last executing test programs: 3m1.207842823s ago: executing program 32 (id=5164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000cc0)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000d80)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000dc0)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000010000000000000000000095"], &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f40)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 2m52.911674276s ago: executing program 3 (id=5230): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='tcp\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='ipv4\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1\n', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='4420\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 2m52.476748926s ago: executing program 3 (id=5233): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m52.098146755s ago: executing program 3 (id=5235): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 2m51.315798664s ago: executing program 3 (id=5238): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='tcp\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='ipv4\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1\n', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='4420\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 2m50.827437316s ago: executing program 3 (id=5241): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2m50.483895604s ago: executing program 3 (id=5243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000500)='j', 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) syz_usb_connect(0x3, 0x24, 0x0, 0x0) shutdown(r0, 0x1) 2m46.642496498s ago: executing program 0 (id=5247): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000300)={{&(0x7f0000886000/0x3000)=nil, 0x3000}, 0x1}) 2m46.453591183s ago: executing program 0 (id=5248): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='tcp\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='ipv4\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1\n', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='4420\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 2m46.067917123s ago: executing program 0 (id=5249): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb31cc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) 2m44.617613178s ago: executing program 0 (id=5250): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='tcp\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='ipv4\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1\n', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='4420\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 2m44.242522387s ago: executing program 0 (id=5251): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2m43.947971694s ago: executing program 0 (id=5252): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) 2m37.121683631s ago: executing program 33 (id=5234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000200)=0x8001, 0x4) bind$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)='2', 0x1}], 0x1}}], 0x1, 0x0) 2m35.003422033s ago: executing program 34 (id=5243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000500)='j', 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) syz_usb_connect(0x3, 0x24, 0x0, 0x0) shutdown(r0, 0x1) 2m28.755596316s ago: executing program 35 (id=5252): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) 2m17.290741086s ago: executing program 4 (id=5285): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, 0x0) 2m17.10832162s ago: executing program 4 (id=5286): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001140)=ANY=[@ANYBLOB="120100003d37d840890457e000000000000109022400030000000009"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000001240)=ANY=[@ANYBLOB="001001000000e9"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001600)={0x44, &(0x7f0000001380)={0x40, 0x10, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m13.922373428s ago: executing program 4 (id=5287): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000300)={{&(0x7f0000886000/0x3000)=nil, 0x3000}, 0x1}) 2m13.700360553s ago: executing program 4 (id=5289): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000040)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x40000, 0x20) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'xfrm0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="38000000131401002abd7000fddbdf010000000073797a320000000007004100727865001400330076657468315f766972745f776966690000b1250325dcc3366b0000000000410873697700000033007665"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102) writev(r5, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0xf000}, {0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = io_uring_setup(0x2005, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000400000000000000000000065000300f0edda49efe051d1d0ffffff2500feff0800000085100000faffffff9500000000001000"], &(0x7f0000000800)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/4095, 0xfff}], 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000001880)={0xaa, 0x1a5}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r7, 0x4b49, &(0x7f00000018c0)={0x2, "ec4427b262a2786e6eefd09d3a31c55c1dbc1e630d8e8c6222e59c46da02e7495083e09414e5bab6655a437a9338581675ae9b2da23a7d6ddc7a7f7c7092da32dc1a63db2d3780196abe7f1bcb7721a56134ab9ee2748b79df3515eda451eb6d98b3b9232c77730e4069f039307816f79558c8764b0e66ba05428df8b5005c67efde89e458f932bd18728e882cc0f3c39ae23cd582fb45a8dbf53266c4cea5c49e20b8b676bdaafc468d5be71787675ba1b7adaa6d49456bc58e2739503ed206be3f5180c72a2ae5883c4230c90d0e61b7215c8befe89a1a12464c962f956b433b026730d844a064f495d645c8f79b264673ea7e8c86e036d1ec6ac7b5eb1f97f2ab191e000e373a7ee9f188104f03fbcfcdb60f5a13c27a0a6d38bfa76f26a1a85914799df738a9062ef9e98da75b07be3f52274eed000d92f9dd08ba446db9b93ebeee4ef09167028a4bbf946ddba57c0b3b6ff166cf06470bb6c5f7d6d43c35dcdd8a1de668ae22e377cef786d09d1a9e3918960c7fb37d1e5414f8079d4b64070923d5d6060aaabb71480281b6666799c459294138ffb120e19cc351184f61aa8eda3814bef96fa5b8d8e5465ed2221ee15ed66b58cc3c2d90c5ed33470372a3b284af9a211db10591b64102bbc0b48122ce1e96e082092bfcc4e832deed08897f3a67d22b52b59b6d2c77e52613388e7328e61715f914990e840c70d587"}) r8 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2002, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000001b40)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000001b80)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_modify_offsets$flags(0x0, 0x0, 0x38, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x42}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345}) 2m12.951906212s ago: executing program 4 (id=5290): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2m12.736919087s ago: executing program 4 (id=5291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f000001fcc0)='select pid=1\nuse_group 0\nnetwork inet stream bind @grp1 --05535\n', 0x40) 2m7.631302491s ago: executing program 6 (id=5268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f00000001c0)=""/128, 0x80}, {0x0}], 0x2) 2m7.423743987s ago: executing program 6 (id=5296): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000040)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x40000, 0x20) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'xfrm0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="38000000131401002abd7000fddbdf010000000073797a320000000007004100727865001400330076657468315f766972745f776966690000b1250325dcc3366b0000000000410873697700000033007665"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102) writev(r5, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0xf000}, {0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = io_uring_setup(0x2005, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000400000000000000000000065000300f0edda49efe051d1d0ffffff2500feff0800000085100000faffffff9500000000001000"], &(0x7f0000000800)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/4095, 0xfff}], 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000001880)={0xaa, 0x1a5}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r7, 0x4b49, &(0x7f00000018c0)={0x2, "ec4427b262a2786e6eefd09d3a31c55c1dbc1e630d8e8c6222e59c46da02e7495083e09414e5bab6655a437a9338581675ae9b2da23a7d6ddc7a7f7c7092da32dc1a63db2d3780196abe7f1bcb7721a56134ab9ee2748b79df3515eda451eb6d98b3b9232c77730e4069f039307816f79558c8764b0e66ba05428df8b5005c67efde89e458f932bd18728e882cc0f3c39ae23cd582fb45a8dbf53266c4cea5c49e20b8b676bdaafc468d5be71787675ba1b7adaa6d49456bc58e2739503ed206be3f5180c72a2ae5883c4230c90d0e61b7215c8befe89a1a12464c962f956b433b026730d844a064f495d645c8f79b264673ea7e8c86e036d1ec6ac7b5eb1f97f2ab191e000e373a7ee9f188104f03fbcfcdb60f5a13c27a0a6d38bfa76f26a1a85914799df738a9062ef9e98da75b07be3f52274eed000d92f9dd08ba446db9b93ebeee4ef09167028a4bbf946ddba57c0b3b6ff166cf06470bb6c5f7d6d43c35dcdd8a1de668ae22e377cef786d09d1a9e3918960c7fb37d1e5414f8079d4b64070923d5d6060aaabb71480281b6666799c459294138ffb120e19cc351184f61aa8eda3814bef96fa5b8d8e5465ed2221ee15ed66b58cc3c2d90c5ed33470372a3b284af9a211db10591b64102bbc0b48122ce1e96e082092bfcc4e832deed08897f3a67d22b52b59b6d2c77e52613388e7328e61715f914990e840c70d587"}) r8 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2002, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000001b40)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000001b80)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_modify_offsets$flags(0x0, 0x0, 0x38, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x42}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345}) 2m6.508528519s ago: executing program 6 (id=5297): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2m6.307536704s ago: executing program 6 (id=5298): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, 0x0, 0x0) mount$9p_unix(&(0x7f0000000400)='./proc/file0\x00', &(0x7f0000000440)='./proc\x00', 0x0, 0x48, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mincore(&(0x7f000052e000/0x1000)=nil, 0x1000, &(0x7f00000005c0)=""/205) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000500)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='vegas', 0x5) sendto$inet6(r4, &(0x7f00000006c0)="a6", 0x1, 0x20000045, &(0x7f0000000700)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 2m5.571437982s ago: executing program 7 (id=5274): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r1, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m5.435486045s ago: executing program 7 (id=5299): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x103) write(r0, &(0x7f0000000040)='9', 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 2m4.889170589s ago: executing program 7 (id=5301): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='tcp\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='ipv4\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1\n', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='4420\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 2m4.385083501s ago: executing program 7 (id=5303): socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000007c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x400000bce) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_oob_ext_data={{0x1}, {0x9, "6cfcc45b0f0eef0d32905407a1853b29", "79f51ac6c546fbf4151d1911d8561885", "984ced351bfbe4b948d40bd3912a8025", "e8d1162df4920a97a3c0223d0a2fbc96"}}}}, 0x47) r1 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000900)=""/102400, 0x19000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='secret\x00', &(0x7f0000000400)='AQB12q/y4+67/90123456789\x1a12345PHK\x15', 0x0) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000500)}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000019980)='/proc/diskstats\x00', 0x0, 0x0) preadv(r3, &(0x7f00000199c0)=[{&(0x7f0000019a00)=""/73, 0x49}], 0x342, 0xfffffffe, 0x80) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000740)={@remote, 0x7a}) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000ffd000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0xc) 2m3.169936531s ago: executing program 7 (id=5305): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2m2.003813929s ago: executing program 7 (id=5307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="13", 0x1}], 0x1}, 0x80) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x47, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f00000003c0)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0x9, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffffb, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffa9, 0x4c}, 0x9c) 1m57.221599626s ago: executing program 36 (id=5291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f000001fcc0)='select pid=1\nuse_group 0\nnetwork inet stream bind @grp1 --05535\n', 0x40) 1m55.872395629s ago: executing program 5 (id=5311): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='tcp\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='ipv4\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1\n', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='4420\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 1m55.612556565s ago: executing program 5 (id=5312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000200), 0x29) 1m55.279958293s ago: executing program 5 (id=5313): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240), 0x86}], 0x2) 1m55.119453288s ago: executing program 5 (id=5314): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000040)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x40000, 0x20) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'xfrm0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="38000000131401002abd7000fddbdf010000000073797a320000000007004100727865001400330076657468315f766972745f776966690000b1250325dcc3366b000000000041087369770000003300766574683000000000000000000000008175fc7b03eddcef66940c8dfd93e59c1707fa76881467a0d94e08"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102) writev(r5, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0xf000}, {0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = io_uring_setup(0x2005, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000400000000000000000000065000300f0edda49efe051d1d0ffffff2500feff0800000085100000faffffff9500000000001000"], &(0x7f0000000800)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/4095, 0xfff}], 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000001880)={0xaa, 0x1a5}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r7, 0x4b49, &(0x7f00000018c0)={0x2, "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"}) r8 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2002, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000001b40)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000001b80)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_modify_offsets$flags(0x0, 0x0, 0x38, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x42}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345}) 1m54.684441848s ago: executing program 5 (id=5315): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 1m54.62477406s ago: executing program 5 (id=5316): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000006c0)={0x8, @meta={0x43425052, 0xb912362, 0xf8f3, 0x7a22, 0x1c86715}}) 1m50.630782797s ago: executing program 37 (id=5298): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, 0x0, 0x0) mount$9p_unix(&(0x7f0000000400)='./proc/file0\x00', &(0x7f0000000440)='./proc\x00', 0x0, 0x48, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mincore(&(0x7f000052e000/0x1000)=nil, 0x1000, &(0x7f00000005c0)=""/205) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000500)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='vegas', 0x5) sendto$inet6(r4, &(0x7f00000006c0)="a6", 0x1, 0x20000045, &(0x7f0000000700)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 1m46.670901844s ago: executing program 38 (id=5307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="13", 0x1}], 0x1}, 0x80) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x47, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f00000003c0)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0x9, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffffb, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffa9, 0x4c}, 0x9c) 1m38.64501134s ago: executing program 39 (id=5316): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000006c0)={0x8, @meta={0x43425052, 0xb912362, 0xf8f3, 0x7a22, 0x1c86715}}) 1m15.540388354s ago: executing program 9 (id=5376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x4, 0x3, 0x6364, 0x5, 0xffffffff, 0xf}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x7, 0x0, 0x2, 0x633, 0x1d7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m14.197598687s ago: executing program 9 (id=5379): mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 1m13.941709834s ago: executing program 9 (id=5382): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000440)=[{0x3f43, 0x11, 0x0, 0x0}], 0x1}) 1m12.425007691s ago: executing program 2 (id=5387): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='tcp\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='ipv4\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1\n', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='4420\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 1m11.315614828s ago: executing program 2 (id=5389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20048880) landlock_restrict_self(0xffffffffffffffff, 0xe) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @local}, {0x306}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc6}}, 'syzkaller0\x00'}) 1m11.267576969s ago: executing program 1 (id=5390): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 1m11.247790299s ago: executing program 8 (id=5391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 1m11.047922084s ago: executing program 1 (id=5392): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x400a8, &(0x7f0000000400)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000440)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00') mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_unix(&(0x7f0000000640)='./file0/file0/file0\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x27801, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2000081, 0x0) 1m10.871956469s ago: executing program 2 (id=5393): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) 1m10.82684907s ago: executing program 9 (id=5394): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0xe, 0x1, 0xb4, 0x8, 