batadv: entered promiscuous mode [ 1008.710527][T16198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.728704][T16198] batadv_slave_1: entered promiscuous mode [ 1008.759430][T16198] xfrm0: entered promiscuous mode [ 1008.791010][T16198] veth0_to_hsr: entered promiscuous mode [ 1008.832589][T16198] veth1_to_hsr: entered promiscuous mode [ 1008.881301][T16198] hsr0: entered promiscuous mode [ 1008.918823][T16198] veth1_virt_wifi: entered promiscuous mode [ 1008.959686][T16198] veth0_virt_wifi: entered promiscuous mode [ 1008.980285][T16198] virt_wifi0: entered promiscuous mode [ 1009.071954][T16198] vlan0: entered promiscuous mode [ 1009.084303][T16198] vlan1: entered promiscuous mode [ 1009.113070][T16198] macvlan0: entered promiscuous mode [ 1009.137726][T16198] macvlan1: entered promiscuous mode [ 1009.152556][T16198] ipvlan0: entered promiscuous mode [ 1009.164664][T16198] ipvlan1: entered promiscuous mode [ 1009.201037][T16198] macvtap0: entered promiscuous mode [ 1009.226716][T16198] macsec0: entered promiscuous mode [ 1009.246897][T16198] geneve0: entered promiscuous mode [ 1009.268090][T16198] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.277070][T16198] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.286394][T16198] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.295368][T16198] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.304526][T16198] geneve1: entered promiscuous mode [ 1009.323498][T16198] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1009.341359][T16198] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1009.361441][T16198] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 1009.376563][T16198] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 1009.412288][T16198] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 1009.433118][T16198] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1009.527166][T16246] CIFS: Attempting to mount //127.0.0.1/share [ 1009.734477][T16256] fuse: Unknown parameter 'group_i00000000000000000000' [ 1009.937420][ T5832] IPVS: starting estimator thread 0... [ 1010.009588][T16251] loop5: detected capacity change from 0 to 32768 [ 1010.094060][T16261] IPVS: using max 21 ests per chain, 50400 per kthread [ 1010.358967][T16246] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1010.416989][T16246] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1011.010315][T16288] fuse: Unknown parameter 'group_id00000000000000000000' [ 1011.239069][T16299] CIFS: Attempting to mount //127.0.0.1/share [ 1011.256424][T16299] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1011.286070][T16299] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1011.412112][T16306] binder: 16303:16306 ioctl 4018620d 0 returned -22 [ 1012.065108][T16332] fuse: Unknown parameter 'group_id00000000000000000000' [ 1013.531330][ T34] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1013.550388][T16371] fuse: Unknown parameter 'group_id00000000000000000000' [ 1013.713937][ T34] usb 2-1: Using ep0 maxpacket: 32 [ 1013.728296][ T34] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1013.740901][ T34] usb 2-1: config 14 has an invalid interface number: 228 but max is 0 [ 1013.757833][ T34] usb 2-1: config 14 has no interface number 0 [ 1013.767316][ T34] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1013.778757][ T34] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1013.793644][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.833949][ T34] usb 2-1: Product: syz [ 1013.838173][ T34] usb 2-1: Manufacturer: syz [ 1013.842793][ T34] usb 2-1: SerialNumber: syz [ 1014.107415][ T34] legousbtower 2-1:14.228: interrupt endpoints not found [ 1014.257030][ T34] usb 2-1: USB disconnect, device number 8 [ 1014.315188][T16392] loop0: detected capacity change from 0 to 4096 [ 1014.603741][T16394] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1015.406165][T16407] fuse: Bad value for 'user_id' [ 1015.657690][T15763] Bluetooth: hci0: command 0x0406 tx timeout [ 1016.797979][ T34] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1016.943055][T16445] loop5: detected capacity change from 0 to 4096 [ 1017.063070][T16448] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1017.783863][ T34] usb 2-1: Using ep0 maxpacket: 32 [ 1017.801168][ T34] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1017.825133][ T34] usb 2-1: config 14 has an invalid interface number: 228 but max is 0 [ 1017.833464][ T34] usb 2-1: config 14 has no interface number 0 [ 1017.835210][T16457] fuse: Bad value for 'user_id' [ 1017.874297][ T34] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1017.900603][ T34] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1017.914113][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.931247][ T34] usb 2-1: Product: syz [ 1017.961994][ T34] usb 2-1: Manufacturer: syz [ 1017.972222][ T34] usb 2-1: SerialNumber: syz [ 1018.276331][ T34] legousbtower 2-1:14.228: interrupt endpoints not found [ 1018.289008][ T34] usb 2-1: USB disconnect, device number 9 [ 1019.667844][T16501] fuse: Bad value for 'user_id' [ 1019.932278][T16511] netlink: 'syz.3.3149': attribute type 72 has an invalid length. [ 1020.747006][T16535] loop0: detected capacity change from 0 to 4096 [ 1020.953041][T16536] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1021.176385][T15763] Bluetooth: hci1: command 0x1003 tx timeout [ 1021.187474][T13069] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1021.651698][T16546] fuse: Bad value for 'fd' [ 1021.869053][T16559] CIFS: Attempting to mount //127.0.0.1/share [ 1022.239127][T16569] loop5: detected capacity change from 0 to 4096 [ 1022.310704][T16570] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1022.719076][T16559] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1022.863433][T16559] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1023.245724][T16583] fuse: Bad value for 'fd' [ 1023.461683][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3174'. [ 1023.665395][T16603] loop5: detected capacity change from 0 to 512 [ 1023.717438][T16603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.750997][T16603] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.435578][T16627] fuse: Bad value for 'fd' [ 1024.730165][T16631] fuse: Unknown parameter 'use00000000000000000000' [ 1024.735359][T15762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.101725][T13203] Bluetooth: hci1: Frame reassembly failed (-84) [ 1025.612420][T16666] fuse: Bad value for 'fd' [ 1025.729281][T16671] fuse: Unknown parameter 'user_i00000000000000000000' [ 1025.802583][T16674] loop3: detected capacity change from 0 to 512 [ 1025.917098][T16674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.937200][T16674] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.857180][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.124055][T16712] fuse: Bad value for 'fd' [ 1027.174053][T13069] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1027.174146][T15763] Bluetooth: hci1: command 0x1003 tx timeout [ 1027.262068][T16714] fuse: Unknown parameter 'user_i00000000000000000000' [ 1027.325157][ T34] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1027.534139][ T34] usb 1-1: Using ep0 maxpacket: 32 [ 1027.551561][ T34] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1027.562349][T16725] loop1: detected capacity change from 0 to 512 [ 1027.574381][ T34] usb 1-1: config 14 has an invalid interface number: 228 but max is 0 [ 1027.593874][ T34] usb 1-1: config 14 has no interface number 0 [ 1027.610339][ T34] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1027.639499][T16725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.662771][ T34] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1027.683274][T16725] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.701166][ T34] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1027.724571][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.734688][ T34] usb 1-1: Product: syz [ 1027.738907][ T34] usb 1-1: Manufacturer: syz [ 1027.743526][ T34] usb 1-1: SerialNumber: syz [ 1027.970700][ T34] legousbtower 1-1:14.228: interrupt endpoints not found [ 1028.658909][ T34] usb 1-1: USB disconnect, device number 12 [ 1028.667610][T14266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.781439][T16748] fuse: Bad value for 'fd' [ 1028.960938][ T42] Bluetooth: hci1: Frame reassembly failed (-84) [ 1029.230222][ T5832] wiimote 0005:057E:0306.0006: item fetching failed at offset 14/15 [ 1029.251053][ T5832] wiimote 0005:057E:0306.0006: HID parse failed [ 1029.279822][ T5832] wiimote: probe of 0005:057E:0306.0006 failed with error -22 [ 1029.524271][ T6806] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1029.614017][ T5831] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1029.679609][T16782] loop0: detected capacity change from 0 to 512 [ 1029.721826][T16782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.742329][T16782] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.757286][ T6806] usb 4-1: no configurations [ 1029.761972][ T6806] usb 4-1: can't read configurations, error -22 [ 1029.907821][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 1029.915208][ T5831] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1029.923756][ T5831] usb 6-1: config 14 has an invalid interface number: 228 but max is 0 [ 1029.932125][ T5831] usb 6-1: config 14 has no interface number 0 [ 1029.938899][ T5831] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1029.950278][ T5831] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1030.442035][ T5831] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1030.452499][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.461550][ T5831] usb 6-1: Product: syz [ 1030.465962][ T5831] usb 6-1: Manufacturer: syz [ 1030.470626][ T5831] usb 6-1: SerialNumber: syz [ 1030.585010][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.703076][ T5831] legousbtower 6-1:14.228: interrupt endpoints not found [ 1030.723919][ T5831] usb 6-1: USB