last executing test programs: 7.407014227s ago: executing program 3 (id=2548): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x11d04b8, 0x0, 0x85, 0x0, 0x0) dup(r0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) lsetxattr$security_ima(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x2) 7.207111322s ago: executing program 3 (id=2553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) io_setup(0x3ff, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xf8f0, r0, 0x0, 0x0, 0x7, 0x0, 0x4}]) 7.006968738s ago: executing program 3 (id=2557): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) socket$kcm(0x10, 0x2, 0x0) write$vhost_msg_v2(r4, 0x0, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x9e) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0xf0ff) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 2.009700998s ago: executing program 0 (id=2577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8) mmap(&(0x7f00007a9000/0x2000)=nil, 0x2000, 0xb635773f04ebbee7, 0x10, r1, 0x2000) socket$kcm(0x2c, 0x3, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000240)={0xc53, 0xfffffff9}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000280), 0x40080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="d80000006ab68e6814246ebae334688dc250c0860e154cfd3a41227b772a4a2b0ed003a0a1c4ac0b616914a0bfd721de1044420acb5fdb34d4f2", @ANYBLOB="000325bd7000fedbdf2506000000000099006e000000480000001c00e700ed54a960c498d9560ca0c19917fb526b98648b494906e0211c00e700c643716793add6b6334047cf901ce7b60a8b148e608da7422800178005005300000000"], 0xd8}, 0x1, 0x0, 0x0, 0x44095}, 0x4000184) socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e0000000000008100000008004538001c00660000750290780a010102e0e8ff001500907864010102"], 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x865}, 0x2404c880) sendmmsg$alg(r5, &(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@iv={0x18}], 0x18, 0x60040040}], 0x1, 0x40000) ioperm(0x9, 0x6, 0xa416) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000002c0)={0x2, 0x2, 0x7, 0x3, 0x3}) 1.771845604s ago: executing program 0 (id=2580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004864}, 0x40000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x653}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.723103775s ago: executing program 4 (id=2581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x200, @loopback}, 0x1c) 1.636657058s ago: executing program 4 (id=2582): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x3fffe000) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x6202, 0xf, 0x3e}, 0x18) 1.479172162s ago: executing program 4 (id=2583): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="001cf6ffd1aaf0a5b50baf94f399556bf906000000cefd1989d98f94e8", 0x1d) sendfile(r1, r0, 0x0, 0x3ffff) 1.295154087s ago: executing program 1 (id=2585): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x20, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008d000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090100ffffffff9500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009e850000850000000600000045000600040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.269049557s ago: executing program 1 (id=2586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000080000000500000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000640)="a28d", &(0x7f00000004c0)=""/192}, 0x20) 1.15667666s ago: executing program 3 (id=2587): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000009c0)=0x2) 1.071123022s ago: executing program 1 (id=2588): msgrcv(0x0, 0x0, 0x0, 0xf94d5383a05cefd3, 0x2800) 1.042169963s ago: executing program 3 (id=2590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8) mmap(&(0x7f00007a9000/0x2000)=nil, 0x2000, 0xb635773f04ebbee7, 0x10, r1, 0x2000) socket$kcm(0x2c, 0x3, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000240)={0xc53, 0xfffffff9}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000280), 0x40080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="d80000006ab68e6814246ebae334688dc250c0860e154cfd3a41227b772a4a2b0ed003a0a1c4ac0b616914a0bfd721de1044420acb5fdb34d4f2", @ANYBLOB="000325bd7000fedbdf2506000000000099006e000000480000001c00e700ed54a960c498d9560ca0c19917fb526b98648b494906e0211c00e700c643716793add6b6334047cf901ce7b60a8b148e608da7422800178005005300000000"], 0xd8}, 0x1, 0x0, 0x0, 0x44095}, 0x4000184) socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e0000000000008100000008004538001c00660000750290780a010102e0e8ff001500907864010102"], 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x865}, 0x2404c880) sendmmsg$alg(r5, &(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@iv={0x18}], 0x18, 0x60040040}], 0x1, 0x40000) ioperm(0x9, 0x6, 0xa416) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000002c0)={0x2, 0x2, 0x7, 0x3, 0x3}) 1.003100054s ago: executing program 0 (id=2591): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x1}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 968.504705ms ago: executing program 1 (id=2592): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x16, 0x0, @val=@iter={0x0}}, 0x20) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r4 = socket(0x80000000000000a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) 886.615037ms ago: executing program 1 (id=2593): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0x9a}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x94) 886.161397ms ago: executing program 3 (id=2594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x106f) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 800.850349ms ago: executing program 0 (id=2595): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3, 0x242, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 799.641949ms ago: executing program 2 (id=2596): r0 = socket(0x2, 0x80802, 0x0) socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 677.187672ms ago: executing program 1 (id=2597): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) socket$kcm(0x10, 0x2, 0x0) write$vhost_msg_v2(r5, 0x0, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x9e) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0xf0ff) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 666.409203ms ago: executing program 2 (id=2598): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 538.779466ms ago: executing program 2 (id=2599): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000000d00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d0000000000000700000010000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44, 0x0, 0x0, 0x400000}, 0xfc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 495.051037ms ago: executing program 0 (id=2600): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES64, @ANYBLOB="6e3763ab052fe5524f2d17a4803855bb0378401fd40115ae2257272f64664b544767a9aef49db191fa9bdd6538f7", @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32], 0x1, 0xa08, &(0x7f00000032c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 485.600948ms ago: executing program 4 (id=2601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004864}, 0x40000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x653}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 255.039643ms ago: executing program 2 (id=2602): semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'sit0\x00', 0xfffffffffffffffe}) 245.551964ms ago: executing program 4 (id=2603): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0)) 99.061048ms ago: executing program 0 (id=2604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8) mmap(&(0x7f00007a9000/0x2000)=nil, 0x2000, 0xb635773f04ebbee7, 0x10, r1, 0x2000) socket$kcm(0x2c, 0x3, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000240)={0xc53, 0xfffffff9}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000280), 0x40080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="d80000006ab68e6814246ebae334688dc250c0860e154cfd3a41227b772a4a2b0ed003a0a1c4ac0b616914a0bfd721de1044420acb5fdb34d4f26be2a47fe92505dc1454", @ANYBLOB="000325bd7000fedbdf2506000000000099006e000000480000001c00e700ed54a960c498d9560ca0c19917fb526b98648b494906e0211c00e700c643716793add6b6334047cf901ce7b60a8b148e608da7422800178005005300000000"], 0xd8}, 0x1, 0x0, 0x0, 0x44095}, 0x4000184) socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e0000000000008100000008004538001c00660000750290780a010102e0e8ff001500907864010102"], 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x865}, 0x2404c880) sendmmsg$alg(r5, &(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@iv={0x18}], 0x18, 0x60040040}], 0x1, 0x40000) ioperm(0x9, 0x6, 0xa416) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000002c0)={0x2, 0x2, 0x7, 0x3, 0x3}) 98.962188ms ago: executing program 2 (id=2605): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000dc0)={'veth0_to_hsr\x00', &(0x7f0000000cc0)=@ethtool_rxnfc={0x2d, 0xa, 0x5, {0x9, @sctp_ip6_spec={@loopback, @loopback, 0x4e21, 0x4e20, 0x2}, {0x0, @multicast, 0x8, 0x172e, [0xd9, 0x800]}, @ah_ip4_spec={@broadcast, @private=0xa010101, 0x503, 0x6}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x5, 0x5d7, [0x80000000, 0x7]}, 0x81, 0xc036}}}) 30.508699ms ago: executing program 4 (id=2606): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x7fff, 0x2, 0x3) 0s ago: executing program 2 (id=2607): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0x80000000000d, {0x7, 0x2b, 0x0, 0x800, 0x0, 0x6, 0xe9f, 0xfffffffc, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000020000, {0x7, 0x2b, 0x2000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000019380)="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", 0x2000, &(0x7f000001fec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001d600)={0x90, 0x0, 0x5, {0x3, 0x5, 0xfffd, 0x2, 0x7fffffff, 0x3, {0x2, 0x800, 0x100000008, 0x4, 0x5, 0x1, 0xff, 0x4, 0x0, 0x6000, 0x5, 0x0, 0x0, 0x3117, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030005ab087a0100000002481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d479", 0xf5) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004005) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x4c810) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="00220500000027d2903a4e5ecd702e695ef71f74296f68aedec78cf4ea6469f3ca749829d445cdfea4f9609724216a0aac67b5f7391de06e5edaa46d77a73126d9dfc6b4b180ef54f38d5b4fb5df4fc51c7d8c04b95d345c020000000de67d1f9af591440c2af3237def56ebda5696504c1c55759c585684f42fb37286f92841095a71"], 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0xef, 0x0, 0x0}) kernel console output (not intermixed with test programs): alNumber=0 [ 332.906776][ T7389] XFS (loop1): Ending clean mount [ 333.194780][ T5134] XFS (loop1): Unmounting Filesystem [ 333.685510][ T7410] usbtmc 3-1:16.0: simple usb_control_msg failed -32 [ 334.312079][ T7] usb 3-1: USB disconnect, device number 15 [ 334.414679][ T7419] block device autoloading is deprecated and will be removed. [ 334.625630][ T7423] loop4: detected capacity change from 0 to 16 [ 334.655793][ T7423] erofs: (device loop4): mounted with root inode @ nid 36. [ 334.718250][ T7423] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 334.765062][ T7423] attempt to access beyond end of device [ 334.765062][ T7423] loop4: rw=524288, want=34359738368, limit=16 [ 334.829825][ T7423] attempt to access beyond end of device [ 334.829825][ T7423] loop4: rw=0, want=34359738368, limit=16 [ 337.045586][ T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 339.475357][ T7] usb 3-1: device not accepting address 16, error -71 [ 339.901226][ T7480] binder: Binderfs stats mode cannot be changed during a remount [ 341.350102][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 341.468639][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'. [ 341.863808][ T7484] device syz_tun entered promiscuous mode [ 341.974705][ T7484] device macvtap1 entered promiscuous mode [ 342.162100][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 342.354930][ T7487] device syz_tun left promiscuous mode [ 342.976425][ T7] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 344.326272][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 345.196767][ T7] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 345.203197][ T7517] loop1: detected capacity change from 0 to 2048 [ 345.270985][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.376243][ T7] usb 5-1: Product: syz [ 345.438086][ T7] usb 5-1: Manufacturer: syz [ 345.481573][ T7] usb 5-1: SerialNumber: syz [ 345.510201][ T7] usb 5-1: config 0 descriptor?? [ 345.533138][ T7517] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 345.555596][ T7] usb 5-1: can't set config #0, error -71 [ 345.574090][ T7] usb 5-1: USB disconnect, device number 16 [ 345.970771][ T7567] loop4: detected capacity change from 0 to 40427 [ 346.168631][ T7567] F2FS-fs (loop4): invalid crc value [ 346.271106][ T7567] F2FS-fs (loop4): Found nat_bits in checkpoint [ 346.704523][ T7567] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 347.313075][ T7588] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 349.663985][ T7594] loop2: detected capacity change from 0 to 512 [ 349.784889][ T7594] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 349.840969][ T7594] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.962517][ T6960] attempt to access beyond end of device [ 349.962517][ T6960] loop4: rw=2049, want=45104, limit=40427 [ 353.426674][ T7623] loop4: detected capacity change from 0 to 131072 [ 354.259928][ T7628] overlayfs: failed to clone upperpath [ 354.648004][ T7623] F2FS-fs (loop4): Found nat_bits in checkpoint [ 354.709652][ T7623] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 355.145674][ T7635] loop1: detected capacity change from 0 to 32768 [ 355.663255][ T7635] XFS (loop1): Mounting V5 Filesystem [ 355.790360][ T7635] XFS (loop1): Ending clean mount [ 355.822137][ T7635] XFS (loop1): Quotacheck needed: Please wait. [ 355.876276][ T7635] XFS (loop1): Quotacheck: Done. [ 356.471809][ T26] audit: type=1800 audit(1777441683.837:40): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.899" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 356.989519][ T5134] XFS (loop1): Unmounting Filesystem [ 357.158776][ T4184] Bluetooth: hci1: Received unexpected HCI Event 00000000 [ 362.240133][ T7697] ubi16: attaching mtd0 [ 363.079144][ T7697] ubi16 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 363.175743][ T7709] loop1: detected capacity change from 0 to 16 [ 363.217035][ T7706] device batadv_slave_0 entered promiscuous mode [ 363.242617][ T7704] device batadv_slave_0 