0x4000a2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x6, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x3ff, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x3, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000071, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xffffffff, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x80006, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfffb, 0xb, 0x1, 0xf1, 0x7, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x4001, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xfffffffe, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x495, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x3, 0x41, 0x1000, 0xee4b, 0x2000003, 0x0, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x57d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x7fff, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x3, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x6, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x7, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0xfffffffe, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b, 0x8, 0x270, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x7, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m10.82472772s ago: executing program 1 (id=5395): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) readv(r0, &(0x7f0000001240)=[{&(0x7f00000001c0)=""/128, 0x80}], 0x1) 1m10.645402244s ago: executing program 8 (id=5396): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@data_err_ignore}, {@discard}], [{@fsname={'fsname', 0x3d, '/'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'data_err=ignore'}}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@hash}]}, 0x1, 0x512, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x75, 0x0) 1m10.644937664s ago: executing program 2 (id=5397): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='tcp\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='ipv4\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1\n', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='4420\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 1m10.431906429s ago: executing program 1 (id=5398): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000180001060000bf474b6ce5314fb72000fe02000f00000000"], 0x1c}}, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, 0xfffffffffffffffe) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) ioctl$FE_DISEQC_RESET_OVERLOAD(r0, 0x6f3e, 0x0) write(r3, &(0x7f0000000180)='7', 0x1) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe) write(r0, &(0x7f00000001c0)='252:0 ', 0x6) 1m9.56575379s ago: executing program 8 (id=5399): mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(0x0, 0x400, 0x43) mknodat$loop(r0, &(0x7f00000004c0)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000540)='./bus\x00') linkat(r1, &(0x7f0000000580)='./file1\x00', r1, &(0x7f0000000700)='./file0\x00', 0x1000) unlink(&(0x7f0000000740)='./file1\x00') rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file1\x00') unlink(&(0x7f0000000640)='./file1\x00') 1m9.16338938s ago: executing program 2 (id=5400): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 1m9.096125652s ago: executing program 9 (id=5401): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x98) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc41, 0x3) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="f6", 0x1, 0xe32d) fallocate(r1, 0x0, 0x2000, 0x18003) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1m8.967232805s ago: executing program 2 (id=5402): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000440)=[{0x3f43, 0x11, 0x0, 0x0}], 0x1}) 1m8.915614356s ago: executing program 1 (id=5403): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x400a8, &(0x7f0000000400)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000440)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00') mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_unix(&(0x7f0000000640)='./file0/file0/file0\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x27801, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2000081, 0x0) 1m8.871948378s ago: executing program 8 (id=5404): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x210, &(0x7f00000002c0)="$eJzsVT1rFEEYft692ducXhGws/UwaTTZDYi1jen1B3hc1hi88yNzYu4IuNqkURD/RMA/oYWgvYWIYKOFghYRK0VO3pl3NnsfmF05tJkHjvd5n3k/5uNm55q+rSMAvw52O1iEAaGJd0RQAJbIaj/q1n4TOxJ8UtaPRX8q9qNYPRi+fmjp8Hq720239eDPJAIBR8SMk2npwrNHJ8rnT5BXD8YVQpksUhV7jSpPzBIcKv2a3dnp4MdjSjQrRnIx2SK+9JcT+/ekMTV5R743gaLyeY7dQ97NEDNjiCr912cQLmAIkA/9bE4f0yR5+8R2nhlTk/QGxrflSMK3+H+fMhP+FhkSVMhS0JDz0BfvB/hKQIg3B7sdVq/IV4yHN+zPXQmTxc6LQsxJBWQA1TAyRbmOktglACv93q0VPRie2eq1N9PN9EaSrJ1bfXlcrujoHrDVTVfJTMOmB0wUcvA9bRTG+Z/2/nA8Exs6wU1NNHaoWNJ9nJdPFdIaQFDILdSQpT/P+0ei3dE9XMZpLAC4m/FwIhvUAldTuMpLWwehJk7s5hDY5wMBFszA2c7N7sYeCOTS9qHyGvEHhLmTiMON0rXzbvnYE9sSuy523x2dwL1d7k1SpsIX8ZYzoI6dNi+SpZ12v78dM6/nFYyWLGbunxFIV/caumatCCVxzJHSGR4eHh4eHh4e88XvAAAA///KFT0b") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x92012, r0, 0x26000) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xc8c01, 0x0) 1m8.620056414s ago: executing program 1 (id=5405): mkdirat(0xffffffffffffff9c, &(0x7f0000001a40)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000001a80)='./trace\x00', &(0x7f0000001ac0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000001b40)='*:', 0x2) 1m8.258559813s ago: executing program 8 (id=5406): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x200000, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002640)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) write$FUSE_INIT(r0, &(0x7f0000002680)={0x50, 0x0, r1, {0x7, 0x2d, 0x4, 0x10000000, 0x7, 0x5, 0x400, 0xa, 0x0, 0x0, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002700)="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", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0xfffffffe, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000068c0)={0x10, 0xffffffffffffffda, r4}, 0x10) 1m8.248854583s ago: executing program 9 (id=5407): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@data_err_ignore}, {@discard}], [{@fsname={'fsname', 0x3d, '/'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'data_err=ignore'}}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@hash}]}, 0x1, 0x512, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') lseek(r3, 0x75, 0x0) 1m7.775898474s ago: executing program 8 (id=5408): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0xfffffc29, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000004, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80010000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x4, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0xfffffffb, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0x1, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x2, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd8, 0x9, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2cb, &(0x7f0000000880)="$eJzs3U9rI2UYAPBn0mSaUrQ5eBLBOezBi2W7Vw92kQpiT0oO/gFddBeWbRBaCHQVw578BB48+D28eRe8+A0EDx69uUjhlZlMJmmTTW0k26X8fqeH532eed/5k+YQ5u3nrw1ejogHT775PbrdLFr7sR9Ps+hFKyZSLQCAG+FpSvHXSt/v7da61gQArNfM93/nGSWb86m3170sAGCNPvzo4/fvHh4efFAU3YjBd8N+FhEvNeN3H8TDOIr7cTt24mz6W0BK4/jd9w4Pol2UenFrMBr2h/2IwWe/NqV5VP17sRO9xf17xdhM/2jYjrO68OF+uZA7sROvzPVnWcTBnQX90c/jjW59EuX8u7ETv30RX8VRfFn9pjGd/9s8infS939//UlZXPZno2F/s6qbShvP9cYAAAAAAAAAAAAAAAAAAAAAAHCj7RaNXtwalKnx/jv9jbNqfPfceLW/TqsaH/dnEXkVXNgfaJTix8n+OreLokjZuL7Z32erHa+2o31tJw4AAAAAAAAAAAAAAAAAAAAvkJPTx4/uHR3dP14h2JjL1C/5N6/1r3rk/ZnM67GoJprM5pXmio26vFzrxZq9Xz4dNJnyJFZZ/LBTRCxccx105jJb5XouP/I/KaWUZREzQ1vL51oUdP7LXJcE28trygv88w/bbz66l112DbuTG/fT7FAexyenF+5pZMsnPTuXSVd6/PIlNXn9xCxp70w+Tfn2/7mqJ6eP3/pjfKQ6k11yFp1J0Jt+CuJZj0T3Ss/z+v/2AAAAAAAAAAAAAAAAAAAA501f+l0w+GRpa2ttiwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA52z6//+nQcxlLgSj+LNqXlyTUho1mTyOT677HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALj5/g0AAP//VWtpbA==") setns(r3, 0x24020000) umount2(&(0x7f0000000bc0)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) close_range(r0, r0, 0x0) 49.440745542s ago: executing program 40 (id=5405): mkdirat(0xffffffffffffff9c, &(0x7f0000001a40)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000001a80)='./trace\x00', &(0x7f0000001ac0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000001b40)='*:', 0x2) 282.97µs ago: executing program 41 (id=5402): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000440)=[{0x3f43, 0x11, 0x0, 0x0}], 0x1}) 156.1µs ago: executing program 42 (id=5407): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@data_err_ignore}, {@discard}], [{@fsname={'fsname', 0x3d, '/'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'data_err=ignore'}}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@hash}]}, 0x1, 0x512, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') lseek(r3, 0x75, 0x0) 0s ago: executing program 43 (id=5408): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0xfffffc29, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000004, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80010000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x4, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0xfffffffb, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0x1, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x2, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd8, 0x9, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x2cb, &(0x7f0000000880)="$eJzs3U9rI2UYAPBn0mSaUrQ5eBLBOezBi2W7Vw92kQpiT0oO/gFddBeWbRBaCHQVw578BB48+D28eRe8+A0EDx69uUjhlZlMJmmTTW0k26X8fqeH532eed/5k+YQ5u3nrw1ejogHT775PbrdLFr7sR9Ps+hFKyZSLQCAG+FpSvHXSt/v7da61gQArNfM93/nGSWb86m3170sAGCNPvzo4/fvHh4efFAU3YjBd8N+FhEvNeN3H8TDOIr7cTt24mz6W0BK4/jd9w4Pol2UenFrMBr2h/2IwWe/NqV5VP17sRO9xf17xdhM/2jYjrO68OF+uZA7sROvzPVnWcTBnQX90c/jjW59EuX8u7ETv30RX8VRfFn9pjGd/9s8infS939//UlZXPZno2F/s6qbShvP9cYAAAAAAAAAAAAAAAAAAAAAAHCj7RaNXtwalKnx/jv9jbNqfPfceLW/TqsaH/dnEXkVXNgfaJTix8n+OreLokjZuL7Z32erHa+2o31tJw4AAAAAAAAAAAAAAAAAAAAvkJPTx4/uHR3dP14h2JjL1C/5N6/1r3rk/ZnM67GoJprM5pXmio26vFzrxZq9Xz4dNJnyJFZZ/LBTRCxccx105jJb5XouP/I/KaWUZREzQ1vL51oUdP7LXJcE28trygv88w/bbz66l112DbuTG/fT7FAexyenF+5pZMsnPTuXSVd6/PIlNXn9xCxp70w+Tfn2/7mqJ6eP3/pjfKQ6k11yFp1J0Jt+CuJZj0T3Ss/z+v/2AAAAAAAAAAAAAAAAAAAA501f+l0w+GRpa2ttiwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA52z6//+nQcxlLgSj+LNqXlyTUho1mTyOT677HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALj5/g0AAP//VWtpbA==") setns(r3, 0x24020000) umount2(&(0x7f0000000bc0)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) close_range(r0, r0, 0x0) kernel console output (not intermixed with test programs): he newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.574774][T21741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.916826][T21741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.961966][T21741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.002093][T21741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.012299][T21741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.029099][T21741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.040505][T21741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.059282][T21741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.072598][T21741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.099509][T21873] syz_tun: entered allmulticast mode [ 1525.122065][T21741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.148042][T21741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.183317][T21741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.212029][T21741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.258691][T21878] netlink: 'syz.0.4981': attribute type 1 has an invalid length. [ 1525.268469][T21878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4981'. [ 1525.291229][T21878] netlink: 'syz.0.4981': attribute type 1 has an invalid length. [ 1525.311225][T21877] loop1: detected capacity change from 0 to 2048 [ 1525.440944][T21877] loop1: p1 < > p3 p4 [ 1525.440944][T21877] p4: [ 1525.456476][ T8355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.470325][T21877] loop1: p3 start 458752 is beyond EOD, truncated [ 1525.479286][ T8355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.493512][T21877] loop1: p4 size 722688 extends beyond EOD, truncated [ 1525.638287][T20885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.674884][T20885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.704283][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4983'. [ 1525.745793][T21888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4983'. [ 1526.263532][T21893] zram: Cannot change disksize for initialized device [ 1526.655988][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4985'. [ 1526.746339][T21907] fuse: Unknown parameter 'fd0x0000000000000003' [ 1526.784700][T21910] ip_tables: iptables: counters copy to user failed while replacing table [ 1526.821343][T21911] syzkaller0: entered promiscuous mode [ 1526.828225][T21911] syzkaller0: entered allmulticast mode [ 1526.845691][T21911] tipc: Started in network mode [ 1526.851993][T21911] tipc: Node identity 565c27ccda83, cluster identity 4711 [ 1526.865287][T21911] tipc: Enabled bearer , priority 0 [ 1526.881104][T21910] syz_tun: entered allmulticast mode [ 1526.940428][T21911] tipc: Resetting bearer [ 1526.967926][T21909] tipc: Resetting bearer [ 1527.010546][T21909] tipc: Disabling bearer [ 1527.210599][T21918] loop2: detected capacity change from 0 to 128 [ 1527.361899][T21918] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1527.387392][T21918] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1527.593441][T21925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 1528.303120][T21741] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1528.378942][T21934] zram: Cannot change disksize for initialized device [ 1529.418342][T21939] loop1: detected capacity change from 0 to 256 [ 1529.483915][T21941] ip_tables: iptables: counters copy to user failed while replacing table [ 1530.095453][T21955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5004'. [ 1531.399582][T21964] loop0: detected capacity change from 0 to 128 [ 1531.439003][T21964] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1531.537205][T21964] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1531.674300][T20543] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1531.901901][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5009'. [ 1532.006930][T21978] ip_tables: iptables: counters copy to user failed while replacing table [ 1535.673773][T21986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5014'. [ 1536.044140][T22006] ip_tables: iptables: counters copy to user failed while replacing table [ 1536.229954][T22009] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1536.264098][T22009] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1536.285681][T22009] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1536.319047][T22009] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1536.666006][T22013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5019'. [ 1538.003322][T17810] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1538.214145][T17810] usb 3-1: Using ep0 maxpacket: 32 [ 1538.231888][T17810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.267973][T17810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1538.299542][T17810] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1538.324447][T17810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.362321][T17810] usb 3-1: config 0 descriptor?? [ 1538.833335][T17810] ft260 0003:0403:6030.0046: unknown main item tag 0x0 [ 1538.851865][T17810] ft260 0003:0403:6030.0046: unknown main item tag 0x0 [ 1539.020523][T17810] ft260 0003:0403:6030.0046: chip code: 0000 0000 [ 1539.222342][T17810] ft260 0003:0403:6030.0046: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1539.426155][T17810] ft260 0003:0403:6030.0046: failed to retrieve status: -32, no wakeup [ 1539.751013][T22027] ft260 0003:0403:6030.0046: ft260_i2c_read: failed with -38 [ 1539.774804][T22037] ip_tables: iptables: counters copy to user failed while replacing table [ 1539.793772][T17810] usb 3-1: USB disconnect, device number 102 [ 1539.977080][T22039] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1539.995423][T22039] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1540.009348][T22039] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1540.021857][T22039] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1540.170736][T22041] loop0: detected capacity change from 0 to 2048 [ 1540.182072][T22041] EXT4-fs: Ignoring removed bh option [ 1540.210780][T22041] ext4: Unknown parameter 'noacl' [ 1540.781161][T22045] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1540.915317][T22045] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1541.442999][T22050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5033'. [ 1541.922437][T17764] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 1542.953595][ T5863] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1544.000219][T17764] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 1544.143458][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 1544.246582][ T5863] usb 3-1: config 0 has no interfaces? [ 1544.334011][ T5863] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 1544.415837][ T5863] usb 3-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 1544.491921][ T5863] usb 3-1: Product: syz [ 1544.527355][ T5863] usb 3-1: Manufacturer: syz [ 1544.539672][ T5863] usb 3-1: SerialNumber: syz [ 1544.562697][ T5863] usb 3-1: config 0 descriptor?? [ 1544.649294][T22070] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1544.665776][T22070] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1544.711263][T22070] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1544.742479][T22070] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1544.802288][ T5863] usb 3-1: USB disconnect, device number 103 [ 1545.238020][T22077] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1545.249840][T22077] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1545.495180][T22083] loop3: detected capacity change from 0 to 8 [ 1545.887103][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5045'. [ 1546.126002][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.137692][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.640285][T22098] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1548.655088][T22098] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1548.671510][T22098] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1548.694075][T22098] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1549.040879][T22104] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1549.089049][T22104] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1549.593402][ T5863] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1549.793755][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 1549.801395][ T5863] usb 3-1: config 0 has no interfaces? [ 1549.818849][ T5863] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 1549.845599][ T5863] usb 3-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 1549.869405][ T5863] usb 3-1: Product: syz [ 1549.879986][ T5863] usb 3-1: Manufacturer: syz [ 1549.886215][ T5863] usb 3-1: SerialNumber: syz [ 1549.900821][ T5863] usb 3-1: config 0 descriptor?? [ 1550.152628][ T5863] usb 3-1: USB disconnect, device number 104 [ 1550.831774][T22123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5055'. [ 1552.121480][T22137] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1552.182034][T22137] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1553.103539][T20842] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1553.293588][T20842] usb 1-1: Using ep0 maxpacket: 32 [ 1553.308090][T20842] usb 1-1: config 0 has no interfaces? [ 1553.328809][T20842] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 1553.353238][T20842] usb 1-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 1553.385760][T20842] usb 1-1: Product: syz [ 1553.389977][T20842] usb 1-1: Manufacturer: syz [ 1553.426658][T20842] usb 1-1: SerialNumber: syz [ 1553.452577][T20842] usb 1-1: config 0 descriptor?? [ 1553.702838][T20842] usb 1-1: USB disconnect, device number 75 [ 1554.683355][T20842] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1554.853384][T20842] usb 1-1: device descriptor read/64, error -71 [ 1555.149978][T20842] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1555.153905][T22162] syzkaller0: entered promiscuous mode [ 1555.165026][T22162] syzkaller0: entered allmulticast mode [ 1555.193464][T22162] tipc: Started in network mode [ 1555.213552][T22162] tipc: Node identity 1a96c7045be7, cluster identity 4711 [ 1555.222357][T22162] tipc: Enabled bearer , priority 0 [ 1555.279476][T22162] tipc: Resetting bearer [ 1555.310257][T22161] tipc: Resetting bearer [ 1555.323760][T20842] usb 1-1: device descriptor read/64, error -71 [ 1555.440768][T22161] tipc: Disabling bearer [ 1555.458789][T20842] usb usb1-port1: attempt power cycle [ 1555.803461][T22170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5069'. [ 1555.873597][T20842] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1555.894578][T17810] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1555.924176][T20842] usb 1-1: device descriptor read/8, error -71 [ 1556.089427][T17810] usb 2-1: Using ep0 maxpacket: 32 [ 1556.109901][T17810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.121139][T17810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.137528][T17810] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1556.150189][T17810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.204518][T22174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5072'. [ 1556.214718][T20842] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1556.240136][T17810] usb 2-1: config 0 descriptor?? [ 1556.304761][T20842] usb 1-1: device descriptor read/8, error -71 [ 1556.484556][T20842] usb usb1-port1: unable to enumerate USB device [ 1556.787437][T17810] ft260 0003:0403:6030.0047: unknown main item tag 0x0 [ 1556.810500][T17810] ft260 0003:0403:6030.0047: unknown main item tag 0x0 [ 1556.922491][T22178] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1556.951103][T22176] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1556.970855][T17810] ft260 0003:0403:6030.0047: chip code: 0000 0000 [ 1557.405211][T22183] capability: warning: `syz.3.5074' uses 32-bit capabilities (legacy support in use) [ 1557.710946][T17810] ft260 0003:0403:6030.0047: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1558.010941][T17810] ft260 0003:0403:6030.0047: failed to retrieve status: -32, no wakeup [ 1558.186312][T20842] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1558.237264][ T6007] usb 2-1: reset high-speed USB device number 97 using dummy_hcd [ 1558.393299][T20842] usb 3-1: Using ep0 maxpacket: 32 [ 1558.442080][T20842] usb 3-1: config 0 has no interfaces? [ 1558.463306][T20842] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 1558.746061][T20842] usb 3-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 1559.749670][ T5863] usb 2-1: USB disconnect, device number 97 [ 1559.759879][T20842] usb 3-1: Product: syz [ 1559.768917][T20842] usb 3-1: Manufacturer: syz [ 1559.775600][T20842] usb 3-1: SerialNumber: syz [ 1559.783053][T20842] usb 3-1: config 0 descriptor?? [ 1560.024435][ T5863] usb 3-1: USB disconnect, device number 105 [ 1560.704334][T22209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5081'. [ 1560.727946][T22210] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1560.746177][T22210] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1560.759708][T22210] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1560.778146][T22210] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1561.263399][ T5863] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1561.585100][ T5863] usb 4-1: device descriptor read/64, error -71 [ 1562.174702][T22225] sctp: [Deprecated]: syz.0.5086 (pid 22225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1562.174702][T22225] Use struct sctp_sack_info instead [ 1562.389569][ T5863] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1562.547210][T22227] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 1562.565572][ T5863] usb 4-1: device descriptor read/64, error -71 [ 1562.572370][T22227] syzkaller0: entered promiscuous mode [ 1562.583678][T22227] syzkaller0: entered allmulticast mode [ 1562.703595][ T5863] usb usb4-port1: attempt power cycle [ 1563.071741][T22235] loop1: detected capacity change from 0 to 512 [ 1563.115383][T22235] EXT4-fs: Ignoring removed bh option [ 1563.153372][ T5863] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1563.186435][T22235] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1563.224110][ T5863] usb 4-1: device descriptor read/8, error -71 [ 1563.230715][T22239] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1563.238355][T22239] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1563.264869][T22239] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1563.276476][T22239] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1563.287841][T22235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1563.344741][T22235] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1563.696571][ T5863] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1563.734097][ T5863] usb 4-1: device descriptor read/8, error -71 [ 1563.853595][ T5863] usb usb4-port1: unable to enumerate USB device [ 1563.905076][T20912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.123538][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5095'. [ 1564.145057][T22252] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5094'. [ 1564.164592][T22252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1564.172630][T22252] IPv6: NLM_F_CREATE should be set when creating new route [ 1564.479650][T22256] syzkaller0: entered promiscuous mode [ 1564.485325][T22256] syzkaller0: entered allmulticast mode [ 1564.498236][T22256] tipc: Enabled bearer , priority 0 [ 1564.521195][T22256] tipc: Resetting bearer [ 1564.551447][T22255] tipc: Resetting bearer [ 1564.605107][T22255] tipc: Disabling bearer [ 1565.120456][T22271] ip_tables: iptables: counters copy to user failed while replacing table [ 1565.261406][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1565.294853][T20842] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1565.463341][T20842] usb 3-1: device descriptor read/64, error -71 [ 1565.908033][T20842] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1566.716414][T20842] usb 3-1: device descriptor read/64, error -71 [ 1566.844614][T20842] usb usb3-port1: attempt power cycle [ 1567.264295][T22299] loop1: detected capacity change from 0 to 512 [ 1567.283296][T20842] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1567.307324][T22303] sctp: [Deprecated]: syz.0.5113 (pid 22303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1567.307324][T22303] Use struct sctp_sack_info instead [ 1567.346283][T22299] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1567.363929][T20842] usb 3-1: device descriptor read/8, error -71 [ 1567.474372][T22299] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.5114: invalid indirect mapped block 4294967295 (level 0) [ 1567.496693][T22299] EXT4-fs (loop1): Remounting filesystem read-only [ 1567.508989][T22299] EXT4-fs (loop1): 1 orphan inode deleted [ 1567.516986][T22299] EXT4-fs (loop1): 1 truncate cleaned up [ 1567.538785][T22299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1567.673641][T20842] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1567.714119][T20842] usb 3-1: device descriptor read/8, error -71 [ 1567.795365][T20912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.853601][T20842] usb usb3-port1: unable to enumerate USB device [ 1568.326228][T22302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5115'. [ 1570.448937][T22346] sctp: [Deprecated]: syz.0.5127 (pid 22346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1570.448937][T22346] Use struct sctp_sack_info instead [ 1570.453282][T20842] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1570.954012][T20842] usb 4-1: device descriptor read/64, error -71 [ 1571.270638][T20842] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1571.453471][T20842] usb 4-1: device descriptor read/64, error -71 [ 1571.595428][T20842] usb usb4-port1: attempt power cycle [ 1572.063349][T20842] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1572.586012][T20842] usb 4-1: device descriptor read/8, error -71 [ 1572.902721][T22360] ceph: No mds server is up or the cluster is laggy [ 1573.497903][T20842] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1573.786814][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 1575.535443][T20842] usb 4-1: device descriptor read/8, error -71 [ 1575.663971][T20842] usb usb4-port1: unable to enumerate USB device [ 1575.945094][T22377] ip_tables: iptables: counters copy to user failed while replacing table [ 1578.943349][T19025] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1579.113585][T19025] usb 2-1: device descriptor read/64, error -71 [ 1579.474608][T19025] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1580.232192][T22411] ceph: No mds server is up or the cluster is laggy [ 1580.429195][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 1580.573510][T19025] usb 2-1: device descriptor read/64, error -71 [ 1581.039917][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 1581.092609][T19025] usb usb2-port1: attempt power cycle [ 1581.794359][T22416] ip_tables: iptables: counters copy to user failed while replacing table [ 1585.233291][ T788] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1585.396699][ T788] usb 3-1: device descriptor read/64, error -71 [ 1585.698876][ T788] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1586.293302][ T788] usb 3-1: device descriptor read/64, error -71 [ 1587.782122][ T788] usb usb3-port1: attempt power cycle [ 1587.827599][T22463] ceph: No mds server is up or the cluster is laggy [ 1588.124032][T22474] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1588.148598][T22474] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1588.179399][T22474] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1588.392881][T22474] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1590.673443][T18549] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1590.875325][T18549] usb 3-1: no configurations [ 1590.880342][T18549] usb 3-1: can't read configurations, error -22 [ 1591.034828][T18549] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1591.477632][T18549] usb 3-1: no configurations [ 1591.537367][T22503] ceph: No mds server is up or the cluster is laggy [ 1591.669199][T18549] usb 3-1: can't read configurations, error -22 [ 1592.034441][T18549] usb usb3-port1: attempt power cycle [ 1592.653415][T18549] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1592.780659][T22512] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1593.161632][T18549] usb 3-1: no configurations [ 1593.393798][T18549] usb 3-1: can't read configurations, error -22 [ 1593.704204][T22512] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1593.734602][T22512] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1594.027934][T22523] loop2: detected capacity change from 0 to 512 [ 1594.039995][T22523] EXT4-fs: Ignoring removed bh option [ 1594.081238][T22523] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1594.162018][T22523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.175826][T22523] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1594.242468][T21741] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.526932][T22537] ip_tables: iptables: counters copy to user failed while replacing table [ 1595.242659][T22546] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1595.306351][T22546] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1595.368340][T22546] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1595.458409][T22548] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1595.838053][T17764] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 1596.742998][T22565] ip_tables: iptables: counters copy to user failed while replacing table [ 1598.883132][T18549] libceph: connect (1)[c::]:6789 error -101 [ 1599.451342][T18549] libceph: mon0 (1)[c::]:6789 connect error [ 1600.170277][T22579] ceph: No mds server is up or the cluster is laggy [ 1600.484214][T18549] libceph: connect (1)[c::]:6789 error -101 [ 1600.491489][T18549] libceph: mon0 (1)[c::]:6789 connect error [ 1601.672025][T22594] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1601.692207][T22598] ieee802154 phy0 wpan0: encryption failed: -22 [ 1601.724610][T22594] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1601.745966][T22594] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1601.798524][T22594] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1602.449593][T22606] ip_tables: iptables: counters copy to user failed while replacing table [ 1606.286714][T22628] loop0: detected capacity change from 0 to 128 [ 1606.440896][T22628] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1606.520094][T22628] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1606.560422][T22632] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1606.575096][T22634] ip_tables: iptables: counters copy to user failed while replacing table [ 1606.605925][T22632] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1606.672069][T22632] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1606.734077][T22632] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1606.780220][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1606.792150][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1606.813091][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1606.840583][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1606.855788][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1606.863420][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1606.902070][T22640] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1606.912045][T22640] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1606.922111][T22640] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1606.932107][T22640] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1607.025288][T20912] syz_tun (unregistering): left allmulticast mode [ 1607.066764][T22642] loop2: detected capacity change from 0 to 512 [ 1607.089751][T22642] EXT4-fs: Ignoring removed mblk_io_submit option [ 1607.186450][T22642] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.5213: corrupted in-inode xattr: e_value size too large [ 1607.256352][T22642] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.5213: couldn't read orphan inode 15 (err -117) [ 1607.277627][T22642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1607.332885][T15873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.392023][T22636] rxe_eth0 speed is unknown, defaulting to 1000 [ 1607.566879][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.575663][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.692913][T20543] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1608.065464][T21741] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1608.175402][T22656] ip_tables: iptables: counters copy to user failed while replacing table [ 1608.208989][T15873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.303634][ T788] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1608.419630][T15873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.474155][T22661] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1608.484541][T22661] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1608.503332][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 1608.516405][ T788] usb 4-1: config 0 has no interfaces? [ 1608.526107][ T788] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 1608.544873][T22662] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1608.560038][ T788] usb 4-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 1608.576217][T22661] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1608.590627][ T788] usb 4-1: Product: syz [ 1608.599420][ T788] usb 4-1: Manufacturer: syz [ 1608.606767][T22664] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1608.618112][ T788] usb 4-1: SerialNumber: syz [ 1608.628959][T15873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.630371][ T788] usb 4-1: config 0 descriptor?? [ 1608.647256][T22664] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1608.657481][T22664] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1608.694538][T22664] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1608.968840][ T5787] Bluetooth: hci3: command tx timeout [ 1609.506572][ T5763] usb 4-1: USB disconnect, device number 95 [ 1609.831335][T22674] loop0: detected capacity change from 0 to 128 [ 1609.859463][T15873] tipc: Left network mode [ 1609.877988][T22674] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1609.897492][T22674] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1610.240735][T22636] chnl_net:caif_netlink_parms(): no params data found [ 1611.161364][ T5787] Bluetooth: hci3: command tx timeout [ 1611.188074][T22691] ip_tables: iptables: counters copy to user failed while replacing table [ 