disconnect, device number 2 [ 1030.732800][T16790] fuse: Invalid rootmode [ 1031.016010][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1031.033277][ T5781] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1031.166126][T16804] loop1: detected capacity change from 0 to 512 [ 1031.232374][T16804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.250707][T16804] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.292426][T16811] fuse: Invalid rootmode [ 1032.218660][T14266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.741268][T16843] loop0: detected capacity change from 0 to 512 [ 1032.781680][T16843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.799123][T16843] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.800807][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.454104][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1034.454135][ T5781] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1034.466108][T16879] loop3: detected capacity change from 0 to 512 [ 1034.629285][T16879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.699313][T16879] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.615127][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.041903][T16922] binder: 16921:16922 ioctl c0306201 0 returned -14 [ 1036.091913][T16924] loop3: detected capacity change from 0 to 512 [ 1036.156348][T16924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.175611][T16924] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.355548][ T6806] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1036.664714][ T6806] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.786697][ T6806] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 1036.909163][ T6806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.119273][ T6806] metro_usb 1-1:1.0: Metrologic USB to Serial converter detected [ 1037.145421][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.153411][T16938] Bluetooth: hci1: Frame reassembly failed (-84) [ 1037.169303][ T6806] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1037.389715][ T6806] usb 1-1: USB disconnect, device number 13 [ 1037.414185][ T6806] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1037.441383][ T6806] metro_usb 1-1:1.0: device disconnected [ 1038.217488][T16952] loop3: detected capacity change from 0 to 32768 [ 1038.436882][T16959] loop0: detected capacity change from 0 to 512 [ 1038.539230][T16959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.565355][T16959] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.179580][ T5781] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1039.496589][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.840020][T16976] loop5: detected capacity change from 0 to 4096 [ 1040.027830][T16977] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1043.529682][T16998] loop5: detected capacity change from 0 to 512 [ 1043.585477][T16998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.675532][T16998] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.595936][T15762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.964309][T17033] loop3: detected capacity change from 0 to 4096 [ 1045.289175][T17034] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1045.751758][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3318'. [ 1045.823170][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3318'. [ 1048.222135][T17048] loop5: detected capacity change from 0 to 512 [ 1048.385359][T17046] loop0: detected capacity change from 0 to 32768 [ 1048.481796][T17048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.524196][T17048] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.335233][T15762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.564818][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 1049.761260][ T34] wiimote 0005:057E:0306.0007: unbalanced collection at end of report description [ 1049.787259][ T34] wiimote 0005:057E:0306.0007: HID parse failed [ 1049.805025][ T34] wiimote: probe of 0005:057E:0306.0007 failed with error -22 [ 1050.064550][ T5832] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1050.249690][ T5832] usb 1-1: no configurations [ 1050.266934][ T5832] usb 1-1: can't read configurations, error -22 [ 1050.492948][T17082] loop5: detected capacity change from 0 to 32768 [ 1051.442424][T17111] input: syz0 as /devices/virtual/input/input15 [ 1051.524324][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1051.574157][ T5781] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1051.574526][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1051.735158][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1051.752743][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1051.763104][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1051.772646][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.790038][ T9] usb 6-1: probing VID:PID(0424:012C) [ 1051.803065][ T9] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 1051.816314][ T9] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1051.822941][ T9] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 1051.836556][ T9] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1051.843262][ T9] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1051.997911][ T7541] Bluetooth: hci1: Frame reassembly failed (-84) [ 1052.009002][T17129] Bluetooth: hci1: Frame reassembly failed (-84) [ 1052.134063][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1052.209342][ T9] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1052.255512][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1052.316921][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1052.336428][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1052.355350][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1052.365944][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1052.382420][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1052.395736][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1052.404878][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.419460][ T9] usb 6-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 1052.633695][ T23] usb 4-1: GET_CAPABILITIES returned 0 [ 1052.639616][ T23] usbtmc 4-1:16.0: can't read capabilities [ 1052.841697][T17127] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 1052.850094][ T6806] usb 4-1: USB disconnect, device number 8 [ 1053.013590][T17137] kvm_intel: kvm [17136]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x40000000000009 [ 1054.055357][ T5781] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1054.454805][T17165] syzkaller0: entered promiscuous mode [ 1054.465028][T17165] syzkaller0: entered allmulticast mode [ 1054.547937][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.557423][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.640358][T17173] Bluetooth: hci1: Frame reassembly failed (-84) [ 1054.651423][T13203] Bluetooth: hci1: Frame reassembly failed (-84) [ 1054.697917][T17179] netlink: 'syz.3.3373': attribute type 1 has an invalid length. [ 1054.733140][T17179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1054.778488][T17179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1054.789301][T17179] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1054.800623][T17179] bond1: (slave gre1): Error -95 calling set_mac_address [ 1054.826756][T17181] gretap1: entered promiscuous mode [ 1054.835825][T17181] bond1: (slave gretap1): making interface the new active one [ 1054.845408][T17181] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1055.157046][T17183] loop5: detected capacity change from 0 to 32768 [ 1055.193733][ T5832] usb 6-1: USB disconnect, device number 3 [ 1055.852986][T17179] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1055.902114][T17179] bond1 (unregistering): Released all slaves [ 1056.326128][T17203] syzkaller0: entered promiscuous mode [ 1056.331705][T17203] syzkaller0: entered allmulticast mode [ 1056.690516][T17211] loop1: detected capacity change from 0 to 32768 [ 1056.699475][ T5781] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1056.704601][ T5782] Bluetooth: hci1: command 0x1003 tx timeout [ 1057.557815][T17220] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 1057.767788][T17228] jffs2: notice: (17228) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1057.831675][T13069] Bluetooth: hci3: command 0x0406 tx timeout [ 1057.851556][T17230] tipc: Started in network mode [ 1057.858536][T17230] tipc: Node identity ead4fb2cadc5, cluster identity 4711 [ 1057.871624][T17230] tipc: Enabled bearer , priority 0 [ 1057.921219][T17229] tipc: Disabling bearer [ 1058.310441][T17246] loop0: detected capacity change from 0 to 32768 [ 1058.323983][T15763] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1058.329444][T17213] Bluetooth: hci5: command 0x1003 tx timeout [ 1060.111925][T17298] loop5: detected capacity change from 0 to 32768 [ 1060.837538][T17302] tipc: Enabled bearer , priority 0 [ 1060.860866][T17301] tipc: Disabling bearer [ 1060.940403][T17304] nvmet: Invalid value 'i' for adrfam [ 1061.577884][T17213] Bluetooth: hci1: command 0x1003 tx timeout [ 1061.578875][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1061.762936][T17333] tipc: Started in network mode [ 1061.773501][T17333] tipc: Node identity 1e5094921b72, cluster identity 4711 [ 1061.793478][T17333] tipc: Enabled bearer , priority 0 [ 1061.837780][T17330] tipc: Disabling bearer [ 1062.288878][T17338] loop0: detected capacity change from 0 to 32768 [ 1063.679899][T17364] nvmet: Invalid value 'i' for adrfam [ 1063.964055][T17371] loop3: detected capacity change from 0 to 32768 [ 1064.228907][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1064.864485][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1064.874468][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1064.887970][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1064.898705][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1064.910106][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1064.937108][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1064.949379][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.083552][T17381] loop5: detected capacity change from 0 to 512 [ 1065.161278][T17381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.176887][T17381] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.193639][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 1065.200445][ T9] usbtmc 1-1:16.0: can't read capabilities [ 1065.388034][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1065.438570][ T9] usb 1-1: USB disconnect, device number 16 [ 1066.161824][T15762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.497421][T17407] syzkaller0: entered promiscuous mode [ 1066.503396][T17407] syzkaller0: entered allmulticast mode [ 1066.532190][T17407] tipc: Enabled bearer , priority 0 [ 1066.558535][T17406] tipc: Resetting bearer [ 1066.675522][T17406] tipc: Disabling bearer [ 1066.800052][T17426] loop5: detected capacity change from 0 to 512 [ 1066.838056][T17426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.858111][T17426] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.971023][T17434] nvmet: Invalid value 'i' for adrfam [ 1067.819937][T15122] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1067.858572][T15762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.025805][T15122] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.044598][T15122] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 1068.063892][T15122] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.089233][T15122] metro_usb 1-1:1.0: Metrologic USB to Serial converter detected [ 1068.123453][T15122] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1068.306657][T15122] usb 1-1: USB disconnect, device number 17 [ 1068.326679][T15122] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1068.341101][T15122] metro_usb 1-1:1.0: device disconnected [ 1068.533969][T17213] Bluetooth: hci1: command 0x1003 tx timeout [ 1068.534003][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1068.666322][T17464] syzkaller0: entered promiscuous mode [ 1068.671936][T17464] syzkaller0: entered allmulticast mode [ 1068.682297][T17464] tipc: Enabled bearer , priority 0 [ 1068.692910][T17463] tipc: Resetting bearer [ 1068.736191][T17463] tipc: Disabling bearer [ 1069.061650][T17473] loop5: detected capacity change from 0 to 32768 [ 1069.193155][T17477] binder_alloc: 17476: binder_alloc_buf, no vma [ 1070.106710][T17493] Bluetooth: hci1: Frame reassembly failed (-84) [ 1070.113906][ T7541] Bluetooth: hci1: Frame reassembly failed (-84) [ 1070.319173][T17500] syzkaller0: entered promiscuous mode [ 1070.328325][T17500] syzkaller0: entered allmulticast mode [ 1070.343497][T17500] tipc: Enabled bearer , priority 0 [ 1070.362560][T17499] tipc: Resetting bearer [ 1070.421958][T17499] tipc: Disabling bearer [ 1070.568309][T17504] binder_alloc: 17503: binder_alloc_buf, no vma [ 1070.674098][T13981] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1070.869004][T13981] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.898319][T13981] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 1070.927340][T13981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.961892][T13981] metro_usb 2-1:1.0: Metrologic USB to Serial converter detected [ 1070.990264][T13981] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1071.240604][T17524] loop3: detected capacity change from 0 to 32768 [ 1071.287652][T17441] usb 2-1: USB disconnect, device number 10 [ 1071.428628][T17441] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1071.945459][T17441] metro_usb 2-1:1.0: device disconnected [ 1072.127124][T17531] loop5: detected capacity change from 0 to 4096 [ 1072.133973][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1072.138761][T17213] Bluetooth: hci1: command 0x1003 tx timeout [ 1072.365303][T17532] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1072.749533][T17544] loop1: detected capacity change from 0 to 4096 [ 1072.794249][T17546] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1073.245490][T17563] loop1: detected capacity change from 0 to 512 [ 1073.296822][T17563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.311823][T17563] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.368585][T17575] loop5: detected capacity change from 0 to 32768 [ 1074.409816][T14266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.965760][T17593] CIFS: Attempting to mount //127.0.0.1/share [ 1075.005657][T17593] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1075.047643][T17593] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1075.212027][T17599] syzkaller0: entered promiscuous mode [ 1075.226955][T17599] syzkaller0: entered allmulticast mode [ 1075.395262][T17611] loop5: detected capacity change from 0 to 512 [ 1075.429097][T17611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.442792][T17611] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.420836][T15762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.802733][T17629] loop5: detected capacity change from 0 to 32768 [ 1077.747827][T15122] IPVS: starting estimator thread 0... [ 1077.844417][T17638] IPVS: using max 20 ests per chain, 48000 per kthread [ 1079.428128][T17622] tipc: Enabling of bearer rejected, failed to enable media [ 1079.566267][T17648] loop3: detected capacity change from 0 to 512 [ 1079.573151][T17647] overlayfs: failed to resolve './file1': -2 [ 1079.669603][T17648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.774053][T17648] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.941805][T17669] Bluetooth: hci1: Frame reassembly failed (-84) [ 1080.259606][T17670] loop1: detected capacity change from 0 to 32768 [ 1081.233121][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.484028][T17679] binder: BINDER_SET_CONTEXT_MGR already set [ 1081.503931][T17679] binder: 17678:17679 ioctl 4018620d 200000000180 returned -16 [ 1081.537050][T17681] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3524'. [ 1081.678987][T17683] syzkaller0: entered promiscuous mode [ 1081.684665][T17683] syzkaller0: entered allmulticast mode [ 1081.698217][T17688] overlayfs: failed to resolve './file1': -2 [ 1081.974196][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1082.167289][T17705] loop0: detected capacity change from 0 to 512 [ 1082.233124][T17705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.247690][T17705] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.222217][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.805584][T17689] tipc: Started in network mode [ 1084.810520][T17689] tipc: Node identity eac916bfa7f9, cluster identity 4711 [ 1084.818088][T17689] tipc: Enabled bearer , priority 0 [ 1084.828661][T17684] tipc: Disabling bearer [ 1085.210889][T17726] loop3: detected capacity change from 0 to 32768 [ 1085.430304][T17733] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3536'. [ 1085.923161][T17740] loop0: detected capacity change from 0 to 512 [ 1085.990536][T17740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.011291][ T7541] Bluetooth: hci1: Frame reassembly failed (-84) [ 1086.033004][T17740] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.078118][T17739] Bluetooth: hci1: Frame reassembly failed (-84) [ 1086.126667][T17746] Bluetooth: hci1: Frame reassembly failed (-84) [ 1086.399833][T17748] syzkaller0: entered promiscuous mode [ 1086.405569][T17748] syzkaller0: entered allmulticast mode [ 1087.201142][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.337052][T13069] Bluetooth: hci3: command 0x0406 tx timeout [ 1088.068852][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1088.068902][T17213] Bluetooth: hci1: command 0x1003 tx timeout [ 1088.215561][T17772] CIFS: Attempting to mount //127.0.0.1/share [ 1088.269619][T17773] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1088.290158][T17772] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1089.670900][T17762] tipc: Enabling of bearer rejected, failed to enable media [ 1089.793760][T17782] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3547'. [ 1089.983946][T17789] Bluetooth: hci1: Frame reassembly failed (-84) [ 1090.003143][ T42] Bluetooth: hci1: Frame reassembly failed (-84) [ 1090.163241][T17793] loop1: detected capacity change from 0 to 32768 [ 1090.898412][T17803] loop0: detected capacity change from 0 to 4096 [ 1091.186272][T17809] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1091.525006][T17441] wiimote 0005:057E:0306.0008: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1091.540751][T17441] wiimote 0005:057E:0306.0008: New device registered [ 1091.783979][T15122] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1091.964861][T15122] usb 1-1: device descriptor read/64, error -71 [ 1091.979302][T17819] syzkaller0: entered promiscuous mode [ 1091.985143][T17819] syzkaller0: entered allmulticast mode [ 1092.054483][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1092.054540][T17213] Bluetooth: hci1: command 0x1003 tx timeout [ 1092.237893][T15122] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1092.394047][T15122] usb 1-1: device descriptor read/64, error -71 [ 1092.514345][T15122] usb usb1-port1: attempt power cycle [ 1092.613959][T10235] wiimote 0005:057E:0306.0008: detected device: Nintendo Wii Remote (Gen 1) [ 1092.673732][T10235] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input17 [ 1092.696769][T10235] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input18 [ 1092.732914][T10235] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input16 [ 1092.927265][T15122] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1092.964945][T15122] usb 1-1: device descriptor read/8, error -71 [ 1093.254093][T15122] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1093.286006][T15122] usb 1-1: device descriptor read/8, error -71 [ 1093.412376][T15122] usb usb1-port1: unable to enumerate USB device [ 1094.574579][T17814] wiimote 