left promiscuous mode [ 363.307298][ T7709] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 365.738335][ T7703] loop4: detected capacity change from 0 to 32768 [ 365.813376][ T7741] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 366.045570][ T7703] XFS (loop4): Mounting V5 Filesystem [ 366.208854][ T7703] XFS (loop4): log mount failed [ 366.819286][ T7764] loop2: detected capacity change from 0 to 256 [ 366.927972][ T7764] FAT-fs (loop2): Directory bread(block 64) failed [ 366.957558][ T7764] FAT-fs (loop2): Directory bread(block 65) failed [ 366.966458][ T7766] netlink: 'syz.3.937': attribute type 12 has an invalid length. [ 366.997482][ T7764] FAT-fs (loop2): Directory bread(block 66) failed [ 367.036759][ T7764] FAT-fs (loop2): Directory bread(block 67) failed [ 367.082566][ T7764] FAT-fs (loop2): Directory bread(block 68) failed [ 367.145423][ T7764] FAT-fs (loop2): Directory bread(block 69) failed [ 367.160778][ T7764] FAT-fs (loop2): Directory bread(block 70) failed [ 367.195483][ T7764] FAT-fs (loop2): Directory bread(block 71) failed [ 367.224381][ T7764] FAT-fs (loop2): Directory bread(block 72) failed [ 367.250996][ T7764] FAT-fs (loop2): Directory bread(block 73) failed [ 369.920563][ T7790] loop2: detected capacity change from 0 to 1024 [ 370.301965][ T7790] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 370.333837][ T7790] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 370.350798][ T7790] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 370.360998][ T7790] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 370.360998][ T7790] [ 370.372583][ T7790] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 370.382588][ T7790] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 370.391609][ T7804] netlink: 'syz.4.949': attribute type 12 has an invalid length. [ 371.831183][ T5102] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 372.765722][ T7823] loop2: detected capacity change from 0 to 764 [ 372.855371][ T5102] usb 5-1: Using ep0 maxpacket: 16 [ 372.979079][ T7823] Symlink component flag not implemented [ 372.987146][ T5102] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.000472][ T7823] Symlink component flag not implemented [ 373.015588][ T5102] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.027406][ T7823] Symlink component flag not implemented (128) [ 373.033974][ T5102] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 373.053825][ T7823] Symlink component flag not implemented (105) [ 373.060670][ T5102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.085565][ T5102] usbhid 5-1:128.0: can't add hid device: -71 [ 374.092613][ T5102] usbhid: probe of 5-1:128.0 failed with error -71 [ 374.370391][ T5102] usb 5-1: USB disconnect, device number 17 [ 378.770320][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.907914][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'. [ 378.951220][ T7886] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.961208][ T7886] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.970123][ T7886] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.979157][ T7886] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.538189][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'. [ 381.875568][ T7903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.992367][ T7903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.551922][ T7912] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 383.065378][ T5102] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 384.397846][ T5102] usb 2-1: Using ep0 maxpacket: 16 [ 384.555717][ T5102] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 386.067814][ T5102] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 386.076183][ T5102] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 386.084408][ T5102] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 386.096778][ T5102] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 386.105972][ T5102] usb 2-1: config 0 has no interface number 0 [ 386.112099][ T5102] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 386.123582][ T5102] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 386.134188][ T5102] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 386.144289][ T5102] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.159473][ T5102] usb 2-1: config 0 interface 125 has no altsetting 0 [ 386.166417][ T5102] usb 2-1: config 0 interface 125 has no altsetting 2 [ 386.283341][ T5102] usb 2-1: string descriptor 0 read error: -71 [ 386.311405][ T5102] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 386.328346][ T5102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.349843][ T5102] usb 2-1: config 0 descriptor?? [ 387.365823][ T5102] usb 2-1: can't set config #0, error -71 [ 387.410022][ T5102] usb 2-1: USB disconnect, device number 12 [ 388.063953][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 388.305458][ T4231] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 388.585325][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 388.725699][ T4231] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 388.765273][ T4231] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 388.774071][ T4231] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 388.805264][ T4231] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 388.813542][ T4231] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 388.843501][ T4231] usb 2-1: config 0 has no interface number 0 [ 388.851443][ T4231] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 388.895308][ T4231] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 388.931933][ T4231] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.052411][ T4231] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.125296][ T4231] usb 2-1: config 0 interface 125 has no altsetting 0 [ 389.161865][ T4231] usb 2-1: config 0 interface 125 has no altsetting 2 [ 389.385571][ T4231] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 389.415355][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.455266][ T4231] usb 2-1: Product: syz [ 389.487802][ T4231] usb 2-1: Manufacturer: syz [ 389.510680][ T4231] usb 2-1: SerialNumber: syz [ 389.537540][ T4231] usb 2-1: config 0 descriptor?? [ 389.620467][ T4231] usb 2-1: selecting invalid altsetting 2 [ 390.032892][ T8029] x_tables: duplicate underflow at hook 3 [ 390.047848][ T8029] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 391.118136][ T4231] get_1284_register timeout [ 391.186338][ T4278] usb 2-1: USB disconnect, device number 13 [ 391.327691][ T8048] loop2: detected capacity change from 0 to 32768 [ 391.334464][ C0] usb 2-1: async_complete: urb error -104 [ 391.340237][ C0] usb 2-1: async_complete: urb error -104 [ 391.346268][ C0] usb 2-1: async_complete: urb error -104 [ 391.513995][ T8053] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 391.631635][ T8048] XFS (loop2): Mounting V5 Filesystem [ 391.890161][ T8048] XFS (loop2): Ending clean mount [ 391.902643][ T8048] XFS (loop2): Quotacheck needed: Please wait. [ 391.941674][ T8070] netlink: 'syz.1.1040': attribute type 1 has an invalid length. [ 392.041636][ T8048] XFS (loop2): Quotacheck: Done. [ 392.125046][ T8070] device bond1 entered promiscuous mode [ 392.131890][ T8070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.158969][ T8070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1040'. [ 392.327787][ T8070] device bond1 left promiscuous mode [ 392.327824][ T6895] XFS (loop2): Unmounting Filesystem [ 392.409018][ T8075] bond1: (slave bridge1): making interface the new active one [ 392.427838][ T8075] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 393.080130][ T8092] xt_TPROXY: Can be used only with -p tcp or -p udp [ 394.050880][ T4231] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 394.335514][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 394.590729][ T4231] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 394.602162][ T4231] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 394.611092][ T4231] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 394.619791][ T4231] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 394.629239][ T4231] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 394.639150][ T4231] usb 3-1: config 0 has no interface number 0 [ 394.653150][ T4231] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 394.672335][ T4231] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 394.682701][ T4231] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 394.693164][ T4231] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.721298][ T4231] usb 3-1: config 0 interface 125 has no altsetting 0 [ 394.735597][ T4231] usb 3-1: config 0 interface 125 has no altsetting 2 [ 394.892845][ T8129] tipc: Enabling of bearer rejected, failed to enable media [ 394.998976][ T4231] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 395.035260][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.043444][ T4231] usb 3-1: Product: syz [ 395.095193][ T4231] usb 3-1: Manufacturer: syz [ 395.119881][ T4231] usb 3-1: SerialNumber: syz [ 395.152193][ T4231] usb 3-1: config 0 descriptor?? [ 395.207413][ T4231] usb 3-1: selecting invalid altsetting 2 [ 396.235350][ T4231] get_1284_register timeout [ 396.265306][ C0] usb 3-1: async_complete: urb error -104 [ 396.271359][ C0] usb 3-1: async_complete: urb error -104 [ 396.277157][ C0] usb 3-1: async_complete: urb error -104 [ 396.490947][ T4278] usb 3-1: USB disconnect, device number 18 [ 397.872448][ T8204] loop4: detected capacity change from 0 to 32768 [ 397.913027][ T8211] device syzkaller0 entered promiscuous mode [ 398.476658][ T8204] XFS (loop4): Mounting V5 Filesystem [ 398.846771][ T8204] XFS (loop4): Ending clean mount [ 398.855870][ T8204] XFS (loop4): Quotacheck needed: Please wait. [ 398.960549][ T8204] XFS (loop4): Quotacheck: Done. [ 399.255106][ T6960] XFS (loop4): Unmounting Filesystem [ 403.825502][ T8283] loop1: detected capacity change from 0 to 131072 [ 403.907131][ T8283] F2FS-fs (loop1): Found nat_bits in checkpoint [ 403.962829][ T8283] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 407.808801][ T8324] loop1: detected capacity change from 0 to 32768 [ 407.864812][ T8329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1122'. [ 407.909080][ T8329] device ip6gre1 entered promiscuous mode [ 407.952025][ T8324] XFS (loop1): Mounting V5 Filesystem [ 407.985670][ T8345] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1124'. [ 408.072067][ T8345] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1124'. [ 408.094842][ T8324] XFS (loop1): Ending clean mount [ 408.132688][ T8324] XFS (loop1): Quotacheck needed: Please wait. [ 408.267566][ T8324] XFS (loop1): Quotacheck: Done. [ 408.334371][ T5134] XFS (loop1): Unmounting Filesystem [ 409.985373][ T4278] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 410.225367][ T4278] usb 2-1: Using ep0 maxpacket: 16 [ 410.345475][ T4278] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 410.367539][ T4278] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 410.403432][ T4278] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 410.422359][ T4278] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 410.456451][ T4278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 410.476318][ T4278] usb 2-1: config 0 has no interface number 0 [ 410.482696][ T4278] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 410.521988][ T4278] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 410.554565][ T4278] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 410.580595][ T4278] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.622442][ T4278] usb 2-1: config 0 interface 125 has no altsetting 0 [ 410.636126][ T4278] usb 2-1: config 0 interface 125 has no altsetting 2 [ 411.725474][ T4278] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 411.734586][ T4278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.743969][ T4278] usb 2-1: Product: syz [ 411.748801][ T4278] usb 2-1: Manufacturer: syz [ 411.754159][ T4278] usb 2-1: SerialNumber: syz [ 411.767686][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 411.775088][ T4278] usb 2-1: config 0 descriptor?? [ 411.822995][ T4278] usb 2-1: selecting invalid altsetting 2 [ 412.075999][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 412.875466][ T4278] get_1284_register timeout [ 412.895270][ C1] usb 2-1: async_complete: urb error -104 [ 412.901274][ C1] usb 2-1: async_complete: urb error -104 [ 412.907191][ C1] usb 2-1: async_complete: urb error -104 [ 413.524520][ T21] usb 2-1: USB disconnect, device number 14 [ 414.258420][ T8443] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1153'. [ 414.462841][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 414.564430][ T8446] device syzkaller1 entered promiscuous mode [ 415.401829][ T8476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.413256][ T8474] loop2: detected capacity change from 0 to 22 [ 415.440485][ T8474] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 415.484286][ T8476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.499648][ T8474] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 416.597842][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 416.974187][ T8492] fuse: Bad value for 'fd' [ 417.013392][ T8492] netlink: 'syz.1.1170': attribute type 12 has an invalid length. [ 417.325349][ T5102] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 417.605558][ T5102] usb 2-1: Using ep0 maxpacket: 16 [ 417.606328][ T8498] loop4: detected capacity change from 0 to 32768 [ 417.725472][ T5102] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.744776][ T8498] XFS (loop4): Mounting V5 Filesystem [ 417.754844][ T5102] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.836424][ T5102] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 417.901515][ T5102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.956516][ T8498] XFS (loop4): Ending clean mount [ 417.968275][ T8498] XFS (loop4): Quotacheck needed: Please wait. [ 418.031887][ T8498] XFS (loop4): Quotacheck: Done. [ 418.062608][ T6960] XFS (loop4): Unmounting Filesystem [ 418.232042][ T8510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.410381][ T8516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.448843][ T5102] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 419.171005][ T5102] usb 2-1: USB disconnect, device number 15 [ 422.881146][ T8557] loop1: detected capacity change from 0 to 128 [ 422.953649][ T8557] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 423.040345][ T8557] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 423.096900][ T8562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.187295][ T8562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.520515][ T8571] fuse: Bad value for 'fd' [ 424.610949][ T8571] netlink: 'syz.1.1193': attribute type 12 has an invalid length. [ 425.418458][ T26] audit: type=1800 audit(1777441753.127:41): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1195" name="/" dev="fuse" ino=4 res=0 errno=0 [ 425.917062][ T8604] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 426.736657][ T8608] bond1: (slave macvlan1): making interface the new active one [ 426.976807][ T8608] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 427.008760][ T8604] bond1 (unregistering): (slave macvlan1): Releasing active interface [ 427.079830][ T8617] overlayfs: unrecognized mount option "verity=on" or missing value [ 427.110514][ T8604] bond1 (unregistering): Released all slaves [ 427.575378][ T8624] netlink: 'syz.1.1211': attribute type 12 has an invalid length. [ 427.599878][ T8629] overlayfs: failed to clone upperpath [ 427.670528][ T8629] overlayfs: failed to clone upperpath [ 427.830629][ T8635] loop4: detected capacity change from 0 to 1764 [ 428.881615][ T8647] overlayfs: failed to clone upperpath [ 429.975807][ T8673] overlayfs: unrecognized mount option "verity=on" or missing value [ 430.118634][ T8675] netlink: 'syz.0.1229': attribute type 12 has an invalid length. [ 431.153063][ T8680] tipc: Started in network mode [ 431.206522][ T8680] tipc: Node identity 0a76b95d135, cluster identity 4711 [ 431.218680][ T8680] tipc: Enabled bearer , priority 0 [ 431.362336][ T8695] device ip6gre1 entered promiscuous mode [ 431.374025][ T8695] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 431.460398][ T8689] tipc: Resetting bearer [ 432.746040][ T8679] tipc: Disabling bearer [ 432.894695][ T21] tipc: Node number set to 421968221 [ 432.903770][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.912034][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.928966][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.995418][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.966030][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.023391][ T8725] netlink: 'syz.4.1244': attribute type 12 has an invalid length. [ 434.142780][ T8730] sctp: [Deprecated]: syz.0.1247 (pid 8730) Use of int in max_burst socket option. [ 434.142780][ T8730] Use struct sctp_assoc_value instead [ 434.414507][ T21] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 434.959243][ T4227] kworker/dying (4227) used greatest stack depth: 15992 bytes left [ 435.385309][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 435.418036][ T8751] overlayfs: failed to clone upperpath [ 435.647435][ T21] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.662449][ T21] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.662878][ T26] audit: type=1326 audit(1777441763.367:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.0.1258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd802148dd9 code=0x0 [ 435.672649][ T21] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 435.672679][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.358872][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.370801][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.955361][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.129375][ T8774] xt_hashlimit: max too large, truncated to 1048576 [ 438.705483][ T21] usbhid 5-1:128.0: can't add hid device: -71 [ 438.793804][ T21] usbhid: probe of 5-1:128.0 failed with error -71 [ 438.981016][ T8791] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 439.107703][ T21] usb 5-1: USB disconnect, device number 18 [ 440.168380][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.196858][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 440.227970][ T8812] netlink: 'syz.4.1275': attribute type 12 has an invalid length. [ 440.424454][ T8821] overlayfs: failed to clone upperpath [ 441.124040][ T21] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 441.975464][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 442.095550][ T21] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.135442][ T21] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.175290][ T21] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 442.204411][ T8850] overlayfs: failed to clone upperpath [ 442.215347][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.778282][ T21] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 443.875133][ T21] usb 5-1: USB disconnect, device number 19 [ 444.264461][ T8890] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 444.326107][ T8890] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 444.580972][ T8904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.676466][ T8906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.355951][ T8917] loop4: detected capacity change from 0 to 512 [ 445.835371][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.558390][ T8932] netlink: 'syz.1.1318': attribute type 12 has an invalid length. [ 447.425753][ T8945] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 447.557031][ T8949] tipc: Enabling of bearer rejected, failed to enable media [ 447.572315][ T8952] overlayfs: failed to clone upperpath [ 447.589232][ T8950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.669898][ T8950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.825472][ T8959] overlayfs: failed to clone upperpath [ 449.090233][ T8982] netlink: 'syz.2.1333': attribute type 12 has an invalid length. [ 449.242625][ T8984] syz.4.1334 sent an empty control message without MSG_MORE. [ 449.385417][ T21] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 449.634838][ T8989] overlayfs: failed to clone upperpath [ 449.748637][ T8990] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 449.777885][ T8992] tipc: Enabling of bearer rejected, failed to enable media [ 449.795651][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 449.915614][ T21] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.941941][ T21] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.999641][ T21] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 450.060984][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.173542][ T9004] fuse: Bad value for 'fd' [ 451.291041][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1342'. [ 451.459355][ T21] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 451.662967][ T7] usb 3-1: USB disconnect, device number 19 [ 452.839579][ T9028] tipc: Enabling of bearer rejected, failed to enable media [ 453.914025][ T9039] fuse: Invalid rootmode [ 454.028151][ T9044] overlayfs: unrecognized mount option "verity=on" or missing value [ 454.075657][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.166202][ T7544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.313299][ T9053] netlink: 'syz.2.1359': attribute type 12 has an invalid length. [ 454.462359][ T9059] tipc: Enabling of bearer rejected, failed to enable media [ 454.531614][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.557878][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.567533][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.815603][ T7] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 454.815655][ T4231] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 455.085460][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 455.185541][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 455.235812][ T4231] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 455.287992][ T4231] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 455.345811][ T7] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.504801][ T4231] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 455.513736][ T7] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.544416][ T4231] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 455.563302][ T7] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 455.585765][ T4231] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 455.625749][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.648958][ T4231] usb 5-1: config 0 has no interface number 0 [ 455.685650][ T4231] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 455.864316][ T4231] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 455.877806][ T4231] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 455.880022][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 455.889530][ T4231] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.910934][ T4231] usb 5-1: config 0 interface 125 has no altsetting 0 [ 455.917967][ T4231] usb 5-1: config 0 interface 125 has no altsetting 2 [ 455.955531][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.062013][ T9084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.075836][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.105662][ T9084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.115751][ T4231] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 456.130625][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.140364][ T9084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.156655][ T4231] usb 5-1: Product: syz [ 456.169889][ T4231] usb 5-1: Manufacturer: syz [ 456.184667][ T4231] usb 5-1: SerialNumber: syz [ 456.214840][ T4231] usb 5-1: config 0 descriptor?? [ 456.285117][ T7] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 456.299525][ T4231] usb 5-1: selecting invalid altsetting 2 [ 456.500094][ T7] usb 3-1: USB disconnect, device number 20 [ 457.285424][ C0] usb 5-1: async_complete: urb error -71 [ 457.291267][ C0] usb 5-1: async_complete: urb error -71 [ 457.296993][ C0] usb 5-1: async_complete: urb error -71 [ 457.304833][ T4231] get_1284_register: usb error -71 [ 457.316899][ T4231] usb 5-1: USB disconnect, device number 20 [ 458.171383][ T9110] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1376'. [ 458.202038][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'. [ 458.705345][ T26] audit: type=1326 audit(1777441786.397:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9117 comm="syz.2.1380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f253fd4bdd9 code=0x0 [ 459.198939][ T4262] net_ratelimit: 13 callbacks suppressed [ 459.198958][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.237710][ T9131] netlink: 'syz.2.1381': attribute type 12 has an invalid length. [ 459.675403][ T4262] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 459.915306][ T4262] usb 3-1: Using ep0 maxpacket: 16 [ 460.035478][ T4262] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.056512][ T4262] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.100557][ T4262] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 460.147155][ T9145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.148890][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.156345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.191255][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.245473][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.678722][ T4262] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 461.612593][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.692712][ T4262] usb 3-1: USB disconnect, device number 21 [ 461.698043][ T9159] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1388'. [ 461.964344][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 462.637733][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.115398][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.195876][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.049635][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.280271][ T9194] overlayfs: failed to set xattr on upper [ 464.310361][ T9194] overlayfs: ...falling back to index=off,metacopy=off. [ 464.350614][ T9194] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 464.433655][ T9203] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1403'. [ 464.461050][ T9202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.470178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.502777][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 464.664937][ T9206] loop2: detected capacity change from 0 to 128 [ 464.874440][ T26] audit: type=1804 audit(1777441792.577:44): pid=9206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1404" name="/newroot/105/file1/file2" dev="loop2" ino=1048618 res=1 errno=0 [ 464.910486][ T9206] FAT-fs (loop2): error, clusters badly computed (4 != 3) [ 464.925231][ T9206] FAT-fs (loop2): Filesystem has been set read-only [ 464.956681][ T9206] FAT-fs (loop2): error, clusters badly computed (5 != 4) [ 464.969575][ T9206] FAT-fs (loop2): error, clusters badly computed (6 != 5) [ 465.116174][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.592544][ T9221] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 466.301192][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.312870][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.336256][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.384204][ T9226] netlink: 'syz.1.1412': attribute type 12 has an invalid length. [ 466.495320][ T9228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.474471][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.561604][ T9234] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1415'. [ 467.590007][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 469.016193][ T9254] loop4: detected capacity change from 0 to 256 [ 469.055353][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.255406][ T9260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.355567][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.777706][ T9269] netlink: 'syz.4.1425': attribute type 12 has an invalid length. [ 470.075755][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.205244][ T9276] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1427'. [ 470.215301][ T21] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 470.245065][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 470.485425][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 471.305570][ T21] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.347397][ T21] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.415840][ T21] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 471.452769][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.487890][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.515265][ T21] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 