1611.507912][T20543] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1611.697730][T22702] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1611.746857][T22702] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1611.783829][T22702] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1611.805150][T22636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.812321][T22636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.830841][T22702] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1611.857294][T22636] bridge_slave_0: entered allmulticast mode [ 1611.866755][T22636] bridge_slave_0: entered promiscuous mode [ 1612.003460][T22636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.010642][T22636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.042906][T22709] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1612.054146][T22636] bridge_slave_1: entered allmulticast mode [ 1612.061586][T22636] bridge_slave_1: entered promiscuous mode [ 1612.090944][T22709] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1612.139790][T22709] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1612.157074][T22709] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1612.222139][T22636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.291740][T22636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.526396][T22636] team0: Port device team_slave_0 added [ 1612.577973][T22719] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5233'. [ 1612.598776][T22636] team0: Port device team_slave_1 added [ 1612.732674][T22722] loop3: detected capacity change from 0 to 128 [ 1612.780300][T22722] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1612.796091][T22722] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1612.827210][T22636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1612.847373][T22636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1612.880365][T22636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1612.966647][T22636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1613.004425][T22725] ip_tables: iptables: counters copy to user failed while replacing table [ 1613.013484][T22636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1613.115659][T22636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1613.213546][ T5787] Bluetooth: hci3: command tx timeout [ 1613.375219][T15873] hsr_slave_0: left promiscuous mode [ 1613.396099][T15873] hsr_slave_1: left promiscuous mode [ 1613.428099][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1613.448436][T15873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1613.489548][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1613.519841][T15873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1613.540988][T15873] bridge_slave_1: left allmulticast mode [ 1613.559621][T15873] bridge_slave_1: left promiscuous mode [ 1613.567012][T21226] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1613.576649][T15873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.597949][T15873] bridge_slave_0: left allmulticast mode [ 1613.623894][T15873] bridge_slave_0: left promiscuous mode [ 1613.630921][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.763359][T22740] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1613.795037][T22740] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1613.806458][T15873] veth1_macvtap: left promiscuous mode [ 1613.827221][T22740] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1613.833619][T15873] veth0_macvtap: left promiscuous mode [ 1613.854010][T15873] veth1_vlan: left promiscuous mode [ 1613.860517][T15873] veth0_vlan: left promiscuous mode [ 1613.861176][T22740] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1613.985426][T22743] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1614.035327][T22743] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1614.080827][T22743] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1614.112294][T22743] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1615.295052][ T5787] Bluetooth: hci3: command tx timeout [ 1616.598583][T15873] team0 (unregistering): Port device team_slave_1 removed [ 1616.665693][T15873] team0 (unregistering): Port device team_slave_0 removed [ 1616.736169][T15873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1616.804699][T15873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.384891][T15873] bond0 (unregistering): Released all slaves [ 1617.469627][T22761] loop0: detected capacity change from 0 to 128 [ 1617.535086][T22761] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1617.549702][T22761] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1617.795716][T22636] hsr_slave_0: entered promiscuous mode [ 1617.800265][T20543] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1617.837999][T22636] hsr_slave_1: entered promiscuous mode [ 1617.999384][T22766] ip_tables: iptables: counters copy to user failed while replacing table [ 1618.591398][T22636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1618.642972][T22636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1618.690003][T22636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1618.981492][T22636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1619.206283][T22636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1619.252462][T22636] 8021q: adding VLAN 0 to HW filter on device team0 [ 1619.282352][T15873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.289575][T15873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1619.342116][T15873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.349328][T15873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1619.797172][T22636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1620.322184][T22803] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1620.350306][T22803] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1620.378902][T22803] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1620.418716][T22803] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1620.460371][T22636] veth0_vlan: entered promiscuous mode [ 1620.501359][T22636] veth1_vlan: entered promiscuous mode [ 1620.577543][T22636] veth0_macvtap: entered promiscuous mode [ 1620.609258][T22636] veth1_macvtap: entered promiscuous mode [ 1620.662031][T22636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1620.676542][T22636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.695182][T22636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1620.718306][T22636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.740298][T22636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1620.771545][T22636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.798151][T22636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1620.832543][T22636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.850026][T22636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.862945][T22636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.885153][T22636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.898727][T22636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1620.911737][T22636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.929197][T22636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1620.954238][T22636] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.962998][T22636] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.982185][T22636] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.002983][T22636] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.139504][T15880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1621.160442][T15880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1621.196564][T15873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1621.210744][T15873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.067196][T22821] ceph: No mds server is up or the cluster is laggy [ 1622.673424][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 1623.019597][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 1623.528215][T22830] loop4: detected capacity change from 0 to 128 [ 1623.599948][T22830] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1623.612530][T22830] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1624.255669][T22636] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1624.396393][T22853] ip_tables: iptables: counters copy to user failed while replacing table [ 1624.425511][T22853] syz_tun: entered allmulticast mode [ 1624.662885][T22862] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5256'. [ 1624.849346][T22868] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1624.864951][T22868] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1624.882362][T22868] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1624.899357][T22868] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1626.331278][T22893] loop4: detected capacity change from 0 to 128 [ 1626.393709][T22893] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1626.432488][T22893] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1626.916151][T22636] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1627.107442][T22910] ip_tables: iptables: counters copy to user failed while replacing table [ 1627.331977][T22916] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5265'. [ 1630.365620][T21741] syz_tun (unregistering): left allmulticast mode [ 1630.468138][T17764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1630.484259][T17764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1630.493611][T17764] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1630.517816][T17764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1630.533321][T17764] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1630.540870][T17764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1630.783815][T17764] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1630.798013][T17764] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1630.807013][T17764] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1630.842059][T17764] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1630.869674][T17764] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1630.877234][T17764] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1630.935334][T15873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.969320][T22935] rxe_eth0 speed is unknown, defaulting to 1000 [ 1631.057031][T22944] loop4: detected capacity change from 0 to 128 [ 1631.066093][T21226] syz_tun (unregistering): left allmulticast mode [ 1631.134346][T22944] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1631.160553][T22944] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1631.256408][T15873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.435570][T15873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.538408][T22940] rxe_eth0 speed is unknown, defaulting to 1000 [ 1631.656519][T15873] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.863087][T22636] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1632.187379][T22935] chnl_net:caif_netlink_parms(): no params data found [ 1632.243631][T15873] tipc: Left network mode [ 1632.373504][ T5863] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1632.490265][T22935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.500413][T22935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.508356][T22935] bridge_slave_0: entered allmulticast mode [ 1632.524338][T22935] bridge_slave_0: entered promiscuous mode [ 1632.572635][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.583282][T17764] Bluetooth: hci0: command tx timeout [ 1632.583557][T22935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.604228][ T5863] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1632.619512][T22935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.628635][ T5863] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1632.641721][T22935] bridge_slave_1: entered allmulticast mode [ 1632.652332][T22935] bridge_slave_1: entered promiscuous mode [ 1632.656633][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.678691][ T5863] usb 5-1: config 0 descriptor?? [ 1632.786668][T22940] chnl_net:caif_netlink_parms(): no params data found [ 1632.872601][T22935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1632.898364][T22935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.973915][T17764] Bluetooth: hci4: command tx timeout [ 1633.159224][T22935] team0: Port device team_slave_0 added [ 1633.189393][T22935] team0: Port device team_slave_1 added [ 1633.389945][T22935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1633.397401][T22935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.448290][T22935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1633.512421][T22935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.521065][T22935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.559867][T22935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1633.586170][T22940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.599478][T22940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.609774][T22940] bridge_slave_0: entered allmulticast mode [ 1633.625583][T22940] bridge_slave_0: entered promiscuous mode [ 1633.702676][T22940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.711300][T22940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.722965][T22940] bridge_slave_1: entered allmulticast mode [ 1633.732538][T22940] bridge_slave_1: entered promiscuous mode [ 1633.932548][T22940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.957837][T22935] hsr_slave_0: entered promiscuous mode [ 1633.972114][T22935] hsr_slave_1: entered promiscuous mode [ 1633.982206][T22935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1633.991610][T22935] Cannot create hsr debugfs directory [ 1634.002835][T22940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.305103][T22940] team0: Port device team_slave_0 added [ 1634.320027][T22940] team0: Port device team_slave_1 added [ 1634.336207][T15873] hsr_slave_0: left promiscuous mode [ 1634.342366][T15873] hsr_slave_1: left promiscuous mode [ 1634.349216][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.358765][T15873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.367490][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.375301][T15873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.385139][T15873] bridge_slave_1: left allmulticast mode [ 1634.390931][T15873] bridge_slave_1: left promiscuous mode [ 1634.399291][T15873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.409244][T15873] bridge_slave_0: left allmulticast mode [ 1634.417929][T15873] bridge_slave_0: left promiscuous mode [ 1634.424066][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.481402][T15873] veth1_macvtap: left promiscuous mode [ 1634.488540][T15873] veth0_macvtap: left promiscuous mode [ 1634.496141][T15873] veth1_vlan: left promiscuous mode [ 1634.502638][T15873] veth0_vlan: left promiscuous mode [ 1634.654767][T17764] Bluetooth: hci0: command tx timeout [ 1635.055668][T17764] Bluetooth: hci4: command tx timeout [ 1635.162647][T20842] usb 5-1: USB disconnect, device number 2 [ 1635.362540][T22998] ip_tables: iptables: counters copy to user failed while replacing table [ 1635.854808][T15873] team0 (unregistering): Port device team_slave_1 removed [ 1635.917715][T15873] team0 (unregistering): Port device team_slave_0 removed [ 1635.993690][T15873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.214684][T15873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.733431][T17764] Bluetooth: hci0: command tx timeout [ 1636.896937][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1636.921635][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1636.955104][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1636.970437][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1636.978811][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1636.988183][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1637.135605][ T5787] Bluetooth: hci4: command tx timeout [ 1637.204016][T15873] bond0 (unregistering): Released all slaves [ 1637.466422][T20543] syz_tun (unregistering): left allmulticast mode [ 1637.565587][T22940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.574008][T22940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1637.604875][T22940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1638.520314][T22940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.552778][T22940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1638.641791][T22940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.791282][T23004] rxe_eth0 speed is unknown, defaulting to 1000 [ 1638.833589][ T5787] Bluetooth: hci0: command tx timeout [ 1639.065030][ T5787] Bluetooth: hci1: command tx timeout [ 1639.157204][T22940] hsr_slave_0: entered promiscuous mode [ 1639.199471][T22940] hsr_slave_1: entered promiscuous mode [ 1639.213458][ T5787] Bluetooth: hci4: command tx timeout [ 1639.253400][T22940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1639.283523][T22940] Cannot create hsr debugfs directory [ 1639.633862][T22935] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1639.672701][T22935] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1639.765500][T22935] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1639.800981][T22935] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1640.202982][T15873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.402350][T15873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.688374][T15873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.885715][T15873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.125951][T22935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.139231][ T5787] Bluetooth: hci1: command tx timeout [ 1641.245103][T22935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1641.259735][T22940] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1641.306957][T22940] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1641.422672][T22940] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1641.462520][T22940] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1641.502385][T22550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.509621][T22550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.545361][T22550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.552574][T22550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.610333][T23004] chnl_net:caif_netlink_parms(): no params data found [ 1643.215193][ T5787] Bluetooth: hci1: command tx timeout [ 1644.145565][T22935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1644.407774][T15873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.699669][T15873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.727191][T23004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.740089][T23004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.773344][T23004] bridge_slave_0: entered allmulticast mode [ 1644.781387][T23004] bridge_slave_0: entered promiscuous mode [ 1644.790677][T23004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.802601][T23004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.810911][T23004] bridge_slave_1: entered allmulticast mode [ 1644.819426][T23004] bridge_slave_1: entered promiscuous mode [ 1644.925606][T15873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.059690][T23074] loop4: detected capacity change from 0 to 512 [ 1645.082473][T23004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1645.227062][T15873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.293733][ T5787] Bluetooth: hci1: command tx timeout [ 1645.331479][T23004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.466379][T23004] team0: Port device team_slave_0 added [ 1645.557204][T23004] team0: Port device team_slave_1 added [ 1645.601697][T23083] ip_tables: iptables: counters copy to user failed while replacing table [ 1645.693037][T23004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.714134][T23004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.751563][T23004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.818923][T23004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.849083][T23004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.885306][T23004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.942198][T22935] veth0_vlan: entered promiscuous mode [ 1645.979941][T23089] loop4: detected capacity change from 0 to 1024 [ 1646.007625][T23089] EXT4-fs: Ignoring removed orlov option [ 1646.032493][T22940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.126097][T23089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1646.159917][T23004] hsr_slave_0: entered promiscuous mode [ 1646.170433][T23004] hsr_slave_1: entered promiscuous mode [ 1646.200133][T23004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1646.207966][T23004] Cannot create hsr debugfs directory [ 1646.225331][T22940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.233549][T15873] tipc: Left network mode [ 1646.292450][T22935] veth1_vlan: entered promiscuous mode [ 1646.318841][T15875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.326066][T15875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.595392][T22636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1646.731298][T23099] loop4: detected capacity change from 0 to 512 [ 1646.739547][T23099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1646.767188][T23099] EXT4-fs (loop4): 1 truncate cleaned up [ 1646.775096][T23099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1646.779105][T15875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.796768][T15875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.903988][T23104] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.5282: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1646.958400][T23104] EXT4-fs (loop4): Remounting filesystem read-only [ 1647.122128][T22636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1647.341726][T22935] veth0_macvtap: entered promiscuous mode [ 1647.426779][T22935] veth1_macvtap: entered promiscuous mode [ 1647.963995][T22935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.003314][ T788] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1648.013515][T22935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.043242][T22935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.083391][T22935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.100642][T22935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.121926][T22935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.135948][T22935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.226589][ T788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.243724][ T788] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1648.266327][ T788] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1648.275811][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.298824][T22935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.314738][T22935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.324162][ T788] usb 5-1: config 0 descriptor?? [ 1648.344025][T22935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.356489][T22935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.368401][T22935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.380964][T22935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.399503][T22935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1648.508139][T22935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.533433][T22935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.544076][T22935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.554721][T22935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.997849][T22940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.256444][T23004] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1649.367603][T23004] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1649.392624][T23004] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1649.446744][T23004] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1649.593284][T15875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.602565][T15875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.929406][T20629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.974324][T20629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.180002][T23004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.300976][T23004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.349123][T15877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.356353][T15877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.493115][T15877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.500354][T15877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1650.507508][T23162] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1650.553056][T23162] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1650.594245][T23162] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1650.638927][T23162] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1650.729212][T22940] veth0_vlan: entered promiscuous mode [ 1650.832118][T22940] veth1_vlan: entered promiscuous mode [ 1650.850876][T20842] usb 5-1: USB disconnect, device number 3 [ 1650.933505][T15873] hsr_slave_0: left promiscuous mode [ 1650.955107][T15873] hsr_slave_1: left promiscuous mode [ 1650.961589][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1650.982434][T15873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1651.007637][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.038149][T15873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1651.064636][T15873] bridge_slave_1: left allmulticast mode [ 1651.070340][T15873] bridge_slave_1: left promiscuous mode [ 1651.103722][T15873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.145022][T15873] bridge_slave_0: left allmulticast mode [ 1651.150722][T15873] bridge_slave_0: left promiscuous mode [ 1651.179655][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.231721][T15873] hsr_slave_0: left promiscuous mode [ 1651.240865][T23175] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1651.259689][T15873] hsr_slave_1: left promiscuous mode [ 1651.277871][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1651.440969][T15873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1651.589502][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.597597][T15873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1651.608157][T15873] bridge_slave_1: left allmulticast mode [ 1651.618138][T15873] bridge_slave_1: left promiscuous mode [ 1651.624030][T15873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.635687][T15873] bridge_slave_0: left allmulticast mode [ 1651.641373][T15873] bridge_slave_0: left promiscuous mode [ 1651.657470][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.883806][T15873] veth1_macvtap: left promiscuous mode [ 1651.893402][T15873] veth0_macvtap: left promiscuous mode [ 1651.899173][T15873] veth1_vlan: left promiscuous mode [ 1651.916000][T15873] veth0_vlan: left promiscuous mode [ 1651.941899][T15873] veth1_macvtap: left promiscuous mode [ 1651.953499][T15873] veth0_macvtap: left promiscuous mode [ 1651.959192][T15873] veth1_vlan: left promiscuous mode [ 1651.973422][T15873] veth0_vlan: left promiscuous mode [ 1653.203485][T15873] team0 (unregistering): Port device team_slave_1 removed [ 1653.273540][T15873] team0 (unregistering): Port device team_slave_0 removed [ 1653.340112][T15873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.406831][T15873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.945003][T15873] bond0 (unregistering): Released all slaves [ 1654.800371][T15873] team0 (unregistering): Port device team_slave_1 removed [ 1654.884564][T15873] team0 (unregistering): Port device team_slave_0 removed [ 1654.966185][T15873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1655.031946][T15873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1655.559427][T15873] bond0 (unregistering): Released all slaves [ 1655.863057][T22940] veth0_macvtap: entered promiscuous mode [ 1655.929876][T22940] veth1_macvtap: entered promiscuous mode [ 1656.022494][T22940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1656.052173][T22940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.054780][T23197] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1656.080714][T22940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1656.113427][T22940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.135435][T22940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.149875][T23197] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1656.190926][T23197] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1656.196707][T22940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1656.207345][T23197] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1656.253489][T22940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.281893][T22940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1656.295872][T22940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1656.367856][T22940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.438795][T22940] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.471683][T22940] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.486192][T22940] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.495395][T22940] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.698219][T23004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1656.763665][T15880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1656.772844][T15880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1656.793519][T18549] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1656.930467][T15877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1656.964921][T15877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.046721][T18549] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.073299][T18549] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1657.097575][T18549] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1657.153256][T18549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.187044][T18549] usb 6-1: config 0 descriptor?? [ 1657.430972][T23220] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1658.362216][T23004] veth0_vlan: entered promiscuous mode [ 1658.410127][T23004] veth1_vlan: entered promiscuous mode [ 1658.512191][T23004] veth0_macvtap: entered promiscuous mode [ 1658.536780][T23004] veth1_macvtap: entered promiscuous mode [ 1658.572073][T23004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.591200][T23004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.608898][T23004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.622297][T23004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.640644][T23004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.652637][T23004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.671881][T23004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1658.703825][T23004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1658.721128][T23004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.740155][T23004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1658.761033][T23004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.779153][T23004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1658.790136][T23004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.808852][T23004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1658.831746][T23004] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.848846][T23004] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.862081][T23004] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.880521][T23004] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.036344][T15873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.060222][T15873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.112013][T15875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.122417][T15875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.401842][T23246] FAULT_INJECTION: forcing a failure. [ 1659.401842][T23246] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.421270][T23246] CPU: 1 PID: 23246 Comm: syz.7.5299 Not tainted syzkaller #0 [ 1659.428875][T23246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1659.438966][T23246] Call Trace: [ 1659.442270][T23246] [ 1659.445224][T23246] dump_stack_lvl+0x18c/0x250 [ 1659.449939][T23246] ? show_regs_print_info+0x20/0x20 [ 1659.455168][T23246] ? load_image+0x420/0x420 [ 1659.459714][T23246] ? __might_sleep+0xe0/0xe0 [ 1659.464339][T23246] ? __lock_acquire+0x7eb0/0x7eb0 [ 1659.469400][T23246] should_fail_ex+0x394/0x4c0 [ 1659.474126][T23246] should_failslab+0x9/0x20 [ 1659.478666][T23246] slab_pre_alloc_hook+0x59/0x300 [ 1659.483718][T23246] ? aa_get_newest_label+0xfd/0x5c0 [ 1659.488989][T23246] ? debugfs_file_get+0x118/0x460 [ 1659.494047][T23246] __kmem_cache_alloc_node+0x53/0x250 [ 1659.499455][T23246] ? __asan_memset+0x22/0x40 [ 1659.504086][T23246] ? debugfs_file_get+0x118/0x460 [ 1659.509146][T23246] kmalloc_trace+0x2a/0xe0 [ 1659.513604][T23246] debugfs_file_get+0x118/0x460 [ 1659.518492][T23246] ? debugfs_real_fops+0xa0/0xa0 [ 1659.523464][T23246] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 1659.529040][T23246] ? __rwlock_init+0x150/0x150 [ 1659.533841][T23246] full_proxy_open+0x50/0x820 [ 1659.538561][T23246] ? fsnotify_perm+0x271/0x5e0 [ 1659.543397][T23246] do_dentry_open+0x880/0x14b0 [ 1659.548200][T23246] ? open_proxy_open+0x4d0/0x4d0 [ 1659.553177][T23246] path_openat+0x284f/0x3270 [ 1659.557825][T23246] ? do_sys_openat2+0xda/0x1d0 [ 1659.562623][T23246] ? __x64_sys_openat+0x139/0x160 [ 1659.567683][T23246] ? verify_lock_unused+0x140/0x140 [ 1659.572917][T23246] ? do_filp_open+0x430/0x430 [ 1659.577649][T23246] do_filp_open+0x1f2/0x430 [ 1659.582195][T23246] ? vfs_tmpfile+0x620/0x620 [ 1659.586837][T23246] ? _raw_spin_unlock+0x28/0x40 [ 1659.591842][T23246] ? alloc_fd+0x590/0x640 [ 1659.596213][T23246] do_sys_openat2+0x134/0x1d0 [ 1659.600934][T23246] ? do_sys_open+0xe0/0xe0 [ 1659.605389][T23246] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1659.611412][T23246] ? lock_chain_count+0x20/0x20 [ 1659.616302][T23246] __x64_sys_openat+0x139/0x160 [ 1659.621194][T23246] do_syscall_64+0x55/0xb0 [ 1659.625642][T23246] ? clear_bhb_loop+0x40/0x90 [ 1659.630345][T23246] ? clear_bhb_loop+0x40/0x90 [ 1659.635058][T23246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1659.640993][T23246] RIP: 0033:0x7f9ee539e559 [ 1659.645436][T23246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1659.665066][T23246] RSP: 002b:00007f9ee6194028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1659.673513][T23246] RAX: ffffffffffffffda RBX: 00007f9ee5625fa0 RCX: 00007f9ee539e559 [ 1659.681513][T23246] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1659.689514][T23246] RBP: 00007f9ee54358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.697510][T23246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1659.705504][T23246] R13: 00007f9ee5626038 R14: 00007f9ee5625fa0 R15: 00007ffe661a21a8 [ 1659.713521][T23246] [ 1659.769487][T23101] usb 6-1: USB disconnect, device number 2 [ 1660.080718][T23262] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1660.091460][T23262] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1660.189530][T23260] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1660.231969][T23260] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1660.268471][T23260] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1660.326176][T23260] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1661.184410][T23272] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1666.123517][ T788] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1666.332479][ T788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.348085][ T788] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1666.357495][ T788] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1666.367088][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.384035][ T788] usb 6-1: config 0 descriptor?? [ 1666.617949][ T788] Bluetooth: Can't get state to change to load ram patch err [ 1666.638731][ T788] Bluetooth: Loading patch file failed [ 1666.644602][ T788] ath3k: probe of 6-1:0.0 failed with error -32 [ 1668.230897][T22636] syz_tun (unregistering): left allmulticast mode [ 1668.448168][T17764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1668.472875][T17764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1668.487023][T17764] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1668.507327][T17764] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1668.517708][T17764] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1668.560472][T15877] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.573207][T17764] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1668.712746][T15877] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.745514][T23371] rxe_eth0 speed is unknown, defaulting to 1000 [ 1668.859359][T15877] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.896049][ T788] usb 6-1: USB disconnect, device number 3 [ 1668.983288][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.990749][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.021155][T23382] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1669.069689][T23382] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1669.087908][T23382] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1669.099666][T15877] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.129711][T23382] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1669.725316][T23393] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1670.349377][T23371] chnl_net:caif_netlink_parms(): no