0005:057E:0306.0008: Device removed [ 1094.857332][T17848] loop1: detected capacity change from 0 to 4096 [ 1094.879256][T17853] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1094.887433][T17852] CIFS: Attempting to mount //127.0.0.1/share [ 1094.939935][T17855] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1094.956824][T17852] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1095.070041][ T992] Bluetooth: hci1: Frame reassembly failed (-84) [ 1095.082500][T17860] Bluetooth: hci1: Frame reassembly failed (-84) [ 1095.274544][T17864] syzkaller0: entered promiscuous mode [ 1095.280076][T17864] syzkaller0: entered allmulticast mode [ 1097.096832][T17213] Bluetooth: hci1: command 0x1003 tx timeout [ 1097.106100][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1097.854398][T17892] loop1: detected capacity change from 0 to 4096 [ 1097.875332][T17895] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1097.903250][T17896] CIFS: Attempting to mount //127.0.0.1/share [ 1098.222757][ T992] Bluetooth: hci1: Frame reassembly failed (-84) [ 1098.722362][T17896] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1098.730205][T17896] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1098.852509][T17915] syzkaller0: entered promiscuous mode [ 1098.858621][T17915] syzkaller0: entered allmulticast mode [ 1100.295229][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1101.409079][T17937] loop1: detected capacity change from 0 to 4096 [ 1101.453625][T17942] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1101.810608][T17956] CIFS: Attempting to mount //127.0.0.1/share [ 1101.870002][T17957] CIFS: VFS: Invalid response size 0 for command 0 [ 1101.882771][T17956] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1102.319674][T17969] syzkaller0: entered promiscuous mode [ 1102.330148][T17969] syzkaller0: entered allmulticast mode [ 1102.801119][T17972] loop3: detected capacity change from 0 to 4096 [ 1102.872118][T17974] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1103.384505][T17977] loop3: detected capacity change from 0 to 32768 [ 1104.533677][T18000] CIFS: Attempting to mount //127.0.0.1/share [ 1104.606044][T18001] CIFS: VFS: Invalid response size 0 for command 0 [ 1104.615812][T18000] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1106.200624][T18020] loop0: detected capacity change from 0 to 4096 [ 1106.249791][T18025] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1106.419287][T18028] loop1: detected capacity change from 0 to 4096 [ 1106.446695][T18033] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1106.624622][T18031] loop0: detected capacity change from 0 to 32768 [ 1107.903551][T18050] Bluetooth: hci1: Frame reassembly failed (-84) [ 1108.054815][T18051] loop1: detected capacity change from 0 to 4096 [ 1108.083953][T18057] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1108.364677][T18064] loop3: detected capacity change from 0 to 4096 [ 1108.392606][T18066] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1108.747887][T18078] loop1: detected capacity change from 0 to 4096 [ 1108.771505][T18080] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1109.485031][T18103] loop1: detected capacity change from 0 to 4096 [ 1109.521636][T18105] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1109.894051][T17213] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1110.172996][T18127] loop1: detected capacity change from 0 to 4096 [ 1110.197439][T18129] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1110.609609][ T2933] Bluetooth: hci1: Frame reassembly failed (-84) [ 1110.960545][T18152] loop0: detected capacity change from 0 to 4096 [ 1110.994136][T18154] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1111.452513][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 1111.459895][T18167] Bluetooth: hci5: Frame reassembly failed (-84) [ 1111.702687][T18173] loop5: detected capacity change from 0 to 32768 [ 1112.613987][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1112.614067][T17213] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1112.998872][T18186] loop5: detected capacity change from 0 to 4096 [ 1113.036870][T18188] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1113.557833][T18198] loop3: detected capacity change from 0 to 32768 [ 1113.565620][T15763] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1114.340903][T18208] loop1: detected capacity change from 0 to 4096 [ 1114.457115][T18210] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1114.518739][T18214] loop5: detected capacity change from 0 to 4096 [ 1114.611501][T18216] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1115.432097][T18242] loop3: detected capacity change from 0 to 4096 [ 1115.462251][T18245] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1115.978834][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.987460][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.081742][T18269] loop1: detected capacity change from 0 to 4096 [ 1116.126155][T18271] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1117.293053][T18325] loop1: detected capacity change from 0 to 4096 [ 1117.331515][T18327] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1117.334543][T17213] Bluetooth: hci1: command 0x1003 tx timeout [ 1117.350596][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1118.149968][T18354] CIFS: Attempting to mount //127.0.0.1/share [ 1118.258241][T18359] loop1: detected capacity change from 0 to 4096 [ 1118.296026][T18363] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1118.968442][T18354] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1118.984094][T18354] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1119.213065][T18390] loop3: detected capacity change from 0 to 512 [ 1119.234242][T10235] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1119.317454][T18390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.345162][T18390] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.437791][T10235] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.461371][T10235] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 1119.488447][T10235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.529260][T10235] metro_usb 2-1:1.0: Metrologic USB to Serial converter detected [ 1119.552435][T10235] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1120.003193][ T23] usb 2-1: USB disconnect, device number 11 [ 1120.165006][ T23] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1120.212865][ T23] metro_usb 2-1:1.0: device disconnected [ 1120.286613][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.517429][T18411] CIFS: Attempting to mount //127.0.0.1/share [ 1120.572474][T18414] CIFS: VFS: Invalid response size 0 for command 0 [ 1120.582587][T18411] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1121.065027][T18438] loop0: detected capacity change from 0 to 512 [ 1121.092508][T18437] X25: received unknown 00 with LCI 000 [ 1121.173721][T18438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.194236][T18438] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.356062][T18443] loop1: detected capacity change from 0 to 4096 [ 1121.956249][T18449] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1122.129037][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.364044][T18457] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3756'. [ 1122.409632][T18459] CIFS: Attempting to mount //127.0.0.1/share [ 1122.484032][T18461] CIFS: VFS: Invalid response size 0 for command 0 [ 1122.504000][T18461] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1122.511986][T18459] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1122.914480][T18481] loop1: detected capacity change from 0 to 512 [ 1123.000777][T18481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.003709][T18483] X25: received unknown 00 with LCI 000 [ 1123.040119][T18481] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.232568][T15763] Bluetooth: hci4: command 0x0406 tx timeout [ 1123.830809][T18496] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3767'. [ 1124.028122][T14266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.051276][ T992] Bluetooth: hci1: Frame reassembly failed (-84) [ 1124.175355][T18505] CIFS: Attempting to mount //127.0.0.1/share [ 1124.230770][T18506] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1124.238355][T18505] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 1124.267537][T18505] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1124.477697][T18519] X25: received unknown 00 with LCI 000 [ 1124.491390][T18521] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3777'. [ 1124.569805][T18524] loop3: detected capacity change from 0 to 512 [ 1124.640152][T18524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.676541][T18524] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1125.643195][T18544] CIFS: Attempting to mount //127.0.0.1/share [ 1125.666444][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.743096][T18544] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 1125.754479][T18547] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1125.775891][T18544] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1126.054155][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1126.062822][T17213] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1126.669927][T18590] CIFS: Attempting to mount //127.0.0.1/share [ 1126.726094][T18592] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1126.736692][T18590] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 1126.750679][T18590] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1126.783439][T13203] Bluetooth: hci1: Frame reassembly failed (-84) [ 1126.910168][T18603] loop0: detected capacity change from 0 to 4096 [ 1126.942025][T18605] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1127.574280][T13069] Bluetooth: hci5: command 0x1003 tx timeout [ 1127.582173][T15763] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1127.749025][T18639] CIFS: Attempting to mount //127.0.0.1/share [ 1127.810550][T18639] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 1127.818999][T18640] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1127.840230][T18639] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1128.134108][T18654] loop0: detected capacity change from 0 to 4096 [ 1128.195266][T18661] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1128.854107][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1128.862195][T17213] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1128.936074][T18684] CIFS: Attempting to mount //127.0.0.1/share [ 1128.997543][T18686] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1129.005113][T18684] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 1129.021104][T18684] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1129.137803][T18693] loop3: detected capacity change from 0 to 4096 [ 1129.163011][T18695] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1129.929580][T18724] CIFS: Attempting to mount //127.0.0.1/share [ 1129.983741][T18726] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1129.991086][T18724] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 1130.005281][T18724] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1130.130286][T18733] loop0: detected capacity change from 0 to 4096 [ 1130.150508][T18737] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1130.614212][T13069] Bluetooth: hci5: command 0x1003 tx timeout [ 1130.622138][T15763] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1131.146356][T18775] CIFS: Attempting to mount //127.0.0.1/share [ 1131.203484][T18778] loop1: detected capacity change from 0 to 4096 [ 1131.222659][T18775] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 1131.232644][T18777] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1131.243670][T18775] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1131.262162][T18781] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1131.515138][ T1100] Bluetooth: hci5: Frame reassembly failed (-84) [ 1131.655243][T17213] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1132.297089][T18806] tipc: Enabled bearer , priority 0 [ 1132.309194][T18809] CIFS: Attempting to mount //127.0.0.1/share [ 1132.330772][T18805] tipc: Disabling bearer [ 1132.367104][T18810] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1132.374732][T18809] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 1132.383062][T18809] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1132.531077][T18813] loop5: detected capacity change from 0 to 4096 [ 1132.568284][T18815] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1133.390388][T18839] tipc: Enabled bearer , priority 0 [ 1133.412045][T18838] tipc: Disabling bearer [ 1133.475611][T18841] CIFS: Attempting to mount //127.0.0.1/share [ 1133.518471][T18843] loop0: detected capacity change from 0 to 512 [ 1133.574513][T13069] Bluetooth: hci5: command 0x1003 tx timeout [ 1133.575273][T15763] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1133.582789][T18843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.616705][T18843] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.416501][T18841] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1134.440068][T18841] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1134.611932][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.989986][T18871] tipc: Enabled bearer , priority 0 [ 1135.015403][T18870] tipc: Disabling bearer [ 1135.093931][T15763] Bluetooth: hci1: command 0x1003 tx timeout [ 1135.098853][T17213] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1135.422331][T18884] loop5: detected capacity change from 0 to 512 [ 1135.517308][T18884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.565150][T18884] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.600213][T18892] CIFS: Attempting to mount //127.0.0.1/share [ 1136.439225][T18892] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1136.600428][T18916] tipc: Started in network mode [ 1136.613919][T18916] tipc: Node identity 86d4bc6dbfbb, cluster identity 4711 [ 1136.625437][T18916] tipc: Enabled bearer , priority 0 [ 1136.673938][T18915] tipc: Disabling bearer [ 1136.681798][T15762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.218537][T18939] overlayfs: failed to resolve './file0': -2 [ 1137.369643][T18944] loop3: detected capacity change from 0 to 512 [ 1137.376063][T18946] CIFS: Attempting to mount //127.0.0.1/share [ 1137.438653][T18944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1137.455365][T18944] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1138.134484][T15763] Bluetooth: hci1: command 0x1003 tx timeout [ 1138.134523][T17213] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1138.217490][T18946] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1138.559904][T18969] overlayfs: failed to resolve './file0': -2 [ 1138.765861][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.912049][ T2933] Bluetooth: hci1: Frame reassembly failed (-84) [ 1139.084656][T13981] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1139.113952][T18989] CIFS: Attempting to mount //127.0.0.1/share [ 1139.279203][T13981] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.291940][T13981] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 1139.310325][T13981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.333152][T13981] metro_usb 1-1:1.0: Metrologic USB to Serial converter detected [ 1139.361561][T13981] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1139.562955][T14407] usb 1-1: USB disconnect, device number 22 [ 1139.581360][T14407] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1139.597448][T14407] metro_usb 1-1:1.0: device disconnected [ 1139.773701][ T2933] Bluetooth: hci5: Frame reassembly failed (-84) [ 1139.781376][T18994] Bluetooth: hci5: Frame reassembly failed (-84) [ 1139.947857][T18989] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1140.240547][T19007] loop5: detected capacity change from 0 to 512 [ 1140.287185][T19007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.304221][T19007] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1140.934041][T17213] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1141.092778][T19025] CIFS: Attempting to mount //127.0.0.1/share [ 1141.358267][T15762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.814119][T13069] Bluetooth: hci5: command 0x1003 tx timeout [ 1141.820761][T15763] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1141.912975][T19025] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1141.936835][T19025] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1142.200612][T19046] loop0: detected capacity change from 0 to 512 [ 1142.278223][T19046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1142.291604][T19046] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.069800][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.237062][T19073] CIFS: Attempting to mount //127.0.0.1/share [ 1144.064938][T19073] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1144.073108][T19073] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1144.214114][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1144.214149][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1144.429232][ T42] Bluetooth: hci1: Frame reassembly failed (-84) [ 1144.444211][T19087] Bluetooth: hci1: Frame reassembly failed (-84) [ 1144.530171][T19092] loop1: detected capacity change from 0 to 512 [ 1144.582011][T19092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.599511][T19092] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.909461][T19107] CIFS: Attempting to mount //127.0.0.1/share [ 1145.452920][T14266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.741097][T19107] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1146.231107][T19134] loop0: detected capacity change from 0 to 512 [ 1146.334778][T19134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.355036][T19134] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.454001][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1146.473963][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1146.892713][T19144] CIFS: Attempting to mount //127.0.0.1/share [ 1147.724491][T19144] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1147.760459][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.654302][T19188] loop3: detected capacity change from 0 to 512 [ 1148.695395][T19188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.721640][T19188] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.729244][T19194] CIFS: Attempting to mount //127.0.0.1/share [ 1149.493977][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1149.494128][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1149.558086][T19194] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1150.153427][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.267727][ T992] Bluetooth: hci1: Frame reassembly failed (-84) [ 1150.402549][T19242] CIFS: Attempting to mount //127.0.0.1/share [ 1150.495849][T19248] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3999'. [ 1150.633056][T19254] loop0: detected capacity change from 0 to 512 [ 1150.674357][T19254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1150.688099][T19254] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.256230][T19242] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1151.634325][T19272] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.4008'. [ 1151.968696][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.293978][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1152.443230][T19296] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.4019'. [ 1152.543686][T19301] loop0: detected capacity change from 0 to 512 [ 1152.593674][T19301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.635457][T19301] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.499828][T19330] netlink: 'syz.3.4031': attribute type 72 has an invalid length. [ 