472.655625][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.669641][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.686236][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.782801][ T21] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 474.725397][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.795604][ T9312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.438317][ T4230] usb 5-1: USB disconnect, device number 21 [ 475.719920][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.755819][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.915671][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.777582][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.861531][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.835994][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.100949][ T9367] loop2: detected capacity change from 0 to 131072 [ 481.192207][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.411798][ T9367] F2FS-fs (loop2): Found nat_bits in checkpoint [ 481.459141][ T9367] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 482.389150][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.408006][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.674413][ T9389] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1459'. [ 483.480782][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.561198][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.629720][ T9403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.638647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.497364][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.556484][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.575832][ T7549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.175707][ T4226] net_ratelimit: 3 callbacks suppressed [ 487.175726][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.315067][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.373786][ T9440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1475'. [ 488.434346][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 488.478204][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 488.668776][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.870155][ T9462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.879283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.434348][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.427587][ T9478] loop2: detected capacity change from 0 to 32768 [ 490.504555][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.706345][ T9478] XFS (loop2): Mounting V5 Filesystem [ 491.448749][ T4736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.086824][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.094982][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.274940][ T9478] XFS (loop2): Ending clean mount [ 492.283452][ T9478] XFS (loop2): Quotacheck needed: Please wait. [ 492.414888][ T9478] XFS (loop2): Quotacheck: Done. [ 492.449808][ T4230] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 492.519947][ T6895] XFS (loop2): Unmounting Filesystem [ 492.620432][ T9503] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1491'. [ 492.663929][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'. [ 493.105650][ T4230] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 493.135102][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.203765][ T4230] usb 5-1: Product: syz [ 493.237278][ T4230] usb 5-1: Manufacturer: syz [ 493.453906][ T4230] usb 5-1: SerialNumber: syz [ 493.496917][ T4226] net_ratelimit: 2 callbacks suppressed [ 493.496933][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.687000][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 494.605919][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.275367][ T4230] usb 5-1: can't set config #1, error -71 [ 495.277067][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.294193][ T4230] usb 5-1: USB disconnect, device number 22 [ 495.437215][ T9539] overlayfs: failed to get inode (-116) [ 495.476076][ T9539] overlayfs: failed to get inode (-116) [ 495.574820][ T9545] netlink: 'syz.3.1504': attribute type 12 has an invalid length. [ 495.724108][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.787246][ T9542] loop4: detected capacity change from 0 to 32768 [ 497.075954][ T9542] XFS (loop4): Mounting V5 Filesystem [ 497.169679][ T9542] XFS (loop4): Ending clean mount [ 497.182721][ T9542] XFS (loop4): Quotacheck needed: Please wait. [ 497.297085][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.348206][ T9542] XFS (loop4): Quotacheck: Done. [ 497.436301][ T6960] XFS (loop4): Unmounting Filesystem [ 497.675678][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.688554][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.697533][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.315676][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.325712][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.582083][ T9581] input: syz1 as /devices/virtual/input/input13 [ 498.894985][ T9584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.904665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.955334][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.887497][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.359509][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.596106][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.927472][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.807947][ T7534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.816671][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.825592][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.956235][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.174289][ T9624] input: syz1 as /devices/virtual/input/input14 [ 504.396029][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.628367][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.019894][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.837161][ T9650] netlink: 'syz.1.1530': attribute type 12 has an invalid length. [ 507.435573][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.513378][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.925854][ T9665] loop4: detected capacity change from 0 to 32768 [ 509.054579][ T7559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.062770][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.072051][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.093340][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.280416][ T9665] XFS (loop4): Mounting V5 Filesystem [ 510.091988][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.291782][ T9665] XFS (loop4): Ending clean mount [ 510.330613][ T9665] XFS (loop4): Quotacheck needed: Please wait. [ 510.479351][ T9665] XFS (loop4): Quotacheck: Done. [ 510.610530][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.713382][ T6960] XFS (loop4): Unmounting Filesystem [ 511.329047][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.899163][ T9707] netlink: 'syz.1.1546': attribute type 12 has an invalid length. [ 511.955286][ T4231] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 512.205299][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 512.325488][ T4231] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 512.339986][ T4231] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 512.364066][ T4231] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 512.381505][ T4231] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 512.403323][ T4231] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 512.453860][ T4231] usb 5-1: config 0 has no interface number 0 [ 512.470442][ T4231] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 512.662280][ T4231] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 512.672961][ T4231] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 512.683734][ T4231] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 512.697145][ T4231] usb 5-1: config 0 interface 125 has no altsetting 0 [ 512.703966][ T4231] usb 5-1: config 0 interface 125 has no altsetting 2 [ 512.728277][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.925994][ T4231] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 512.978026][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.076160][ T4231] usb 5-1: Product: syz [ 513.133090][ T4231] usb 5-1: Manufacturer: syz [ 513.191179][ T4231] usb 5-1: SerialNumber: syz [ 513.421947][ T4231] usb 5-1: config 0 descriptor?? [ 513.676029][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.697077][ T4231] usb 5-1: selecting invalid altsetting 2 [ 513.766268][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.855278][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.960580][ T7559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.965277][ T4231] get_1284_register timeout [ 514.984143][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.994453][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.035272][ C0] usb 5-1: async_complete: urb error -104 [ 515.041458][ C0] usb 5-1: async_complete: urb error -104 [ 515.047561][ C0] usb 5-1: async_complete: urb error -104 [ 516.085277][ T1110] usb 5-1: USB disconnect, device number 23 [ 516.257915][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.310839][ T9737] netlink: 'syz.1.1558': attribute type 12 has an invalid length. [ 517.350271][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.475908][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.605769][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.616492][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.235341][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.265300][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.715701][ T4736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.946206][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.965590][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.726173][ T9790] netlink: 'syz.1.1572': attribute type 12 has an invalid length. [ 522.025375][ T4226] net_ratelimit: 1 callbacks suppressed [ 522.025396][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.325378][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.044074][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.941529][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.006206][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.246670][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.287976][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.040181][ T9830] netlink: 'syz.4.1583': attribute type 12 has an invalid length. [ 528.325595][ T4835] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 528.345591][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.605236][ T4835] usb 5-1: Using ep0 maxpacket: 16 [ 528.752864][ T4835] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.801956][ T4835] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.945269][ T4835] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 528.957639][ T4835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.384398][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.809554][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.837220][ T4835] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 530.397312][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.837332][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.856713][ T5102] usb 5-1: USB disconnect, device number 24 [ 532.100580][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.124157][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.133232][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.505320][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.045255][ T4835] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 535.594226][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.636040][ T9896] netlink: 'syz.3.1602': attribute type 12 has an invalid length. [ 536.105518][ T4835] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 536.133799][ T4835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.165051][ T4835] usb 5-1: Product: syz [ 536.182005][ T4835] usb 5-1: Manufacturer: syz [ 536.189281][ T4835] usb 5-1: SerialNumber: syz [ 536.209416][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.389723][ T4835] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 537.281307][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.315739][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.565433][ T4835] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 538.618685][ T4835] usb 5-1: ath9k_htc: USB layer deinitialized [ 539.040727][ T9917] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 539.356300][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.454788][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.633421][ T4835] usb 5-1: USB disconnect, device number 25 [ 539.919169][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.904278][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.109659][ T9935] netlink: 'syz.2.1613': attribute type 12 has an invalid length. [ 542.955780][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.062181][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.215370][ T5102] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 544.193364][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.485624][ T5102] usb 3-1: Using ep0 maxpacket: 16 [ 544.725430][ T5102] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.750109][ T5102] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.802108][ T5102] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 544.850981][ T5102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.965911][ T5102] usb 3-1: can't set config #128, error -71 [ 544.991938][ T5102] usb 3-1: USB disconnect, device number 22 [ 545.195544][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.602701][ T9967] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 546.606917][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.641544][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.683760][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.055276][ T4278] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 548.301334][ T4278] usb 5-1: Using ep0 maxpacket: 16 [ 548.435510][ T4278] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 548.457627][ T4278] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 548.516679][ T4278] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 548.548639][ T4278] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 548.589539][ T4278] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 