params data found [ 1670.598599][T23371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.612335][T23371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.632084][T23371] bridge_slave_0: entered allmulticast mode [ 1670.639875][T23371] bridge_slave_0: entered promiscuous mode [ 1670.653935][ T5787] Bluetooth: hci2: command tx timeout [ 1670.712973][T23371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.729243][T23371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.741652][T23371] bridge_slave_1: entered allmulticast mode [ 1670.760455][T23371] bridge_slave_1: entered promiscuous mode [ 1670.848267][T23371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.870875][T23371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.008303][T23371] team0: Port device team_slave_0 added [ 1671.026938][T23371] team0: Port device team_slave_1 added [ 1671.151163][T23371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.168262][T23371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.207841][T23371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.286035][T23371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.293040][T23371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.350224][T23371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.610833][T23371] hsr_slave_0: entered promiscuous mode [ 1671.618860][T23371] hsr_slave_1: entered promiscuous mode [ 1671.627468][T23371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1671.640883][T23371] Cannot create hsr debugfs directory [ 1671.699957][T15877] hsr_slave_0: left promiscuous mode [ 1671.707785][T15877] hsr_slave_1: left promiscuous mode [ 1671.718857][T15877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1671.734294][T15877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1671.746977][T15877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1671.754661][T15877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1671.762597][T15877] bridge_slave_1: left allmulticast mode [ 1671.771867][T15877] bridge_slave_1: left promiscuous mode [ 1671.782470][T15877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.794442][T15877] bridge_slave_0: left allmulticast mode [ 1671.800136][T15877] bridge_slave_0: left promiscuous mode [ 1671.806062][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.842696][T15877] veth1_macvtap: left promiscuous mode [ 1671.848399][T15877] veth0_macvtap: left promiscuous mode [ 1671.856212][T15877] veth1_vlan: left promiscuous mode [ 1671.861564][T15877] veth0_vlan: left promiscuous mode [ 1672.734528][ T5787] Bluetooth: hci2: command tx timeout [ 1672.812914][T15877] team0 (unregistering): Port device team_slave_1 removed [ 1672.892858][T15877] team0 (unregistering): Port device team_slave_0 removed [ 1672.968411][T15877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1673.044481][T15877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1673.632113][T15877] bond0 (unregistering): Released all slaves [ 1674.295604][T23371] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1674.336600][T23371] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1674.399044][T23371] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1674.431573][T23371] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1674.720426][T23371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.797744][T23371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1674.814255][ T5787] Bluetooth: hci2: command tx timeout [ 1674.877992][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.885278][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1674.972271][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.979492][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1675.523078][ T42] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.548689][T23440] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1675.575473][T23440] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1675.588253][T23440] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1675.604699][T23440] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1675.633312][T23440] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1675.641078][T23440] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1675.680769][ T42] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.801629][ T42] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.831881][T23438] rxe_eth0 speed is unknown, defaulting to 1000 [ 1675.869798][T23371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1675.993989][ T42] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.894052][ T5787] Bluetooth: hci2: command tx timeout [ 1677.171450][T23371] veth0_vlan: entered promiscuous mode [ 1677.235874][T23371] veth1_vlan: entered promiscuous mode [ 1677.411828][T23371] veth0_macvtap: entered promiscuous mode [ 1677.427699][T23438] chnl_net:caif_netlink_parms(): no params data found [ 1677.492139][T23371] veth1_macvtap: entered promiscuous mode [ 1677.683395][T23438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.690647][T23438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.710582][T23438] bridge_slave_0: entered allmulticast mode [ 1677.718379][T23438] bridge_slave_0: entered promiscuous mode [ 1677.731010][T23438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.739272][T23438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.752350][T23438] bridge_slave_1: entered allmulticast mode [ 1677.760678][T23438] bridge_slave_1: entered promiscuous mode [ 1677.773785][ T5787] Bluetooth: hci3: command tx timeout [ 1677.857044][T23371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1677.872020][T23371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.891719][T23371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1677.922545][T23371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.934704][T23371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1677.947100][T23371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.962681][T23371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1678.042753][T23438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.125249][T23371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.156556][T23371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.193478][T23371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.210817][T23371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.222975][T23371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.235382][T23371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.248593][T23371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1678.325260][T23438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.571577][T23438] team0: Port device team_slave_0 added [ 1678.638837][T23371] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.683509][T23371] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.692262][T23371] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.789851][T23371] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.885710][T23438] team0: Port device team_slave_1 added [ 1678.981992][ T42] hsr_slave_0: left promiscuous mode [ 1679.046362][ T42] hsr_slave_1: left promiscuous mode [ 1679.074241][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1679.083059][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.110283][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1679.133315][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.156103][ T42] bridge_slave_1: left allmulticast mode [ 1679.162060][ T42] bridge_slave_1: left promiscuous mode [ 1679.186370][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.226043][T23440] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1679.236892][ T42] bridge_slave_0: left allmulticast mode [ 1679.242575][ T42] bridge_slave_0: left promiscuous mode [ 1679.252729][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.261692][T23440] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1679.294260][T23440] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1679.314219][T23440] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1679.322379][T23440] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1679.331544][T23440] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1679.360266][ T42] veth1_macvtap: left promiscuous mode [ 1679.368301][ T42] veth0_macvtap: left promiscuous mode [ 1679.384311][ T42] veth1_vlan: left promiscuous mode [ 1679.390134][ T42] veth0_vlan: left promiscuous mode [ 1679.869889][T23440] Bluetooth: hci3: command tx timeout [ 1680.673454][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1680.746898][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1680.825968][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1680.906551][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.459489][T23440] Bluetooth: hci1: command tx timeout [ 1681.534076][ T42] bond0 (unregistering): Released all slaves [ 1681.807792][T23438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.828881][T23438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1681.867465][T23438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.888691][T23438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.898073][T23438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1681.935498][T23440] Bluetooth: hci3: command tx timeout [ 1681.941023][T23438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.989086][T23484] rxe_eth0 speed is unknown, defaulting to 1000 [ 1682.155912][T23438] hsr_slave_0: entered promiscuous mode [ 1682.177714][T23438] hsr_slave_1: entered promiscuous mode [ 1682.408743][T15877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.434176][T15877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.545995][ T42] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.708368][ T42] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.771722][T22584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.799472][T22584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.900248][ T42] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.002680][ T42] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.174418][T23497] loop8: detected capacity change from 0 to 512 [ 1683.182293][T23497] FAT-fs (loop8): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 1683.393689][T23484] chnl_net:caif_netlink_parms(): no params data found [ 1683.440685][T23438] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1683.445259][T23500] loop8: detected capacity change from 0 to 128 [ 1683.484890][T23438] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1683.516538][T23500] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1683.533641][T23440] Bluetooth: hci1: command tx timeout [ 1683.596533][T23500] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1683.642794][T23438] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1683.731366][T23438] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1684.013839][T23440] Bluetooth: hci3: command tx timeout [ 1684.079913][T23484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.096599][T23484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.105404][T23484] bridge_slave_0: entered allmulticast mode [ 1684.116315][T23484] bridge_slave_0: entered promiscuous mode [ 1684.126557][T23484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.141659][T23484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.151630][T23484] bridge_slave_1: entered allmulticast mode [ 1684.161361][T23484] bridge_slave_1: entered promiscuous mode [ 1684.195086][T23371] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1684.396114][T23484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1684.476398][T23484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.642292][T23484] team0: Port device team_slave_0 added [ 1684.661373][T23484] team0: Port device team_slave_1 added [ 1684.747708][ T5830] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1684.822220][T23438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.934082][T23484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.941075][T23484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1684.948539][ T5830] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.010923][T23484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.012967][ T5830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1685.032315][T23484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.041083][ T5830] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1685.051916][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.055210][T23484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.094836][T23484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.105960][ T5830] usb 9-1: config 0 descriptor?? [ 1685.156420][T23438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1685.215011][T15875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.223512][T15875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1685.349769][ T5830] Bluetooth: Can't get state to change to load ram patch err [ 1685.354111][T15877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.364381][T15877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1685.376216][ T5830] Bluetooth: Loading patch file failed [ 1685.409766][T23484] hsr_slave_0: entered promiscuous mode [ 1685.412462][ T5830] ath3k: probe of 9-1:0.0 failed with error -32 [ 1685.427265][T23484] hsr_slave_1: entered promiscuous mode [ 1685.434487][T23484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1685.463894][T23484] Cannot create hsr debugfs directory [ 1685.614785][T23440] Bluetooth: hci1: command tx timeout [ 1686.687793][ T42] hsr_slave_0: left promiscuous mode [ 1686.743628][ T42] hsr_slave_1: left promiscuous mode [ 1686.764115][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1686.794892][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1686.824963][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1686.861497][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1686.881972][ T42] bridge_slave_1: left allmulticast mode [ 1686.923711][ T42] bridge_slave_1: left promiscuous mode [ 1686.930019][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.021049][ T42] bridge_slave_0: left allmulticast mode [ 1687.040870][ T42] bridge_slave_0: left promiscuous mode [ 1687.068907][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.201793][ T42] veth1_macvtap: left promiscuous mode [ 1687.211030][ T42] veth0_macvtap: left promiscuous mode [ 1687.230574][ T42] veth1_vlan: left promiscuous mode [ 1687.235136][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1687.250655][ T42] veth0_vlan: left promiscuous mode [ 1687.250694][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1687.278326][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1687.296052][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1687.305851][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1687.316034][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1687.519114][T20842] usb 9-1: USB disconnect, device number 2 [ 1687.651604][T23553] fuse: Bad value for 'fd' [ 1687.713280][T23440] Bluetooth: hci1: command tx timeout [ 1687.766215][T23555] loop8: detected capacity change from 0 to 1024 [ 1687.806039][T23555] EXT4-fs: Ignoring removed bh option [ 1687.847678][T23555] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1687.930094][T23555] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1688.332637][T23371] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1688.452663][T23560] loop8: detected capacity change from 0 to 512 [ 1688.482409][T23560] FAT-fs (loop8): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 1688.643502][T23562] FAULT_INJECTION: forcing a failure. [ 1688.643502][T23562] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.698975][T23562] CPU: 1 PID: 23562 Comm: syz.8.5326 Not tainted syzkaller #0 [ 1688.706495][T23562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1688.716573][T23562] Call Trace: [ 1688.719870][T23562] [ 1688.722819][T23562] dump_stack_lvl+0x18c/0x250 [ 1688.727530][T23562] ? show_regs_print_info+0x20/0x20 [ 1688.732844][T23562] ? load_image+0x420/0x420 [ 1688.737378][T23562] ? __might_sleep+0xe0/0xe0 [ 1688.742000][T23562] ? __lock_acquire+0x7eb0/0x7eb0 [ 1688.747054][T23562] should_fail_ex+0x394/0x4c0 [ 1688.751769][T23562] should_failslab+0x9/0x20 [ 1688.756308][T23562] slab_pre_alloc_hook+0x59/0x300 [ 1688.761361][T23562] ? memcg_list_lru_alloc+0x231/0xb00 [ 1688.766767][T23562] ? memcg_list_lru_alloc+0x231/0xb00 [ 1688.772178][T23562] __kmem_cache_alloc_node+0x53/0x250 [ 1688.777594][T23562] ? memcg_list_lru_alloc+0x231/0xb00 [ 1688.782999][T23562] __kmalloc+0xa7/0x240 [ 1688.787198][T23562] memcg_list_lru_alloc+0x231/0xb00 [ 1688.792441][T23562] ? memcg_reparent_list_lrus+0x860/0x860 [ 1688.798218][T23562] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1688.804159][T23562] slab_pre_alloc_hook+0x2ad/0x300 [ 1688.809298][T23562] ? slab_pre_alloc_hook+0xb1/0x300 [ 1688.814528][T23562] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1688.819675][T23562] ? __d_alloc+0x31/0x710 [ 1688.824045][T23562] __d_alloc+0x31/0x710 [ 1688.828225][T23562] ? bdi_set_max_ratio+0xde/0x130 [ 1688.833291][T23562] d_make_root+0x4a/0xe0 [ 1688.837573][T23562] fuse_fill_super_common+0xaaa/0x11d0 [ 1688.843077][T23562] ? down_write+0x16e/0x200 [ 1688.847618][T23562] ? fuse_init_fs_context_submount+0x40/0x40 [ 1688.853635][T23562] ? up_write+0x1be/0x410 [ 1688.858002][T23562] fuse_fill_super+0x17a/0x1f0 [ 1688.862794][T23562] ? fuse_reconfigure+0xb0/0xb0 [ 1688.867676][T23562] get_tree_nodev+0xb5/0x140 [ 1688.872305][T23562] fuse_get_tree+0x2e2/0x4e0 [ 1688.876940][T23562] vfs_get_tree+0x8c/0x280 [ 1688.881396][T23562] do_new_mount+0x24a/0xa40 [ 1688.885941][T23562] __se_sys_mount+0x2e7/0x3d0 [ 1688.890661][T23562] ? __x64_sys_mount+0xc0/0xc0 [ 1688.895463][T23562] ? lockdep_hardirqs_on+0x98/0x150 [ 1688.900711][T23562] ? __x64_sys_mount+0x20/0xc0 [ 1688.905508][T23562] do_syscall_64+0x55/0xb0 [ 1688.909948][T23562] ? clear_bhb_loop+0x40/0x90 [ 1688.914649][T23562] ? clear_bhb_loop+0x40/0x90 [ 1688.919356][T23562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1688.925291][T23562] RIP: 0033:0x7f187619f7ca [ 1688.929919][T23562] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.949564][T23562] RSP: 002b:00007f18770a2e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1688.958013][T23562] RAX: ffffffffffffffda RBX: 00007f18770a2ee0 