1153.771232][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.894075][T13069] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1154.962617][T19358] netlink: 'syz.3.4040': attribute type 72 has an invalid length. [ 1155.014286][T17213] Bluetooth: hci1: command 0x1003 tx timeout [ 1155.021478][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1155.091246][T19364] loop3: detected capacity change from 0 to 512 [ 1155.172941][T19364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.194075][T19364] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.525762][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.753519][T19391] nvmet: Invalid value 'i' for adrfam [ 1156.914887][T19395] netlink: 'syz.1.4052': attribute type 72 has an invalid length. [ 1157.006309][ T42] Bluetooth: hci5: Frame reassembly failed (-84) [ 1157.048794][T19399] loop1: detected capacity change from 0 to 512 [ 1157.121438][T19399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.134515][T19399] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.334029][T15763] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1157.337606][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1157.352861][T14266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.414083][T14407] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1157.598577][T14407] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.639017][T14407] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 1157.653466][T14407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.670743][T14407] metro_usb 1-1:1.0: Metrologic USB to Serial converter detected [ 1158.387273][T14407] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1158.447231][T14407] usb 1-1: USB disconnect, device number 23 [ 1158.478011][T14407] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1158.500438][T14407] metro_usb 1-1:1.0: device disconnected [ 1158.529813][T19421] nvmet: Invalid value 'i' for adrfam [ 1158.638696][T19427] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4063'. [ 1158.746055][T19429] loop0: detected capacity change from 0 to 512 [ 1158.803495][T19429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.842124][T19429] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.014001][T17213] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1159.127578][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.884043][T14407] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1159.911632][T19457] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4073'. [ 1160.066172][T14407] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.077367][T14407] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 1160.087710][T14407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.117232][T14407] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected [ 1160.144826][T14407] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1160.259423][T19466] nvmet: Invalid value 'i' for adrfam [ 1160.331895][T19468] loop0: detected capacity change from 0 to 512 [ 1160.343512][ T5831] usb 4-1: USB disconnect, device number 9 [ 1160.364090][ T5831] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1160.376456][ T5831] metro_usb 4-1:1.0: device disconnected [ 1160.409047][T19468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.430521][T19468] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.863960][T17213] Bluetooth: hci1: command 0x1003 tx timeout [ 1160.871181][T17192] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1161.262532][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.034934][T19496] nvmet: Invalid value 'i' for adrfam [ 1162.294156][T15763] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1162.301068][T17213] Bluetooth: hci5: command 0x1003 tx timeout [ 1162.477092][T19510] loop1: detected capacity change from 0 to 512 [ 1162.537608][T19510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.564017][T19510] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.412475][T14266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.548824][ T7541] Bluetooth: hci5: Frame reassembly failed (-84) [ 1164.134186][T17192] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1164.140930][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1164.602302][T19548] loop0: detected capacity change from 0 to 512 [ 1164.684913][T19548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1164.698266][T19548] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1164.825043][T19556] Bluetooth: hci1: Frame reassembly failed (-84) [ 1165.574359][T17213] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1165.598129][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.118343][T19575] nvmet: Invalid value 'i' for adrfam [ 1166.281288][T19584] loop1: detected capacity change from 0 to 512 [ 1166.337183][T19584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.368400][T19584] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.370235][ T2933] Bluetooth: hci5: Frame reassembly failed (-84) [ 1166.775118][T17192] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1166.775294][T17213] Bluetooth: hci1: command 0x1003 tx timeout [ 1167.277134][T14266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.234212][T19617] nvmet: Invalid value 'i' for adrfam [ 1168.322145][T19619] loop1: detected capacity change from 0 to 512 [ 1168.365942][T19619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1168.378769][T17192] Bluetooth: hci5: command 0x1003 tx timeout [ 1168.389140][T13069] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1168.395981][T19619] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1169.350236][T14266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.659429][T19644] nvmet: Invalid value 'i' for adrfam [ 1169.776397][T13202] Bluetooth: hci1: Frame reassembly failed (-84) [ 1170.000745][T19653] loop1: detected capacity change from 0 to 4096 [ 1170.181055][T19656] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1171.814065][T17192] Bluetooth: hci1: command 0x1003 tx timeout [ 1171.984124][T13069] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1174.093967][ T5831] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1174.280452][ T5831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.469185][ T5831] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 1174.478962][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.501150][ T5831] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected [ 1174.512768][ T5831] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1174.918087][ T5831] usb 4-1: USB disconnect, device number 10 [ 1175.076188][ T5831] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1175.249987][ T5831] metro_usb 4-1:1.0: device disconnected [ 1176.376177][T17192] Bluetooth: hci1: command 0x1003 tx timeout [ 1176.386273][T13069] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1176.995066][T10235] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1177.186053][T10235] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.203098][T10235] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 1177.221257][T10235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.244312][T10235] metro_usb 1-1:1.0: Metrologic USB to Serial converter detected [ 1177.269576][T10235] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1177.434601][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.441024][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.832306][ T5831] usb 1-1: USB disconnect, device number 24 [ 1178.113757][ T5831] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1178.126156][ T5831] metro_usb 1-1:1.0: device disconnected [ 1178.764015][T10235] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1179.104283][T17192] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1179.516601][T10235] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1179.543469][T10235] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1179.578381][T10235] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1179.602107][T10235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.615936][T19794] overlayfs: failed to resolve './file1': -2 [ 1179.628805][T10235] usb 1-1: probing VID:PID(0424:012C) [ 1179.647990][T10235] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 1179.667041][T10235] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1179.673530][T10235] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 1179.704210][T10235] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1179.714139][T10235] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1180.032502][T10235] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1180.242156][T10235] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 1181.118334][T13202] Bluetooth: hci1: Frame reassembly failed (-84) [ 1181.246186][T19821] overlayfs: failed to resolve './file1': -2 [ 1181.536831][T19827] loop1: detected capacity change from 0 to 4096 [ 1181.618672][T19828] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1182.146082][T10235] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 1182.427769][T10235] usb 1-1: USB disconnect, device number 25 [ 1183.186220][T13069] Bluetooth: hci1: command 0x1003 tx timeout [ 1183.194296][T17192] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1184.692510][T10235] USB vub300 remote SDIO host controller[0] now disconnected [ 1186.271190][T19853] overlayfs: failed to resolve './file1': -2 [ 1186.291640][T19856] nvmet: Invalid value 'i' for adrfam [ 1186.797030][T19874] loop5: detected capacity change from 0 to 4096 [ 1186.945296][T19875] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1188.454642][T17192] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1188.583229][T19894] binder: 19893:19894 ioctl 4018620d 0 returned -22 [ 1189.023218][T19907] loop1: detected capacity change from 0 to 4096 [ 1189.114280][T19908] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1190.009383][T19922] binder: 19920:19922 ioctl 4018620d 0 returned -22 [ 1191.374955][T19946] loop3: detected