548.628655][ T4278] usb 5-1: config 0 has no interface number 0 [ 548.670724][ T4278] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 548.725645][ T4278] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 548.741872][ T4278] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 548.781291][ T4278] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.825411][ T4278] usb 5-1: config 0 interface 125 has no altsetting 0 [ 548.832255][ T4278] usb 5-1: config 0 interface 125 has no altsetting 2 [ 548.869757][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.031806][ T4278] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 549.055254][ T4278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.089489][ T4278] usb 5-1: Product: syz [ 549.096774][ T4278] usb 5-1: Manufacturer: syz [ 549.101413][ T4278] usb 5-1: SerialNumber: syz [ 549.152105][ T4278] usb 5-1: config 0 descriptor?? [ 549.207110][ T4278] usb 5-1: selecting invalid altsetting 2 [ 549.515668][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.675831][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.915894][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.045290][ C1] usb 5-1: async_complete: urb error -71 [ 550.051146][ C1] usb 5-1: async_complete: urb error -71 [ 550.056861][ C1] usb 5-1: async_complete: urb error -71 [ 550.062969][ T4278] get_1284_register: usb error -71 [ 550.075939][ T4278] usb 5-1: USB disconnect, device number 26 [ 550.822117][T10004] netlink: 'syz.4.1631': attribute type 12 has an invalid length. [ 550.956194][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.145318][ T4278] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 551.565827][ T4278] usb 5-1: Using ep0 maxpacket: 16 [ 552.234874][ T4278] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.202439][ T4278] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.305388][ T4278] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 553.315253][ T4278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.324728][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.334493][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.343624][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.766164][ T5102] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 553.817982][ T4278] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 554.315990][ T5102] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 554.333369][ T5102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.360519][ T5102] usb 3-1: Product: syz [ 554.380846][ T5102] usb 3-1: Manufacturer: syz [ 554.405368][ T5102] usb 3-1: SerialNumber: syz [ 554.428149][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.467041][ T5102] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 555.035332][ T21] usb 5-1: reset high-speed USB device number 27 using dummy_hcd [ 555.075436][ T5102] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 555.445839][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.966181][ T4226] usb 5-1: USB disconnect, device number 27 [ 556.155274][ T5102] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 556.175424][ T5102] ath9k_htc: Failed to initialize the device [ 556.204364][ T21] usb 3-1: USB disconnect, device number 23 [ 556.249494][ T21] usb 3-1: ath9k_htc: USB layer deinitialized [ 556.464736][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.476429][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.487299][T10074] netlink: 'syz.3.1650': attribute type 12 has an invalid length. [ 557.515779][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.845518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.137915][T10084] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1652'. [ 558.155615][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 558.555968][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.515725][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.596065][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.374799][T10115] input: syz1 as /devices/virtual/input/input15 [ 560.669425][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.756295][T10128] netlink: 'syz.2.1663': attribute type 12 has an invalid length. [ 561.375394][ T13] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 561.645290][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 561.675660][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.785540][ T13] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.814294][ T13] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.872691][ T13] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 561.935204][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.438647][ T13] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 562.575037][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.715591][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.957846][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.967975][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.606152][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.655286][ T4194] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 563.755615][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.709811][ T13] usb 3-1: USB disconnect, device number 24 [ 564.800117][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.588530][T10188] netlink: 'syz.1.1684': attribute type 12 has an invalid length. [ 565.595736][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.845491][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.796182][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.615885][T10207] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 568.842842][T10221] loop4: detected capacity change from 0 to 32768 [ 568.861505][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.886498][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.926611][T10223] netlink: 'syz.3.1696': attribute type 12 has an invalid length. [ 569.013841][T10230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1697'. [ 569.032033][T10221] XFS (loop4): Mounting V5 Filesystem [ 569.131958][T10221] XFS (loop4): Ending clean mount [ 569.139269][T10221] XFS (loop4): Quotacheck needed: Please wait. [ 569.198297][T10221] XFS (loop4): Quotacheck: Done. [ 569.250475][ T6960] XFS (loop4): Unmounting Filesystem [ 569.926264][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.143305][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.039319][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.393366][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.633882][T10282] loop4: detected capacity change from 0 to 128 [ 572.737640][T10286] netlink: 'syz.2.1710': attribute type 12 has an invalid length. [ 573.024966][T10291] tipc: Started in network mode [ 573.107449][T10291] tipc: Node identity 724b7eee5c4e, cluster identity 4711 [ 573.168129][T10291] tipc: Enabled bearer , priority 0 [ 573.211811][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.258767][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.423319][T10291] tipc: Disabling bearer [ 573.471869][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.431046][T10306] input: syz1 as /devices/virtual/input/input16 [ 574.475873][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.115441][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.515746][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.155720][T10334] netlink: 'syz.0.1725': attribute type 12 has an invalid length. [ 576.734756][T10339] tipc: Enabling of bearer rejected, failed to enable media [ 576.741389][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.935638][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.346051][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.975666][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.150979][T10379] netlink: 'syz.0.1739': attribute type 12 has an invalid length. [ 580.148936][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.195864][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.276404][T10405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.297726][T10405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.315551][T10405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.355992][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.037170][T10418] loop4: detected capacity change from 0 to 22 [ 582.110782][T10418] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 582.275386][T10423] netlink: 'syz.0.1752': attribute type 12 has an invalid length. [ 582.309819][ T4226] net_ratelimit: 5 callbacks suppressed [ 582.309838][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.318828][T10418] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 582.356923][T10426] overlayfs: failed to clone upperpath [ 583.245694][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.605622][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.414506][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.636054][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.516170][T10468] netlink: 'syz.2.1765': attribute type 12 has an invalid length. [ 585.675781][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.811083][T10475] overlayfs: failed to clone upperpath [ 585.837528][T10475] 9pnet: Insufficient options for proto=fd [ 585.921113][T10476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.929627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.939021][T10476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.025284][ T13] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 586.038970][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.825405][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 586.957799][ T13] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.000087][ T13] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.215240][ T13] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 587.494484][T10484] loop4: detected capacity change from 0 to 131072 [ 587.658385][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.756495][ T4226] net_ratelimit: 4 callbacks suppressed [ 587.756516][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.770554][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.058634][T10484] F2FS-fs (loop4): Found nat_bits in checkpoint [ 588.107971][T10484] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 588.263533][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.585489][ T13] usbhid 3-1:128.0: can't add hid device: -71 [ 588.591793][ T13] usbhid: probe of 3-1:128.0 failed with error -71 [ 588.632912][ T13] usb 3-1: USB disconnect, device number 25 [ 588.795631][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.502835][T10527] overlayfs: failed to clone upperpath [ 590.053130][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.665683][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1786'. [ 590.871645][T10544] netlink: 'syz.0.1787': attribute type 12 has an invalid length. [ 591.093866][T10546] Illegal XDP return value 4292591616, expect packet loss! [ 591.115648][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.391837][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.155760][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.396622][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.522828][T10569] sctp: [Deprecated]: syz.0.1794 (pid 10569) Use of int in maxseg socket option. [ 592.522828][T10569] Use struct sctp_assoc_value instead [ 594.043657][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.284980][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.390406][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.698532][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1800'. [ 595.906996][T10595] netlink: 'syz.3.1801': attribute type 12 has an invalid length. [ 596.395744][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.435694][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.323881][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.457318][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1811'. [ 598.481463][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.515741][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.697106][T10640] netlink: 'syz.0.1814': attribute type 12 has an invalid length. [ 601.164958][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.207420][T10649] sctp: [Deprecated]: syz.0.1817 (pid 10649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.207420][T10649] Use struct sctp_sack_info instead [ 601.364394][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.996035][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.191100][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1822'. [ 602.235571][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.276574][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.380024][T10653] loop2: detected capacity change from 0 to 131072 [ 603.502236][T10653] F2FS-fs (loop2): Found nat_bits in checkpoint [ 603.670547][T10653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 603.902333][T10689] netlink: 'syz.1.1827': attribute type 12 has an invalid length. [ 604.316013][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.397430][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.563148][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.565598][T10714] input: syz1 as /devices/virtual/input/input17 [ 606.630105][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1835'. [ 606.645534][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.505772][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.675722][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.836298][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.845958][T10738] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 609.882914][T10743] loop4: detected capacity change from 0 to 22 [ 609.926725][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.992365][T10743] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 610.089758][T10743] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 610.555937][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.109237][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.500992][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.515200][ T4278] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 611.519830][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.553542][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.580048][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.596087][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.614741][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.645015][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.660002][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.688975][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.785267][ T4278] usb 5-1: Using ep0 maxpacket: 16 [ 611.915996][ T4278] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 611.935508][ T4278] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 611.954937][ T4278] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 611.981549][ T4278] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 612.010560][ T4278] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 612.025678][ T4278] usb 5-1: config 0 has no interface number 0 [ 612.038995][ T4278] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 612.078344][ T4278] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 612.104739][ T4278] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 612.128954][ T4278] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.159991][ T4278] usb 5-1: config 0 interface 125 has no altsetting 0 [ 612.173280][ T4278] usb 5-1: config 0 interface 125 has no altsetting 2 [ 613.245306][ T4278] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 613.254800][ T4278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.454192][ T4278] usb 5-1: Product: syz [ 613.465204][ T4278] usb 5-1: Manufacturer: syz [ 613.469959][ T4278] usb 5-1: SerialNumber: syz [ 613.485949][ T4278] usb 5-1: config 0 descriptor?? [ 613.540523][ T4278] usb 5-1: selecting invalid altsetting 2 [ 614.225261][ C1] usb 5-1: async_complete: urb error -71 [ 614.231011][ C1] usb 5-1: async_complete: urb error -71 [ 614.236705][ C1] usb 5-1: async_complete: urb error -71 [ 614.242516][ C1] usb 5-1: async_complete: urb error -71 [ 614.248774][ T4278] get_1284_register: usb error -71 [ 614.268546][ T4278] usb 5-1: USB disconnect, device number 28 [ 615.106073][T10801] loop4: detected capacity change from 0 to 128 [ 615.198662][T10801] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 615.272946][T10801] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 615.760776][T10815] loop4: detected capacity change from 0 to 512 [ 616.325878][ T21] net_ratelimit: 37 callbacks suppressed [ 616.325901][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.715833][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.011262][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1872'. [ 617.032651][T10833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1872'. [ 617.084594][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1872'. [ 617.140208][T10835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1872'. [ 617.365694][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.648396][T10842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 617.682156][T10842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.395967][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.445945][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.705024][T10857] input: syz1 as /devices/virtual/input/input18 [ 619.756038][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.475790][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.486516][ T7554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.499160][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.820807][T10871] loop2: detected capacity change from 0 to 512 [ 621.570640][ T13] net_ratelimit: 1 callbacks suppressed [ 621.570664][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.604170][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.589981][T10902] overlayfs: failed to clone upperpath [ 622.795839][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.466003][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.932686][ T21] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 624.476787][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.480113][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.491260][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.725479][ T21] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 624.744974][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.762841][ T21] usb 3-1: Product: syz [ 624.794950][ T21] usb 3-1: Manufacturer: syz [ 624.860473][ T21] usb 3-1: SerialNumber: syz [ 624.916462][ T21] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 625.625905][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.661351][ T13] usb 3-1: USB disconnect, device number 26 [ 625.675710][ T4278] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 625.686045][ T4736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.813703][ T13] usb 3-1: ath9k_htc: USB layer deinitialized [ 625.832547][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.843969][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.866491][T10959] loop4: detected capacity change from 0 to 22 [ 626.885415][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.896000][T10959] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 626.922923][T10959] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 627.525521][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.572136][T10969] overlayfs: failed to clone upperpath [ 627.915669][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.569135][T10983] overlayfs: failed to clone upperpath [ 628.593800][T10983] overlayfs: failed to clone upperpath [ 628.956401][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.336097][T10998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.355567][T10998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.363979][T10998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.399731][T10999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.475742][T10998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.492269][T10998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.610985][T11001] overlayfs: failed to clone upperpath [ 629.659536][T11001] overlayfs: failed to clone upperpath [ 629.971664][T11017] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 630.043698][T11017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 630.074464][T11022] device veth3 entered promiscuous mode [ 630.091296][T11022] bond2: (slave veth3): Enslaving as an active interface with a down link [ 630.191074][T11017] bond2: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 630.630035][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'. [ 630.750678][T11037] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1943'. [ 630.782542][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 632.266717][T11058] Cannot find add_set index 2 as target [ 632.395472][ T4230] net_ratelimit: 4 callbacks suppressed [ 632.395493][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.503782][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1953'. [ 633.435838][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.245967][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.475365][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.509762][T11089] overlayfs: failed to clone upperpath [ 634.636247][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.026740][T11102] overlayfs: failed to clone upperpath [ 635.288844][T11106] loop2: detected capacity change from 0 to 256 [ 635.425979][T11106] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 635.515484][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.568528][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.653437][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.694718][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.747366][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.010314][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.092937][T11170] loop4: detected capacity change from 0 to 16 [ 640.128903][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.147193][T11170] erofs: (device loop4): mounted with root inode @ nid 36. [ 640.271844][T11170] ./file1: Can't open blockdev [ 641.452665][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.756555][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.077973][T11215] loop4: detected capacity change from 0 to 164 [ 643.499193][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.047635][T11215] Unsupported NM flag settings (240) [ 644.054946][T11215] Unsupported NM flag settings (240) [ 644.272053][ T6960] Unsupported NM flag settings (240) [ 644.281214][ T6960] Unsupported NM flag settings (240) [ 644.287287][ T6960] Unsupported NM flag settings (240) [ 644.293208][ T6960] Unsupported NM flag settings (240) [ 644.317274][ T6960] Unsupported NM flag settings (240) [ 644.323044][ T6960] Unsupported NM flag settings (240) [ 644.381350][ T6960] Unsupported NM flag settings (240) [ 644.589788][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.306120][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.801499][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.829336][T11246] team0: Port device bridge0 added [ 646.853812][T11251] loop4: detected capacity change from 0 to 22 [ 647.017008][T11251] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 647.077336][T11259] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 647.095684][T11251] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 647.787083][T11259] Cannot find add_set index 2 as target [ 647.865919][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.881996][T11271] overlayfs: failed to clone lowerpath [ 647.972877][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.039590][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.089839][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.125942][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.168729][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.311982][T11294] overlayfs: failed to clone upperpath [ 649.417709][ T21] net_ratelimit: 7 callbacks suppressed [ 649.417728][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.467056][T11306] loop2: detected capacity change from 0 to 22 [ 649.515041][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.527308][T11306] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 649.551166][T11306] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 650.875685][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.039069][T11340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.048098][T11340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.075548][T11340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.107783][T11340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.176351][T11334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.223070][T11334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.915639][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.104604][T11402] loop4: detected capacity change from 0 to 128 [ 653.222263][T11402] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 653.927249][T11402] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 654.020897][T11402] FAT-fs (loop4): Filesystem has been set read-only [ 654.083696][T11402] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 654.397779][T11420] loop4: detected capacity change from 0 to 256 [ 654.437691][T11420] FAT-fs (loop4): Directory bread(block 1285) failed [ 654.444630][T11420] FAT-fs (loop4): Directory bread(block 1286) failed [ 654.486864][T11420] FAT-fs (loop4): Directory bread(block 1287) failed [ 654.504669][T11420] FAT-fs (loop4): Directory bread(block 1288) failed [ 654.530225][ T26] audit: type=1326 audit(1777441982.236:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.3.2079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1fa1b7dd9 code=0x0 [ 654.561407][T11420] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 654.763712][T11427] TCP: TCP_TX_DELAY enabled [ 656.172945][ T4230] net_ratelimit: 3 callbacks suppressed [ 656.172967][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.337770][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2086'. [ 656.826028][ T4230] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 657.196090][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.438886][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.557418][T11469] netlink: 'syz.0.2091': attribute type 12 has an invalid length. [ 657.705200][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 657.846193][ T4230] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.867855][ T4230] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.899219][ T4230] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 657.929113][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.428531][ T4230] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 658.485752][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.615163][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.623320][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.655358][ T4835] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 659.849465][T11492] overlayfs: failed to clone upperpath [ 660.025818][T11495] netlink: 'syz.1.2099': attribute type 4 has an invalid length. [ 660.352923][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.032726][ T1110] kernel write not supported for file bpf-prog (pid: 1110 comm: kworker/0:2) [ 662.476320][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.495690][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.505593][ T4230] usb 5-1: USB disconnect, device number 29 [ 664.510759][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.284509][T11553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2121'. [ 665.312338][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2121'. [ 665.534397][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.368515][T11570] overlayfs: failed to clone upperpath [ 666.576051][ T26] audit: type=1326 audit(1777441994.286:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 666.776061][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.792840][ T26] audit: type=1326 audit(1777441994.326:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 666.841848][ T26] audit: type=1326 audit(1777441994.326:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 666.974386][ T26] audit: type=1326 audit(1777441994.326:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 667.078116][ T26] audit: type=1326 audit(1777441994.326:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 667.146293][T11598] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.180679][ T26] audit: type=1326 audit(1777441994.326:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 667.244184][ T26] audit: type=1326 