RCX: 00007f187619f7ca [ 1688.966012][T23562] RDX: 0000200000000280 RSI: 00002000000002c0 RDI: 0000000000000000 [ 1688.974017][T23562] RBP: 0000200000000280 R08: 00007f18770a2ee0 R09: 0000000001000000 [ 1688.982020][T23562] R10: 0000000001000000 R11: 0000000000000246 R12: 00002000000002c0 [ 1688.990020][T23562] R13: 00007f18770a2ea0 R14: 0000000000000000 R15: 0000200000000300 [ 1688.998036][T23562] [ 1689.235288][T23565] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1689.252528][T23565] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1689.262643][T23565] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1689.272910][T23565] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1689.373479][T23440] Bluetooth: hci0: command tx timeout [ 1689.425741][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1689.556561][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1689.633942][T23570] loop8: detected capacity change from 0 to 512 [ 1689.640973][T23570] EXT4-fs: Ignoring removed mblk_io_submit option [ 1689.685081][T23570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1689.706205][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1689.723545][T23570] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1689.888853][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1689.918277][T23371] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1690.611161][ T42] bond0 (unregistering): Released all slaves [ 1691.102043][T23580] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1691.127295][T23580] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1691.181830][T23580] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1691.223418][T23580] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1691.384345][T23438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1691.405320][T23548] rxe_eth0 speed is unknown, defaulting to 1000 [ 1691.463772][T23440] Bluetooth: hci0: command tx timeout [ 1692.030538][T23484] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1692.088053][T23484] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1692.158281][T23484] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1692.209516][T23484] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1692.349001][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.488559][ T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.611520][ T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.730487][ T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.791474][T23600] loop8: detected capacity change from 0 to 512 [ 1692.802038][T23600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1692.810560][T23600] ext4: Unknown parameter 'fsname' [ 1693.082834][T23438] veth0_vlan: entered promiscuous mode [ 1693.533964][T23440] Bluetooth: hci0: command tx timeout [ 1693.675105][T23438] veth1_vlan: entered promiscuous mode [ 1693.980249][T23484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.024837][T23606] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1694.037169][T23606] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1694.049377][T23606] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1694.084665][T23606] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1694.148438][T23548] chnl_net:caif_netlink_parms(): no params data found [ 1694.240649][T23484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1694.326998][T23438] veth0_macvtap: entered promiscuous mode [ 1694.396432][T20629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.403641][T20629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.414777][T20629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.421934][T20629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.477243][T23438] veth1_macvtap: entered promiscuous mode [ 1694.661759][T23548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.680713][T23548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.688497][T23548] bridge_slave_0: entered allmulticast mode [ 1694.696572][T23548] bridge_slave_0: entered promiscuous mode [ 1694.707445][T23438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1694.726616][T23438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1694.737919][T23438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1694.749576][T23438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1694.761748][T23438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1694.804975][T23548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.813486][T23548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.820785][T23548] bridge_slave_1: entered allmulticast mode [ 1694.832056][T23548] bridge_slave_1: entered promiscuous mode [ 1694.887388][T23548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.019288][T23548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.035994][T23438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.052796][T23438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.078861][T23438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.103485][T23438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.115266][T23438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1695.255740][T23619] autofs4:pid:23619:autofs_fill_super: called with bogus options [ 1695.292774][T23438] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.312333][T23438] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.329616][T23438] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.338732][T23438] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.382282][T23548] team0: Port device team_slave_0 added [ 1695.410183][T23548] team0: Port device team_slave_1 added [ 1695.619974][T23548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.643622][T23548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.676831][T23548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.692688][T23548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.700658][T23440] Bluetooth: hci0: command tx timeout [ 1695.717015][T23548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.753819][T23548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.757230][T23625] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1695.784398][T23625] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1695.796209][T23625] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1695.810217][T23625] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1696.063592][T23548] hsr_slave_0: entered promiscuous mode [ 1696.099912][T23548] hsr_slave_1: entered promiscuous mode [ 1696.128023][T23548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1696.140470][T23548] Cannot create hsr debugfs directory [ 1696.165644][T23484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1696.181306][T23627] loop8: detected capacity change from 0 to 512 [ 1696.361208][ T42] hsr_slave_0: left promiscuous mode [ 1696.378941][ T42] hsr_slave_1: left promiscuous mode [ 1696.396671][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1696.412327][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1696.430242][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.443454][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.463999][ T42] bridge_slave_1: left allmulticast mode [ 1696.469704][ T42] bridge_slave_1: left promiscuous mode [ 1696.482548][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.501835][ T42] bridge_slave_0: left allmulticast mode [ 1696.507763][ T42] bridge_slave_0: left promiscuous mode [ 1696.514047][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.577302][ T42] veth1_macvtap: left promiscuous mode [ 1696.582891][ T42] veth0_macvtap: left promiscuous mode [ 1696.599023][ T42] veth1_vlan: left promiscuous mode [ 1696.604558][ T42] veth0_vlan: left promiscuous mode [ 1696.850895][T23634] autofs4:pid:23634:autofs_fill_super: called with bogus options [ 1697.920074][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1698.005104][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1698.093052][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.178869][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.831576][ T42] bond0 (unregistering): Released all slaves [ 1699.067571][T15875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.103442][T15875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.217993][T23484] veth0_vlan: entered promiscuous mode [ 1699.328321][T15877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.337167][T15877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.386710][T23484] veth1_vlan: entered promiscuous mode [ 1699.561304][T23640] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1699.625476][T23640] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1699.645837][T23640] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1699.656078][T23640] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1699.701158][T23643] overlayfs: missing 'lowerdir' [ 1699.815670][T23484] veth0_macvtap: entered promiscuous mode [ 1699.857549][T23484] veth1_macvtap: entered promiscuous mode [ 1699.999159][T23647] loop9: detected capacity change from 0 to 512 [ 1700.158829][T23484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.183349][T23484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.198083][T23484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1700.209303][T23484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.220331][ T5830] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1700.225340][T23484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1700.373965][ T5830] usb 9-1: device descriptor read/64, error -71 [ 1700.403603][T23651] autofs4:pid:23651:autofs_fill_super: called with bogus options [ 1700.491746][T23484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1700.504026][T23484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.523256][T23484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1700.544515][T23484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1700.556332][T23484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1700.609145][T23653] loop9: detected capacity change from 0 to 512 [ 1700.664624][ T5830] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1700.789000][T23484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.802951][T23484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.813071][T23484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.831075][T23484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.136514][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.179389][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.246243][ T5830] usb 9-1: device descriptor read/64, error -71 [ 1702.841144][ T5830] usb usb9-port1: attempt power cycle [ 1703.471225][T23548] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1703.507320][ T8317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.528135][T23548] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1703.551691][ T8317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1703.573332][T23548] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1703.595056][T23548] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1703.844203][T23660] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1703.874349][T23660] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1703.900288][T23660] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1703.942462][T23660] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1703.985005][T23548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.072286][T23548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.130825][T20629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.138059][T20629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.208926][T15877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.216177][T15877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.250862][T23662] loop1: detected capacity change from 0 to 8192 [ 1704.277738][T23665] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1704.294550][T23665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1705.322845][T23548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1706.006008][T23548] veth0_vlan: entered promiscuous mode [ 1706.058668][T23548] veth1_vlan: entered promiscuous mode [ 1706.190344][ T6007] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1706.328095][T23548] veth0_macvtap: entered promiscuous mode [ 1706.385380][ T6007] usb 2-1: device descriptor read/64, error -71 [ 1706.401120][T23548] veth1_macvtap: entered promiscuous mode [ 1706.465578][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.489212][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.515849][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.539810][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.562064][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.590693][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.622735][T23548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.652194][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.664258][ T6007] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1706.682258][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.700811][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.717695][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.729596][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.749832][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.769251][T23548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.797115][T23548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.823647][ T6007] usb 2-1: device descriptor read/64, error -71 [ 1706.833284][T23548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.849244][T23548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.858710][T23548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.954286][T23705] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1706.974912][ T6007] usb usb2-port1: attempt power cycle [ 1707.015697][T23705] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1707.049328][ T8317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.077734][ T8317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.140410][ T8317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.157419][ T8317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.434490][ T6007] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1707.460915][T23716] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1707.475829][ T6007] usb 2-1: device descriptor read/8, error -71 [ 1707.764182][ T6007] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1707.857794][ T6007] usb 2-1: device descriptor read/8, error -71 [ 1708.004335][ T6007] usb usb2-port1: unable to enumerate USB device [ 1709.098791][T23738] loop1: detected capacity change from 0 to 512 [ 1709.169386][T23738] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1709.233355][T23738] ext4: Unknown parameter 'fsname' [ 1710.440439][T23750] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1710.492781][T23750] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1710.793317][T21212] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1710.954554][T23765] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1711.005383][T21212] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.028303][T21212] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1711.070882][T21212] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1711.157381][T21212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.194089][T23530] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1711.272273][T21212] usb 9-1: config 0 descriptor?? [ 1711.383893][T23530] usb 10-1: device descriptor read/64, error -71 [ 1711.559592][T21212] Bluetooth: Can't get state to change to load ram patch err [ 1711.631087][T21212] Bluetooth: Loading patch file failed [ 1711.678232][T21212] ath3k: probe of 9-1:0.0 failed with error -121 [ 1711.753678][T23530] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1711.983533][T23530] usb 10-1: device descriptor read/64, error -71 [ 1712.104786][T23530] usb usb10-port1: attempt power cycle [ 1712.370120][T23786] loop1: detected capacity change from 0 to 512 [ 1712.391279][T23786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1712.429871][T23786] ext4: Unknown parameter 'fsname' [ 1712.676515][T23530] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1712.720488][T23530] usb 10-1: device descriptor read/8, error -71 [ 1713.260637][T23789] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1713.309265][T23789] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1713.319444][T23789] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1713.329600][T23789] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1713.443352][T23530] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1713.514696][T23530] usb 10-1: device descriptor read/8, error -71 [ 1713.532641][T20841] usb 9-1: USB disconnect, device number 6 [ 1713.639768][T23530] usb usb10-port1: unable to enumerate USB device [ 1714.271604][T23821] loop8: detected capacity change from 0 to 512 [ 1714.295490][T23821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1714.302205][T23821] ext4: Unknown parameter 'fsname' [ 1714.369968][T23822] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1714.476916][T23822] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1714.584537][T23827] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1714.654230][T23822] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1715.165920][T23828] FAULT_INJECTION: forcing a failure. [ 1715.165920][T23828] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.217073][T23828] CPU: 1 PID: 23828 Comm: syz.1.5398 Not tainted syzkaller #0 [ 1715.224614][T23828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1715.234791][T23828] Call Trace: [ 1715.238104][T23828] [ 1715.241057][T23828] dump_stack_lvl+0x18c/0x250 [ 1715.245782][T23828] ? show_regs_print_info+0x20/0x20 [ 1715.251007][T23828] ? load_image+0x420/0x420 [ 1715.255548][T23828] ? __might_sleep+0xe0/0xe0 [ 1715.260177][T23828] ? __lock_acquire+0x7eb0/0x7eb0 [ 1715.265243][T23828] should_fail_ex+0x394/0x4c0 [ 1715.269968][T23828] should_failslab+0x9/0x20 [ 1715.274507][T23828] slab_pre_alloc_hook+0x59/0x300 [ 1715.279547][T23828] ? throtl_pd_alloc+0x9d/0x5f0 [ 1715.284427][T23828] __kmem_cache_alloc_node+0x53/0x250 [ 1715.289820][T23828] ? lockdep_softirqs_off+0x440/0x440 [ 1715.295216][T23828] ? throtl_pd_alloc+0x9d/0x5f0 [ 1715.300086][T23828] kmalloc_node_trace+0x26/0xe0 [ 1715.304960][T23828] throtl_pd_alloc+0x9d/0x5f0 [ 1715.309655][T23828] blkg_alloc+0x595/0x870 [ 1715.314007][T23828] blkg_conf_prep+0x60f/0xdc0 [ 1715.318722][T23828] tg_set_conf+0xe8/0x3e0 [ 