capacity change from 0 to 4096 [ 1191.543055][T19947] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1192.053921][T13069] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1192.183542][T19951] binder: 19949:19951 ioctl 4018620d 0 returned -22 [ 1193.361349][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 1193.654860][T19982] loop1: detected capacity change from 0 to 4096 [ 1193.724177][T19983] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1194.750676][T19994] binder: BINDER_SET_CONTEXT_MGR already set [ 1194.756779][T19994] binder: 19993:19994 ioctl 4018620d 200000000180 returned -16 [ 1195.415943][T17192] Bluetooth: hci1: command 0x1003 tx timeout [ 1195.434037][T13069] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1196.157765][T20012] loop3: detected capacity change from 0 to 4096 [ 1196.303050][T20015] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1196.890545][T20022] binder: BINDER_SET_CONTEXT_MGR already set [ 1196.927281][T20022] binder: 20019:20022 ioctl 4018620d 200000000180 returned -16 [ 1198.139071][T20047] loop3: detected capacity change from 0 to 512 [ 1198.186424][T20047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.200127][T20047] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.411108][T20057] nvmet: Invalid value 'i' for adrfam [ 1199.104346][T13069] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1199.165391][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.330831][T20066] syzkaller0: entered promiscuous mode [ 1199.344010][T20066] syzkaller0: entered allmulticast mode [ 1199.520612][T20074] tipc: Enabling of bearer rejected, failed to enable media [ 1199.705261][T13069] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1199.890225][T10235] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1199.987168][T20090] loop0: detected capacity change from 0 to 4096 [ 1200.128726][T20091] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1200.816364][T10235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.850955][T10235] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 1200.870944][T10235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.908511][T10235] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected [ 1200.953347][T20095] loop5: detected capacity change from 0 to 512 [ 1200.968582][T10235] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1201.003388][T20095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1201.016483][T20095] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1201.998561][ T34] usb 4-1: USB disconnect, device number 11 [ 1202.065643][ T34] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1202.104959][ T34] metro_usb 4-1:1.0: device disconnected [ 1202.122349][T15762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.300394][T20111] syzkaller0: entered promiscuous mode [ 1202.307748][T20111] syzkaller0: entered allmulticast mode [ 1202.749582][T20128] loop0: detected capacity change from 0 to 4096 [ 1202.871908][T20131] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1202.989585][T20133] tipc: Enabling of bearer rejected, failed to enable media [ 1204.447203][T20144] loop5: detected capacity change from 0 to 512 [ 1204.538280][T20144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.574845][T20144] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1205.547722][T15762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.827271][T20168] syzkaller0: entered promiscuous mode [ 1205.846530][T20168] syzkaller0: entered allmulticast mode [ 1206.658349][T20172] loop1: detected capacity change from 0 to 4096 [ 1207.115125][T20176] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1207.914735][T20191] loop1: detected capacity change from 0 to 512 [ 1207.949919][T20183] tipc: Enabling of bearer rejected, failed to enable media [ 1207.972946][T20191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1207.995963][T20191] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.980730][T14266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.182671][T20220] loop0: detected capacity change from 0 to 4096 [ 1209.412351][T20223] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1209.912398][T13069] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1210.056950][T20234] overlayfs: missing 'lowerdir' [ 1210.337392][T20246] loop3: detected capacity change from 0 to 512 [ 1210.367142][T20246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.404166][T20246] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1211.376669][T13983] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.705796][T20265] loop1: detected capacity change from 0 to 4096 [ 1211.997172][T20270] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1212.501469][T20276] overlayfs: missing 'lowerdir' [ 1212.778479][T20287] loop0: detected capacity change from 0 to 512 [ 1212.838582][T20287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.867819][T20287] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.034242][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1213.715207][ T23] usb 2-1: device descriptor read/64, error -71 [ 1213.733664][T13734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.786617][T20298] overlayfs: missing 'lowerdir' [ 1213.998621][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1214.194681][T20310] loop0: detected capacity change from 0 to 4096 [ 1214.234170][ T23] usb 2-1: device descriptor read/64, error -71 [ 1214.325374][T20311] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1214.404769][ T23] usb usb2-port1: attempt power cycle [ 1214.894413][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1214.986110][ T23] usb 2-1: device descriptor read/8, error -71 [ 1215.711166][T20327] overlayfs: missing 'lowerdir' [ 1215.867384][ T28] INFO: task kworker/0:3:5832 blocked for more than 143 seconds. [ 1215.892471][ T28] Not tainted syzkaller #0 [ 1215.918390][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1215.948649][ T28] task:kworker/0:3 state:D stack:15832 pid:5832 ppid:2 flags:0x00004000 [ 1215.992759][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1216.004050][ T28] Workqueue: usb_hub_wq hub_event [ 1216.009158][ T28] Call Trace: [ 1216.012478][ T28] [ 1216.023915][ T28] __schedule+0x15ae/0x4660 [ 1216.028573][ T28] ? asan.module_dtor+0x20/0x20 [ 1216.033478][ T28] ? preempt_schedule+0xc0/0xd0 [ 1216.038399][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 1216.043458][ T28] ? kick_pool+0x320/0x420 [ 1216.047950][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 1216.053353][ T28] schedule+0xbd/0x170 [ 1216.057547][ T28] schedule_timeout+0xc1/0x2d0 [ 1216.062347][ T28] ? console_conditional_schedule+0x40/0x40 [ 1216.068320][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1216.074387][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 1216.079442][ T28] ? lock_chain_count+0x20/0x20 [ 1216.084444][ T28] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1216.089509][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1216.095286][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1216.101048][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1216.106468][ T28] ? wait_for_completion+0x273/0x5a0 [ 1216.111794][ T28] wait_for_completion+0x2c6/0x5a0 [ 1216.117119][ T28] ? io_schedule+0xd0/0xd0 [ 1216.121688][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1216.127914][ T28] ? __flush_work+0x120/0xac0 [ 1216.132638][ T28] __flush_work+0x92f/0xac0 [ 1216.137452][ T28] ? __flush_work+0x120/0xac0 [ 1216.142153][ T28] ? flush_work+0x20/0x20 [ 1216.147292][ T28] ? move_linked_works+0x230/0x230 [ 1216.152418][ T28] ? mod_delayed_work_on+0x1c0/0x1c0 [ 1216.157837][ T28] ? lock_chain_count+0x20/0x20 [ 1216.162711][ T28] ? __cancel_work_timer+0x36e/0x560 [ 1216.168253][ T28] __cancel_work_timer+0x3f8/0x560 [ 1216.173388][ T28] ? cancel_work_sync+0x20/0x20 [ 1216.180787][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1216.186054][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1216.191286][ T28] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1216.198999][ T28] ? usb_hcd_flush_endpoint+0x3e5/0x400 [ 1216.207274][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1216.212524][ T28] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1216.218702][ T28] mmc_stop_host+0xd9/0x460 [ 1216.223281][ T28] mmc_remove_host+0x15/0x60 [ 1216.224051][ T23] usb 2-1: device not accepting address 15, error -71 [ 1216.227938][ T28] vub300_disconnect+0x14f/0x2e0 [ 1216.239580][ T23] usb usb2-port1: unable to enumerate USB device [ 1216.239691][ T28] usb_unbind_interface+0x204/0x870 [ 1216.251457][ T28] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1216.257348][ T28] ? usb_driver_release_interface+0x1c0/0x1c0 [ 1216.263455][ T28] device_release_driver_internal+0x458/0x6f0 [ 1216.269600][ T28] bus_remove_device+0x43b/0x520 [ 1216.274663][ T28] ? bus_probe_device+0x260/0x260 [ 1216.279704][ T28] ? up_write+0x1be/0x410 [ 1216.284438][ T28] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1216.290181][ T28] device_del+0x51f/0x910 [ 1216.294596][ T28] ? device_release+0xbc/0x1e0 [ 1216.299385][ T28] ? kill_device+0x160/0x160 [ 1216.304026][ T28] ? kobject_put+0x421/0x450 [ 1216.309274][ T28] usb_disable_device+0x3ee/0x8a0 [ 1216.317643][ T28] usb_disconnect+0x340/0x8a0 [ 1216.322341][ T28] hub_event+0x1d69/0x4a80 [ 1216.328117][ T28] ? hub_post_resume+0x120/0x120 [ 1216.333069][ T28] ? read_lock_is_recursive+0x20/0x20 [ 1216.338612][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1216.343884][ T28] ? process_scheduled_works+0x975/0x1600 [ 1216.349640][ T28] ? process_scheduled_works+0x975/0x1600 [ 1216.355429][ T28] process_scheduled_works+0xa60/0x1600 [ 1216.361002][ T28] ? worker_attach_to_pool+0x370/0x370 [ 1216.366645][ T28] ? assign_work+0x3cc/0x5d0 [ 1216.371266][ T28] worker_thread+0xa5e/0xfe0 [ 1216.375985][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1216.380860][ T28] ? __kthread_parkme+0x71/0x1c0 [ 1216.387119][ T28] kthread+0x2fa/0x390 [ 1216.391199][ T28] ? pr_cont_work+0x550/0x550 [ 1216.395963][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1216.400563][ T28] ret_from_fork+0x48/0x80 [ 1216.405218][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1216.410219][ T28] ret_from_fork_asm+0x11/0x20 [ 1216.415102][ T28] [ 1216.418279][ T28] INFO: task kworker/0:5:6806 blocked for more than 143 seconds. [ 1216.427214][ T28] Not tainted syzkaller #0 [ 1216.432157][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1216.440963][ T28] task:kworker/0:5 state:D stack:21616 pid:6806 ppid:2 flags:0x00004000 [ 1216.450339][ T28] Workqueue: events_freezable mmc_rescan [ 1216.456338][ T28] Call Trace: [ 1216.459719][ T28] [ 1216.462672][ T28] __schedule+0x15ae/0x4660 [ 1216.467287][ T28] ? mark_lock+0x94/0x320 [ 1216.471632][ T28] ? asan.module_dtor+0x20/0x20 [ 1216.476548][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 1216.481589][ T28] ? kick_pool+0x106/0x420 [ 1216.486160][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1216.491396][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1216.496691][ T28] schedule+0xbd/0x170 [ 1216.500773][ T28] schedule_timeout+0xc1/0x2d0 [ 1216.505599][ T28] ? console_conditional_schedule+0x40/0x40 [ 1216.512057][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1216.518101][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 1216.523125][ T28] ? lock_chain_count+0x20/0x20 [ 1216.528105][ T28] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1216.533165][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1216.539353][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1216.544663][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1216.549884][ T28] ? wait_for_completion+0x273/0x5a0 [ 1216.555280][ T28] wait_for_completion+0x2c6/0x5a0 [ 1216.560417][ T28] ? io_schedule+0xd0/0xd0 [ 1216.564983][ T28] ? vub300_mmc_request+0xffd/0x1900 [ 1216.570291][ T28] mmc_wait_for_req_done+0x37/0x460 [ 1216.575579][ T28] ? mmc_start_request+0x15d/0x1d0 [ 1216.580713][ T28] ? mmc_wait_for_req+0x1b0/0x230 [ 1216.585822][ T28] mmc_wait_for_cmd+0x178/0x280 [ 1216.590695][ T28] ? mmc_cqe_post_req+0x90/0x90 [ 1216.595611][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1216.601627][ T28] ? trace_raw_output_mmc_request_done+0xcf0/0xcf0 [ 1216.608257][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1216.613499][ T28] sdio_reset+0x212/0x3c0 [ 1216.618003][ T28] ? mmc_io_rw_extended+0x9d0/0x9d0 [ 1216.623235][ T28] ? mmc_set_data_timeout+0x8a0/0x8a0 [ 1216.628696][ T28] ? mmc_power_up+0x5d/0x610 [ 1216.633325][ T28] mmc_rescan+0x69b/0xfb0 [ 1216.637774][ T28] ? process_scheduled_works+0x975/0x1600 [ 1216.643528][ T28] process_scheduled_works+0xa60/0x1600 [ 1216.649416][ T28] ? worker_attach_to_pool+0x370/0x370 [ 1216.654975][ T28] ? assign_work+0x3cc/0x5d0 [ 1216.659580][ T28] worker_thread+0xa5e/0xfe0 [ 1216.664249][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1216.669121][ T28] ? __kthread_parkme+0x71/0x1c0 [ 1216.674190][ T28] kthread+0x2fa/0x390 [ 1216.678273][ T28] ? pr_cont_work+0x550/0x550 [ 1216.682946][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1216.687653][ T28] ret_from_fork+0x48/0x80 [ 1216.692086][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1216.697035][ T28] ret_from_fork_asm+0x11/0x20 [ 1216.702056][ T28] [ 1216.705297][ T28] [ 1216.705297][ T28] Showing all locks held in the system: [ 1216.713056][ T28] 1 lock held by khungtaskd/28: [ 1216.718557][ T28] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1216.728587][ T28] 2 locks held by kworker/u4:7/1100: [ 1216.733950][ T28] #0: ffff888019337538 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1216.745152][ T28] #1: ffffc900048cfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1216.757496][ T28] 2 locks held by getty/5526: [ 1216.762190][ T28] #0: ffff88802e9510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1216.772107][ T28] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 1216.782387][ T28] 5 locks held by kworker/0:3/5832: [ 1216.787717][ T28] #0: ffff88801aeef938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1216.799152][ T28] #1: ffffc900048dfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1216.811175][ T28] #2: ffff888143bcb1d8 (&dev->mutex){....}-{3:3}, at: hub_event+0x188/0x4a80 [ 1216.820489][ T28] #3: ffff88807e9401d8 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xfc/0x8a0 [ 1216.829761][ T28] #4: ffff888032c141a8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 1216.840569][ T28] 2 locks held by kworker/0:5/6806: [ 1216.845900][ T28] #0: ffff888018872138 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1216.857840][ T28] #1: ffffc900039b7d00 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1216.870805][ T28] [ 1216.873154][ T28] ============================================= [ 1216.873154][ T28] [ 1216.887479][ T28] NMI backtrace for cpu 1 [ 1216.891832][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1216.899024][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1216.909078][ T28] Call Trace: [ 1216.912367][ T28] [ 1216.915298][ T28] dump_stack_lvl+0x18c/0x250 [ 1216.919968][ T28] ? __wake_up_klogd+0xd9/0x100 [ 1216.924823][ T28] ? show_regs_print_info+0x20/0x20 [ 1216.930023][ T28] ? load_image+0x420/0x420 [ 1216.934547][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1216.939513][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1216.945667][ T28] ? load_image+0x420/0x420 [ 1216.950163][ T28] ? wq_watchdog_touch+0xef/0x170 [ 1216.955187][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1216.961253][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1216.967244][ T28] watchdog+0xf59/0xfa0 [ 1216.971412][ T28] ? watchdog+0x1e1/0xfa0 [ 1216.975826][ T28] kthread+0x2fa/0x390 [ 1216.979883][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1216.984924][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1216.989503][ T28] ret_from_fork+0x48/0x80 [ 1216.993915][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1216.998505][ T28] ret_from_fork_asm+0x11/0x20 [ 1217.003266][ T28] [ 1217.007166][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1217.012538][ C0] NMI backtrace for cpu 0 [ 1217.012547][ C0] CPU: 0 PID: 1100 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1217.012563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1217.012572][ C0] Workqueue: bat_events batadv_nc_worker [ 1217.012591][ C0] RIP: 0010:kasan_check_range+0x1ba/0x290 [ 1217.012613][ C0] Code: 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 6b 49 ff c3 49 ff cc 75 f2 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 [ 1217.012625][ C0] RSP: 0018:ffffc900048cf790 EFLAGS: 00000056 [ 1217.012637][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8168a8bd [ 1217.012647][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff91ff15e0 [ 1217.012657][ C0] RBP: ffffc900048cfa08 R08: ffffffff91ff15e7 R09: 1ffffffff23fe2bc [ 1217.012668][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2bd R12: 0000000000000001 [ 1217.012678][ C0] R13: ffff8880248a6530 R14: fffffbfff23fe2bd R15: 1ffffffff23fe2bc [ 1217.012690][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1217.012709][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1217.012719][ C0] CR2: 00007ffd74221d70 CR3: 000000000dd32000 CR4: 00000000003506f0 [ 1217.012733][ C0] Call Trace: [ 1217.012738][ C0] [ 1217.012745][ C0] __lock_acquire+0xa4d/0x7eb0 [ 1217.012775][ C0] ? verify_lock_unused+0x140/0x140 [ 1217.012794][ C0] ? verify_lock_unused+0x140/0x140 [ 1217.012812][ C0] ? try_to_wake_up+0x680/0x10e0 [ 1217.012827][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 1217.012845][ C0] lock_acquire+0x19e/0x420 [ 1217.012861][ C0] ? batadv_nc_worker+0xd2/0x600 [ 1217.012877][ C0] ? batadv_nc_worker+0xd2/0x600 [ 1217.012892][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1217.012909][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1217.012926][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 1217.012942][ C0] ? batadv_nc_worker+0xd2/0x600 [ 1217.012956][ C0] batadv_nc_worker+0xef/0x600 [ 1217.012970][ C0] ? batadv_nc_worker+0xd2/0x600 [ 1217.012984][ C0] ? process_scheduled_works+0x975/0x1600 [ 1217.013004][ C0] process_scheduled_works+0xa60/0x1600 [ 1217.013033][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1217.013053][ C0] ? assign_work+0x3cc/0x5d0 [ 1217.013073][ C0] worker_thread+0xa5e/0xfe0 [ 1217.013100][ C0] kthread+0x2fa/0x390 [ 1217.013114][ C0] ? pr_cont_work+0x550/0x550 [ 1217.013131][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1217.013146][ C0] ret_from_fork+0x48/0x80 [ 1217.013163][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1217.013177][ C0] ret_from_fork_asm+0x11/0x20 [ 1217.013201][ C0] [ 1217.013680][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1217.274947][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1217.282136][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1217.292185][ T28] Call Trace: [ 1217.295459][ T28] [ 1217.298382][ T28] dump_stack_lvl+0x18c/0x250 [ 1217.303068][ T28] ? show_regs_print_info+0x20/0x20 [ 1217.308259][ T28] ? load_image+0x420/0x420 [ 1217.312764][ T28] panic+0x2ca/0x720 [ 1217.316680][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1217.321179][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 1217.326718][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 1217.332089][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1217.338247][ T28] watchdog+0xf98/0xfa0 [ 1217.342404][ T28] ? watchdog+0x1e1/0xfa0 [ 1217.346735][ T28] kthread+0x2fa/0x390 [ 1217.350813][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1217.355834][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1217.360416][ T28] ret_from_fork+0x48/0x80 [ 1217.364831][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1217.369417][ T28] ret_from_fork_asm+0x11/0x20 [ 1217.374184][ T28] [ 1217.377334][ T28] Kernel Offset: disabled [ 1217.381651][ T28] Rebooting in 86400 seconds..