1715.323078][T23828] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1715.329260][T23828] ? tg_prfill_conf_u64+0x80/0x80 [ 1715.334312][T23828] ? tg_print_conf_uint+0xe0/0xe0 [ 1715.339356][T23828] ? cgroup_file_write+0x2b9/0x6a0 [ 1715.344495][T23828] ? tg_print_conf_uint+0xe0/0xe0 [ 1715.349538][T23828] cgroup_file_write+0x2cd/0x6a0 [ 1715.354490][T23828] ? kernfs_fop_write_iter+0x1dc/0x520 [ 1715.359963][T23828] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1715.365089][T23828] ? __virt_addr_valid+0x10c/0x380 [ 1715.370242][T23828] ? __virt_addr_valid+0x10c/0x380 [ 1715.375383][T23828] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1715.380512][T23828] kernfs_fop_write_iter+0x3a4/0x520 [ 1715.385815][T23828] vfs_write+0x474/0x9a0 [ 1715.390087][T23828] ? file_end_write+0x250/0x250 [ 1715.394962][T23828] ? __fget_files+0x3fc/0x460 [ 1715.399668][T23828] ? __fdget_pos+0x2a3/0x330 [ 1715.404276][T23828] ? ksys_write+0x74/0x260 [ 1715.408710][T23828] ksys_write+0x151/0x260 [ 1715.413086][T23828] ? __ia32_sys_read+0x90/0x90 [ 1715.417873][T23828] ? lockdep_hardirqs_on+0x98/0x150 [ 1715.423092][T23828] do_syscall_64+0x55/0xb0 [ 1715.427547][T23828] ? clear_bhb_loop+0x40/0x90 [ 1715.432236][T23828] ? clear_bhb_loop+0x40/0x90 [ 1715.436924][T23828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1715.442832][T23828] RIP: 0033:0x7eff1719e559 [ 1715.447258][T23828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1715.466898][T23828] RSP: 002b:00007eff17fbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1715.475331][T23828] RAX: ffffffffffffffda RBX: 00007eff17425fa0 RCX: 00007eff1719e559 [ 1715.483317][T23828] RDX: 0000000000000006 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1715.491299][T23828] RBP: 00007eff172358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1715.499287][T23828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1715.507271][T23828] R13: 00007eff17426038 R14: 00007eff17425fa0 R15: 00007ffea4931c68 [ 1715.515270][T23828] [ 1715.948906][T23838] loop9: detected capacity change from 0 to 1024 [ 1715.998153][T23838] EXT4-fs: Ignoring removed bh option [ 1716.070701][T23838] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1716.101407][T23848] loop8: detected capacity change from 0 to 8 [ 1716.224552][T23530] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1716.242657][T23848] SQUASHFS error: Failed to read block 0x4de: -5 [ 1716.273468][T23848] SQUASHFS error: Failed to read block 0x4de: -5 [ 1716.280056][T23848] SQUASHFS error: Failed to read block 0x4de: -5 [ 1716.335618][T23848] SQUASHFS error: Failed to read block 0x4de: -5 [ 1716.353683][T23848] SQUASHFS error: Failed to read block 0x4de: -5 [ 1716.376975][ T27] audit: type=1800 audit(1792046689.433:2786): pid=23848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5404" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 1716.397161][T23530] usb 3-1: device descriptor read/64, error -71 [ 1716.641176][T23438] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.684178][T23530] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1716.868859][T23530] usb 3-1: device descriptor read/64, error -71 [ 1716.934608][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1717.043090][T23530] usb usb3-port1: attempt power cycle [ 1718.422429][T23867] loop9: detected capacity change from 0 to 512 [ 1718.434966][T23867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1718.442075][T23867] ext4: Unknown parameter 'fsname' [ 1718.645503][T23530] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1729.698290][T23530] usb 3-1: device descriptor read/8, error -110 [ 1730.793990][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.800805][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.779379][T23440] Bluetooth: hci2: link tx timeout [ 1735.787420][T23440] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1738.835325][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 1785.650806][ T5144] udevd[5144]: worker [23368] /devices/virtual/block/loop9 is taking a long time [ 1825.233984][ T5787] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1829.984286][T17764] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1831.944603][T23879] Bluetooth: hci4: Opcode 0x0c03 failed: -4 [ 1832.006597][T17764] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1832.674431][T23880] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 1834.064395][T23892] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1892.113569][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1892.120690][ C1] rcu: 0-...!: (1 GPs behind) idle=ea74/1/0x4000000000000000 softirq=120754/120755 fqs=23 [ 1892.132903][ C1] rcu: hardirqs softirqs csw/system [ 1892.139680][ C1] rcu: number: 15 5 2 [ 1892.146374][ C1] rcu: cputime: 0 63 0 ==> 107390(ms) [ 1892.154437][ C1] rcu: (detected by 1, t=10502 jiffies, g=174689, q=2264 ncpus=2) [ 1892.162623][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1892.168252][ C0] NMI backtrace for cpu 0 [ 1892.168264][ C0] CPU: 0 PID: 18549 Comm: kworker/0:0 Not tainted syzkaller #0 [ 1892.168280][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1892.168292][ C0] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 1892.168368][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x76/0xe0 [ 1892.168392][ C0] Code: 4c 8b 05 3d 22 7c 7e 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 2b 22 7c 7e 41 81 e3 00 01 ff 00 74 13 <41> 81 fb 00 01 00 00 75 d9 41 83 b8 24 16 00 00 00 74 cf 45 8b 98 [ 1892.168405][ C0] RSP: 0018:ffffc90000006290 EFLAGS: 00000006 [ 1892.168417][ C0] RAX: 0000000000000020 RBX: 000001b88e5c39a7 RCX: 0000000000000005 [ 1892.168427][ C0] RDX: ffffffff818aa00d RSI: ffffffff8df7bbc0 RDI: 000000000000000a [ 1892.168438][ C0] RBP: 000000000000000a R08: ffff8880254a0000 R09: 0000000000000015 [ 1892.168448][ C0] R10: 0000000000000015 R11: 0000000000010100 R12: ffff888062a762a4 [ 1892.168458][ C0] R13: f800000000000000 R14: 0000000000000294 R15: 00000000000208aa [ 1892.168469][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1892.168482][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1892.168493][ C0] CR2: 00007faa0704e8eb CR3: 0000000024c03000 CR4: 00000000003506f0 [ 1892.168507][ C0] Call Trace: [ 1892.168515][ C0] [ 1892.168535][ C0] check_buffer+0x24d/0x950 [ 1892.168590][ C0] __rb_reserve_next+0x4d9/0xd00 [ 1892.168682][ C0] ring_buffer_lock_reserve+0xae1/0xed0 [ 1892.168786][ C0] trace_event_buffer_lock_reserve+0x1d2/0x6f0 [ 1892.168832][ C0] trace_event_buffer_reserve+0x2ac/0x3d0 [ 1892.168866][ C0] ? trace_event_ignore_this_pid+0x130/0x130 [ 1892.168891][ C0] ? perf_trace_lock_acquire+0x400/0x400 [ 1892.168941][ C0] trace_event_raw_event_lock_acquire+0x128/0x290 [ 1892.168975][ C0] ? __probestub_contention_end+0x10/0x10 [ 1892.169030][ C0] ? debug_objects_fill_pool+0x8b/0x790 [ 1892.169064][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 1892.169098][ C0] lock_acquire+0x3ef/0x420 [ 1892.169117][ C0] ? debug_object_activate+0x6c/0x500 [ 1892.169167][ C0] ? debug_objects_fill_pool+0xcc/0x790 [ 1892.169191][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1892.169229][ C0] ? debug_object_activate+0x500/0x500 [ 1892.169279][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1892.169303][ C0] ? debug_object_activate+0x6c/0x500 [ 1892.169327][ C0] ? _raw_spin_lock+0x40/0x40 [ 1892.169360][ C0] ? advance_sched+0x9d7/0xc70 [ 1892.169480][ C0] debug_object_activate+0x6c/0x500 [ 1892.169506][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1892.169548][ C0] enqueue_hrtimer+0x34/0x380 [ 1892.169565][ C0] ? __hrtimer_run_queues+0x620/0xc10 [ 1892.169599][ C0] __hrtimer_run_queues+0x62f/0xc10 [ 1892.169615][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1892.169633][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1892.169723][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1892.169748][ C0] ? read_tsc+0x9/0x20 [ 1892.169765][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1892.169820][ C0] hrtimer_interrupt+0x39d/0x980 [ 1892.169930][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1892.169962][ C0] sysvec_apic_timer_interrupt+0x51/0xc0 [ 1892.169987][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1892.170005][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 1892.170025][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ab 35 c0 f6 65 8b 05 1c f3 66 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1892.170038][ C0] RSP: 0018:ffffc90000006ce0 EFLAGS: 00000206 [ 1892.170050][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 6f2b481db26d3900 [ 1892.170062][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacfe0 RDI: 0000000000000001 [ 1892.170073][ C0] RBP: ffffc90000006d60 R08: ffffffff91ff15c7 R09: 1ffffffff23fe2b8 [ 1892.170084][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2b9 R12: dffffc0000000000 [ 1892.170095][ C0] R13: ffff8880203b54b0 R14: ffffffff982eaff8 R15: 1ffff92000000d9c [ 1892.170172][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1892.170246][ C0] debug_check_no_obj_freed+0x47b/0x520 [ 1892.170276][ C0] ? run_filter+0x23/0x260 [ 1892.170384][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 1892.170422][ C0] ? packet_rcv+0x172/0x1360 [ 1892.170442][ C0] kmem_cache_free+0xf8/0x290 [ 1892.170490][ C0] packet_rcv+0x172/0x1360 [ 1892.170536][ C0] ? packet_sock_destruct+0x190/0x190 [ 1892.170569][ C0] dev_queue_xmit_nit+0xb0c/0xba0 [ 1892.170616][ C0] ? dev_queue_xmit_nit+0x2d/0xba0 [ 1892.170667][ C0] dev_hard_start_xmit+0x150/0x790 [ 1892.170749][ C0] sch_direct_xmit+0x251/0x4a0 [ 1892.170833][ C0] ? do_raw_spin_lock+0x2b0/0x2b0 [ 1892.170860][ C0] ? mrp_pdu_parse_vecattr_event+0x230/0x230 [ 1892.170927][ C0] __dev_queue_xmit+0x18b8/0x37e0 [ 1892.170960][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 1892.171057][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 1892.171114][ C0] ? NF_HOOK+0xa3/0x3b0 [ 1892.171183][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 1892.171208][ C0] ? __asan_memcpy+0x40/0x70 [ 1892.171274][ C0] NF_HOOK+0x331/0x3b0 [ 1892.171305][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 1892.171328][ C0] ? NF_HOOK+0xa3/0x3b0 [ 1892.171356][ C0] ? arp_xmit+0x270/0x270 [ 1892.171381][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1892.171459][ C0] arp_xmit+0x16c/0x270 [ 1892.171476][ C0] ? arp_xmit+0x23/0x270 [ 1892.171511][ C0] arp_process+0x13ba/0x17b0 [ 1892.171577][ C0] ? arp_error_report+0x160/0x160 [ 1892.171642][ C0] NF_HOOK+0x331/0x3b0 [ 1892.171672][ C0] ? arp_error_report+0x160/0x160 [ 1892.171696][ C0] ? NF_HOOK+0xa3/0x3b0 [ 1892.171719][ C0] ? arp_xmit+0x270/0x270 [ 1892.171768][ C0] ? __asan_memset+0x22/0x40 [ 1892.171795][ C0] ? arp_rcv+0x2ed/0x4e0 [ 1892.171828][ C0] ? arp_req_set_proxy+0x230/0x230 [ 1892.171860][ C0] __netif_receive_skb_list_core+0x708/0x770 [ 1892.171933][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 1892.171962][ C0] ? read_tsc+0x9/0x20 [ 1892.172010][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 1892.172056][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 1892.172081][ C0] ? netif_receive_skb_core+0x230/0x230 [ 1892.172099][ C0] ? dev_gro_receive+0x10b0/0x22a0 [ 1892.172168][ C0] ? eth_type_trans+0x3ab/0x770 [ 1892.172248][ C0] napi_gro_receive+0x553/0xaf0 [ 1892.172292][ C0] receive_buf+0x2109/0x3610 [ 1892.172399][ C0] ? virtnet_poll_tx+0x530/0x530 [ 1892.172416][ C0] ? do_raw_spin_trylock+0xb2/0x190 [ 1892.172499][ C0] virtnet_poll+0x69e/0x1300 [ 1892.172559][ C0] ? refill_work+0x220/0x220 [ 1892.172615][ C0] ? page_frag_free+0x94/0x150 [ 1892.172640][ C0] ? skb_release_data+0x665/0x7f0 [ 1892.172702][ C0] __napi_poll+0xbb/0x460 [ 1892.172740][ C0] net_rx_action+0x65f/0xcc0 [ 1892.172837][ C0] ? net_tx_action+0x950/0x950 [ 1892.172856][ C0] ? trace_event_raw_event_softirq+0xfb/0x190 [ 1892.172878][ C0] ? perf_trace_irq_handler_exit+0x310/0x310 [ 1892.172893][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1892.172927][ C0] ? lock_chain_count+0x20/0x20 [ 1892.172990][ C0] handle_softirqs+0x27d/0x820 [ 1892.173031][ C0] ? do_softirq+0xfa/0x1a0 [ 1892.173068][ C0] ? do_softirq+0x1a0/0x1a0 [ 1892.173110][ C0] ? mod_peer_timer+0x1f/0x250 [ 1892.173138][ C0] do_softirq+0xfa/0x1a0 [ 1892.173157][ C0] [ 1892.173161][ C0] [ 1892.173172][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1892.173196][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 1892.173219][ C0] ? mod_peer_timer+0x1f/0x250 [ 1892.173251][ C0] ? rcu_is_watching+0x15/0xb0 [ 1892.173288][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 1892.173308][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1892.173329][ C0] ? mod_peer_timer+0x1f/0x250 [ 1892.173352][ C0] ? mod_peer_timer+0x1f/0x250 [ 1892.173382][ C0] ? mod_peer_timer+0x203/0x250 [ 1892.173414][ C0] wg_packet_tx_worker+0x16b/0x7d0 [ 1892.173443][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1892.173470][ C0] ? process_scheduled_works+0x975/0x1600 [ 1892.173505][ C0] process_scheduled_works+0xa60/0x1600 [ 1892.173637][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1892.173687][ C0] ? assign_work+0x3cc/0x5d0 [ 1892.173736][ C0] worker_thread+0xa5e/0xfe0 [ 1892.173807][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1892.173825][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1892.173885][ C0] kthread+0x2fa/0x390 [ 1892.173900][ C0] ? pr_cont_work+0x550/0x550 [ 1892.173928][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1892.173949][ C0] ret_from_fork+0x48/0x80 [ 1892.173966][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1892.173989][ C0] ret_from_fork_asm+0x11/0x20 [ 1892.174079][ C0] [ 1892.174306][ C1] rcu: rcu_preempt kthread starved for 5503 jiffies! g174689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1893.034129][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1893.044445][ C1] rcu: RCU grace-period kthread stack dump: [ 1893.050657][ C1] task:rcu_preempt state:R running task stack:26664 pid:17 ppid:2 flags:0x00004000 [ 1893.061768][ C1] Call Trace: [ 1893.065404][ C1] [ 1893.068725][ C1] __schedule+0x15ae/0x4660 [ 1893.073721][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 1893.079294][ C1] ? lock_chain_count+0x20/0x20 [ 1893.084508][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1893.090211][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1893.096336][ C1] ? asan.module_dtor+0x20/0x20 [ 1893.101448][ C1] ? rcu_is_watching+0x15/0xb0 [ 1893.107112][ C1] schedule+0xbd/0x170 [ 1893.111584][ C1] schedule_timeout+0x188/0x2d0 [ 1893.116808][ C1] ? console_conditional_schedule+0x40/0x40 [ 1893.122869][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1893.129129][ C1] ? update_process_times+0x1b0/0x1b0 [ 1893.135049][ C1] ? prepare_to_swait_event+0x344/0x360 [ 1893.141112][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 1893.146580][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1893.153131][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 1893.158586][ C1] ? rcu_gp_init+0x1530/0x1530 [ 1893.163491][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 1893.168870][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1893.174404][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1893.179907][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 1893.185061][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1893.190403][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1893.195709][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 1893.201271][ C1] kthread+0x2fa/0x390 [ 1893.205525][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1893.211061][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1893.215999][ C1] ret_from_fork+0x48/0x80 [ 1893.220581][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1893.225531][ C1] ret_from_fork_asm+0x11/0x20 [ 1893.231000][ C1] [ 1893.234324][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1893.241063][ C1] CPU: 1 PID: 23530 Comm: kworker/1:9 Not tainted syzkaller #0 [ 1893.248716][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1893.259002][ C1] Workqueue: events drain_vmap_area_work [ 1893.265121][ C1] RIP: 0010:smp_call_function_many_cond+0xd85/0x1190 [ 1893.272013][ C1] Code: 45 8b 34 24 44 89 f6 83 e6 01 31 ff e8 34 01 0b 00 41 83 e6 01 49 be 00 00 00 00 00 fc ff df 75 07 e8 6f fd 0a 00 eb 38 f3 90 <42> 0f b6 04 33 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 53 fd [ 1893.291817][ C1] RSP: 0018:ffffc9000343f8a0 EFLAGS: 00000293 [ 1893.298307][ C1] RAX: ffffffff817c935d RBX: 1ffff110171887a5 RCX: ffff888050658000 [ 1893.306592][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1893.314716][ C1] RBP: ffffc9000343fa20 R08: ffffffff91ff150f R09: 1ffffffff23fe2a1 [ 1893.322962][ C1] R10: dffffc0000000000 R11: fffffbfff23fe2a2 R12: ffff8880b8c43d28 [ 1893.331306][ C1] R13: ffff8880b8d3d380 R14: dffffc0000000000 R15: 0000000000000000 [ 1893.339490][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1893.348606][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1893.355487][ C1] CR2: 00007f1ba9d39e9c CR3: 000000003a749000 CR4: 00000000003506e0 [ 1893.363879][ C1] Call Trace: [ 1893.367271][ C1] [ 1893.371122][ C1] ? smp_call_function_many+0x40/0x40 [ 1893.376712][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 1893.382043][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 1893.387561][ C1] ? __rwlock_init+0x150/0x150 [ 1893.392660][ C1] ? flush_tlb_all+0x20/0x20 [ 1893.397639][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1893.403095][ C1] __purge_vmap_area_lazy+0x223/0x1ab0 [ 1893.408776][ C1] ? trace_event_buffer_commit+0x258/0x7c0 [ 1893.415191][ C1] ? drain_vmap_area_work+0x32/0xd0 [ 1893.420558][ C1] ? free_vmap_area_rb_augment_cb_rotate+0x170/0x170 [ 1893.427512][ C1] ? mutex_lock_nested+0x20/0x20 [ 1893.432947][ C1] ? perf_trace_workqueue_activate_work+0x300/0x300 [ 1893.439804][ C1] ? purge_fragmented_block+0x3e0/0x3e0 [ 1893.445994][ C1] drain_vmap_area_work+0x40/0xd0 [ 1893.451335][ C1] ? process_scheduled_works+0x975/0x1600 [ 1893.457258][ C1] process_scheduled_works+0xa60/0x1600 [ 1893.463907][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1893.470072][ C1] ? assign_work+0x3cc/0x5d0 [ 1893.475019][ C1] worker_thread+0xa5e/0xfe0 [ 1893.480350][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1893.485426][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1893.491118][ C1] kthread+0x2fa/0x390 [ 1893.495354][ C1] ? pr_cont_work+0x550/0x550 [ 1893.500428][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1893.505409][ C1] ret_from_fork+0x48/0x80 [ 1893.509979][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1893.514913][ C1] ret_from_fork_asm+0x11/0x20 [ 1893.520386][ C1]