audit(1777441994.326:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 667.427493][ T26] audit: type=1326 audit(1777441994.356:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 667.525622][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.542979][T11616] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=9 (288 ns) > initial count (256 ns). Using initial count to start timer. [ 667.559978][ T26] audit: type=1326 audit(1777441994.356:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 667.689779][T11623] overlayfs: failed to clone upperpath [ 667.733051][T11608] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 667.795851][T11608] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 668.006659][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.024672][ T26] audit: type=1326 audit(1777441994.356:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 668.296115][T11635] xt_hashlimit: overflow, rate too high: 0 [ 668.316004][T11635] x_tables: duplicate underflow at hook 3 [ 669.045057][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.434792][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.970555][T11662] tap0: tun_chr_ioctl cmd 1074025681 [ 670.084064][T11668] overlayfs: failed to clone upperpath [ 670.168156][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.584904][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.821571][T11691] APIC base relocation is unsupported by KVM [ 671.195445][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.501658][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.053679][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.061958][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.172296][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 674.172316][ T26] audit: type=1804 audit(1777442001.876:63): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2183" name="/newroot/248/bus/bus" dev="overlay" ino=1397 res=1 errno=0 [ 674.703255][T11747] overlayfs: failed to clone upperpath [ 675.197592][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.398209][T11760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2189'. [ 675.437817][T11762] tmpfs: Bad value for 'mpol' [ 677.030735][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.128777][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.338282][T11800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2202'. [ 678.411334][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.948557][T11831] overlayfs: failed to clone upperpath [ 679.979584][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.987792][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.091315][T11837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2214'. [ 680.138502][T11840] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 680.165525][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.482707][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.887687][T11869] loop2: detected capacity change from 0 to 8192 [ 681.930579][T11878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2229'. [ 681.947854][T11879] overlayfs: failed to clone upperpath [ 683.334455][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.342651][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.352942][ T4736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.362247][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.371501][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.463886][T11898] overlayfs: failed to clone upperpath [ 683.805200][ T4231] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 684.196037][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'. [ 684.345477][ T4231] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 684.364312][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.395379][ T4231] usb 3-1: Product: syz [ 684.395825][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.399633][ T4231] usb 3-1: Manufacturer: syz [ 684.441042][ T4231] usb 3-1: SerialNumber: syz [ 684.526294][ T4231] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 685.035259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.445697][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.743175][T11941] loop4: detected capacity change from 0 to 128 [ 685.786463][T11941] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 685.804902][T11941] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 685.838649][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.075192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.106042][ T7559] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 686.395901][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.477723][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.678132][T11959] overlayfs: failed to clone upperpath [ 686.875363][ T4835] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 686.884600][ T13] usb 3-1: USB disconnect, device number 27 [ 686.891383][ T4231] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 686.921580][ T13] usb 3-1: ath9k_htc: USB layer deinitialized [ 687.115190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.135910][ T4835] usb 5-1: Using ep0 maxpacket: 16 [ 687.256255][ T4835] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.346232][ T4835] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.513130][ T4835] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 687.661725][ T4835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.917875][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.229617][T11988] 9pnet: Insufficient options for proto=fd [ 688.294265][T11997] loop2: detected capacity change from 0 to 164 [ 688.332948][T12001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.363241][T12001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.417547][ T4835] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 688.448010][T11997] Unable to read rock-ridge attributes [ 688.618495][T11997] Unable to read rock-ridge attributes [ 688.757606][T11997] attempt to access beyond end of device [ 688.757606][T11997] loop2: rw=524288, want=263332, limit=164 [ 689.042333][ T7559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.355559][T11997] attempt to access beyond end of device [ 689.355559][T11997] loop2: rw=0, want=263332, limit=164 [ 689.451985][ T26] audit: type=1800 audit(1777442017.156:64): pid=11997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2273" name="file0" dev="loop2" ino=1862 res=0 errno=0 [ 689.462739][T12014] overlayfs: failed to clone lowerpath [ 689.745223][ T4835] usb 5-1: reset high-speed USB device number 30 using dummy_hcd [ 690.395193][ C0] net_ratelimit: 4 callbacks suppressed [ 690.395211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.410001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.435187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.452769][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.461353][ T4226] usb 5-1: USB disconnect, device number 30 [ 691.477220][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2309'. [ 691.529983][T12092] device gretap0 entered promiscuous mode [ 691.546081][T12092] device macvtap1 entered promiscuous mode [ 692.401307][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.464396][T12115] ipt_ECN: cannot use operation on non-tcp rule [ 692.476653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.486504][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.752267][T12121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2318'. [ 692.793351][T12121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 692.800871][T12121] IPv6: NLM_F_CREATE should be set when creating new route [ 692.808220][T12121] IPv6: NLM_F_CREATE should be set when creating new route [ 692.858598][T12122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2318'. [ 692.882058][T12122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 693.515305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.596043][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.364770][ T4278] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 694.555195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.245349][ T4278] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 695.264294][ T4278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.289094][ T4278] usb 5-1: Product: syz [ 695.316659][ T4278] usb 5-1: Manufacturer: syz [ 695.429710][ T4278] usb 5-1: SerialNumber: syz [ 695.479381][ T4278] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 696.075656][ T4226] net_ratelimit: 4 callbacks suppressed [ 696.075677][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.095319][ T4278] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 697.535242][ T4278] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 697.546461][ T4278] ath9k_htc: Failed to initialize the device [ 697.553555][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.201656][T12193] loop2: detected capacity change from 0 to 131072 [ 698.218855][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.334152][T12193] F2FS-fs (loop2): Found nat_bits in checkpoint [ 698.443472][T12193] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 698.584893][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.645747][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.705728][ T4194] usb 5-1: USB disconnect, device number 31 [ 698.726846][ T4194] usb 5-1: ath9k_htc: USB layer deinitialized [ 699.596225][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.676099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.329179][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2359'. [ 700.476288][T12240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 700.589817][T12245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 700.613458][T12245] bond1: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 700.635388][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.694259][T12245] bond1: (slave ip6tnl0): Error -95 calling set_mac_address [ 700.725180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.676005][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.765639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.285867][ T4835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.714690][ T26] audit: type=1326 audit(1777442030.416:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 702.799576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.834149][ T26] audit: type=1326 audit(1777442030.476:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 702.965770][ T26] audit: type=1326 audit(1777442030.476:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f92846eddd9 code=0x7ffc0000 [ 703.835187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.305400][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.729072][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.838961][T12303] device team0 entered promiscuous mode [ 704.875410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.940047][T12303] device team_slave_0 entered promiscuous mode [ 705.034868][T12303] device team_slave_1 entered promiscuous mode [ 705.128765][T12303] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 705.162735][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 705.405433][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.537818][ T7534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.677929][ T7534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.885860][ T7534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.925182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.006207][ T7534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.113451][T12325] netlink: 'syz.4.2389': attribute type 4 has an invalid length. [ 706.224197][T12279] chnl_net:caif_netlink_parms(): no params data found [ 706.256983][T12328] netlink: 'syz.4.2389': attribute type 4 has an invalid length. [ 706.965182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.548242][T12279] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.590307][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.615868][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 707.625165][T12279] device bridge_slave_0 entered promiscuous mode [ 707.633804][T12279] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.825424][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.846611][T12279] device bridge_slave_1 entered promiscuous mode [ 707.954893][T12279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.987279][T12279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.113072][T12279] team0: Port device team_slave_0 added [ 708.232839][T12279] team0: Port device team_slave_1 added [ 708.287957][ T7534] tipc: Disabling bearer [ 708.302297][ T7534] tipc: Left network mode [ 708.362937][T12279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.394864][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.460797][T12279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.587446][T12279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.614802][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.704592][T12279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.871307][T12279] device hsr_slave_0 entered promiscuous mode [ 708.917306][T12279] device hsr_slave_1 entered promiscuous mode [ 708.933843][T12279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.959858][T12279] Cannot create hsr debugfs directory [ 709.675779][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 711.029695][ T7534] device hsr_slave_0 left promiscuous mode [ 711.050362][ T7534] device hsr_slave_1 left promiscuous mode [ 711.094626][ T7534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.133013][ T7534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.175376][ T7534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.224913][ T7534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.266370][ T7534] device bridge_slave_1 left promiscuous mode [ 711.302083][ T7534] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.339604][ T7534] device bridge_slave_0 left promiscuous mode [ 711.370348][ T7534] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.428238][ T7534] device veth1_macvtap left promiscuous mode [ 711.451465][ T7534] device veth0_macvtap left promiscuous mode [ 711.471419][ T7534] device veth1_vlan left promiscuous mode [ 711.501966][ T7534] device veth0_vlan left promiscuous mode [ 711.594280][T12392] loop4: detected capacity change from 0 to 131072 [ 711.720006][T12392] F2FS-fs (loop4): Found nat_bits in checkpoint [ 711.755706][ T4226] Bluetooth: hci2: command 0x0419 tx timeout [ 711.761049][ T7534] bond1 (unregistering): Released all slaves [ 711.781687][T12392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 712.357461][ T7534] team0 (unregistering): Port device team_slave_1 removed [ 712.378343][ T7534] team0 (unregistering): Port device team_slave_0 removed [ 712.393650][ T7534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.422364][ T7534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.564927][ T7534] team0 (unregistering): Port device bridge0 removed [ 712.606461][ T7534] bond0 (unregistering): Released all slaves [ 712.662373][T12413] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 712.698653][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2412'. [ 713.139100][T12279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 713.831190][T12279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 713.926914][T12279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 713.993293][T12279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 714.299883][T12279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.370179][ T7559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 714.382885][ T7559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 714.421443][T12279] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.472635][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 714.492439][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 714.516017][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.523330][ T7554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.567265][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 714.599743][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 714.631025][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 714.663735][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.671359][ T7554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.735582][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 714.751600][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 714.799156][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 714.827349][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 714.850178][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 714.987341][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 715.028771][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 715.048572][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 715.078436][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 715.123134][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 715.153642][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 715.222591][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 715.252691][T12499] loop4: detected capacity change from 0 to 16 [ 715.322734][T12499] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 716.352484][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 716.358928][T12505] loop2: detected capacity change from 0 to 131072 [ 716.402694][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 716.428540][T12279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.530160][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 716.540654][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 716.645830][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.647289][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 716.683994][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 716.693026][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 716.701916][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 716.705009][T12505] F2FS-fs (loop2): Found nat_bits in checkpoint [ 716.969180][T12505] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 717.235177][T12279] device veth0_vlan entered promiscuous mode [ 717.568687][T12544] loop4: detected capacity change from 0 to 256 [ 717.640180][T12279] device veth1_vlan entered promiscuous mode [ 717.697468][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 717.804759][T12544] FAT-fs (loop4): Directory bread(block 64) failed [ 717.846473][T12544] FAT-fs (loop4): Directory bread(block 65) failed [ 717.853160][T12544] FAT-fs (loop4): Directory bread(block 66) failed [ 717.865752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 717.888081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 717.905262][T12544] FAT-fs (loop4): Directory bread(block 67) failed [ 717.911929][T12544] FAT-fs (loop4): Directory bread(block 68) failed [ 717.927242][T12550] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2444'. [ 717.957911][T12279] device veth0_macvtap entered promiscuous mode [ 717.991647][T12544] FAT-fs (loop4): Directory bread(block 69) failed [ 718.014774][T12279] device veth1_macvtap entered promiscuous mode [ 718.021478][T12544] FAT-fs (loop4): Directory bread(block 70) failed [ 718.044319][T12544] FAT-fs (loop4): Directory bread(block 71) failed [ 718.068202][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.091323][T12544] FAT-fs (loop4): Directory bread(block 72) failed [ 718.111159][T12544] FAT-fs (loop4): Directory bread(block 73) failed [ 718.117854][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.151320][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.195321][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.251245][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.276451][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.303001][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.365440][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.409633][T12279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.436328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 718.469581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 718.508262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 718.539106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 718.563115][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.607740][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.656313][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.720642][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.754154][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.835207][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.890464][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.966059][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.028272][T12279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.121409][T12279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.204140][T12279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.246534][T12279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.187938][T12279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.330865][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 721.366694][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 721.593666][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.606358][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.638051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 721.663319][T12591] overlayfs: failed to clone upperpath [ 721.716996][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.745507][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.756194][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 721.998704][T12608] overlayfs: failed to clone upperpath [ 722.620496][T12632] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI [ 722.802207][T12649] overlayfs: failed to clone upperpath [ 722.815044][T12650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2486'. [ 722.830786][T12650] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 723.857494][T12661] netlink: 'syz.0.2488': attribute type 4 has an invalid length. [ 724.361457][T12693] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 724.501331][T12701] loop3: detected capacity change from 0 to 128 [ 724.651519][T12707] overlayfs: failed to clone upperpath [ 725.064763][T12718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.130690][T12730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 726.138024][T12730] IPv6: NLM_F_CREATE should be set when creating new route [ 726.145437][T12730] IPv6: NLM_F_CREATE should be set when creating new route [ 726.248262][T12734] loop2: detected capacity change from 0 to 1764 [ 732.841491][T12862] device syzkaller0 entered promiscuous mode [ 735.311645][T12892] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 735.660158][ T26] audit: type=1804 audit(1777442063.366:68): pid=12902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2583" name="/newroot/322/bus/bus" dev="overlay" ino=1798 res=1 errno=0 [ 735.703422][T12906] loop2: detected capacity change from 0 to 512 [ 736.547145][T12939] loop2: detected capacity change from 0 to 256 [ 736.585413][T12939] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 736.659308][T12939] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 736.930691][T12949] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 737.095814][T12955] page:ffffea000143b040 refcount:4 mapcount:1 mapping:ffff888075560fc0 index:0x0 pfn:0x50ec1 [ 737.108031][T12955] memcg:ffff88805f754000 [ 737.112310][T12955] aops:shmem_aops ino:647 [ 737.116672][T12955] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 737.126691][T12955] raw: 00fff00000080015 ffffea00014b3e48 ffffea000143b088 ffff888075560fc0 [ 737.135580][T12955] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88805f754000 [ 737.144190][T12955] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 737.151231][T12955] page_owner tracks the page as allocated [ 737.156972][T12955] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 12956, ts 737091660643, free_ts 720245285667 [ 737.172122][T12955] get_page_from_freelist+0x1bbd/0x1ca0 [ 737.177709][T12955] __alloc_pages+0x1ee/0x480 [ 737.182342][T12955] alloc_pages_vma+0x393/0x7c0 [ 737.187141][T12955] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 737.192808][T12955] shmem_getpage_gfp+0x14f4/0x2d40 [ 737.198119][T12955] shmem_read_mapping_page_gfp+0x96/0x100 [ 737.204011][T12955] udmabuf_create+0x895/0x1570 [ 737.208995][T12955] udmabuf_ioctl+0x1f3/0x300 [ 737.213771][T12955] __se_sys_ioctl+0xfa/0x170 [ 737.218395][T12955] do_syscall_64+0x4c/0xa0 [ 737.222855][T12955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 737.228781][T12955] page last free stack trace: [ 737.233479][T12955] free_unref_page_prepare+0x637/0x6c0 [ 737.239054][T12955] free_unref_page_list+0x119/0x820 [ 737.244423][T12955] release_pages+0x186c/0x1be0 [ 737.249222][T12955] __pagevec_release+0x6d/0xe0 [ 737.254185][T12955] shmem_undo_range+0x62b/0x1930 [ 737.259161][T12955] shmem_evict_inode+0x220/0xa40 [ 737.264378][T12955] evict+0x4c9/0x8d0 [ 737.268302][T12955] __dentry_kill+0x431/0x650 [ 737.272998][T12955] dentry_kill+0xb8/0x290 [ 737.277537][T12955] dput+0xd8/0x1a0 [ 737.281286][T12955] __fput+0x5ee/0x930 [ 737.285303][T12955] task_work_run+0x125/0x1a0 [ 737.289933][T12955] exit_to_user_mode_loop+0x10f/0x130 [ 737.295411][T12955] exit_to_user_mode_prepare+0xee/0x180 [ 737.300992][T12955] syscall_exit_to_user_mode+0x16/0x40 [ 737.306489][T12955] do_syscall_64+0x58/0xa0 [ 737.311031][T12955] ------------[ cut here ]------------ [ 737.316501][T12955] kernel BUG at mm/filemap.c:166! [ 737.321605][T12955] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 737.328477][T12955] CPU: 0 PID: 12955 Comm: syz.4.2606 Not tainted syzkaller #0 [ 737.337262][T12955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 737.347876][T12955] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 737.354370][T12955] Code: e8 29 11 db ff 4c 89 f7 48 c7 c6 00 01 33 8a e8 aa fb 0d 00 0f 0b e8 13 11 db ff 4c 89 f7 48 c7 c6 40 01 33 8a e8 94 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 10 db ff eb 5d e8 f1 10 db ff 4c 89 f7 [ 737.374197][T12955] RSP: 0018:ffffc90003247688 EFLAGS: 00010046 [ 737.380689][T12955] RAX: ce837d03de7ca600 RBX: 0000000000000000 RCX: 0000000000000000 [ 737.388692][T12955] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000648ec4 [ 737.396701][T12955] RBP: 1ffffd4000287609 R08: ffff8880b902795b R09: fffff52000648e80 [ 737.404979][T12955] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea000143b040 [ 737.413006][T12955] R13: dffffc0000000000 R14: ffffea000143b040 R15: ffffea000143b048 [ 737.421094][T12955] FS: 00005555858c1500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 737.430057][T12955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.436751][T12955] CR2: 000000110c433828 CR3: 000000007d526000 CR4: 00000000003506f0 [ 737.444863][T12955] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 737.452943][T12955] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 737.460937][T12955] Call Trace: [ 737.464356][T12955] [ 737.467332][T12955] __delete_from_page_cache+0xbe/0x6d0 [ 737.473080][T12955] ? _raw_spin_lock_irq+0x86/0xf0 [ 737.478212][T12955] ? lockdep_hardirqs_off+0x70/0x100 [ 737.483618][T12955] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 737.490860][T12955] ? _raw_spin_lock_irq+0xb7/0xf0 [ 737.496081][T12955] ? _raw_spin_lock_irqsave+0x100/0x100 [ 737.501750][T12955] ? page_mapping+0x30e/0x440 [ 737.506462][T12955] delete_from_page_cache+0x121/0x190 [ 737.511949][T12955] truncate_inode_page+0x8d/0xb0 [ 737.516998][T12955] shmem_undo_range+0x53c/0x1930 [ 737.522062][T12955] ? __lock_acquire+0x13bc/0x7d10 [ 737.527650][T12955] ? shmem_truncate_range+0xa0/0xa0 [ 737.532982][T12955] ? do_raw_spin_lock+0x128/0x2f0 [ 737.538604][T12955] ? __rwlock_init+0x140/0x140 [ 737.543406][T12955] shmem_evict_inode+0x220/0xa40 [ 737.548385][T12955] ? inode_wait_for_writeback+0x1df/0x220 [ 737.554238][T12955] ? shmem_free_in_core_inode+0xb0/0xb0 [ 737.559875][T12955] ? do_raw_spin_lock+0x128/0x2f0 [ 737.565087][T12955] ? bit_waitqueue+0x30/0x30 [ 737.569800][T12955] ? do_raw_spin_unlock+0x11d/0x230 [ 737.574992][T12955] ? shmem_free_in_core_inode+0xb0/0xb0 [ 737.580807][T12955] evict+0x4c9/0x8d0 [ 737.584801][T12955] ? proc_nr_inodes+0x320/0x320 [ 737.589661][T12955] ? do_raw_spin_unlock+0x11d/0x230 [ 737.594880][T12955] ? _raw_spin_unlock+0x24/0x40 [ 737.599767][T12955] __dentry_kill+0x431/0x650 [ 737.604389][T12955] dentry_kill+0xb8/0x290 [ 737.608734][T12955] dput+0xd8/0x1a0 [ 737.612451][T12955] __fput+0x5ee/0x930 [ 737.616519][T12955] task_work_run+0x125/0x1a0 [ 737.621131][T12955] exit_to_user_mode_loop+0x10f/0x130 [ 737.626503][T12955] exit_to_user_mode_prepare+0xee/0x180 [ 737.632061][T12955] syscall_exit_to_user_mode+0x16/0x40 [ 737.637732][T12955] do_syscall_64+0x58/0xa0 [ 737.642180][T12955] ? clear_bhb_loop+0x30/0x80 [ 737.647104][T12955] ? clear_bhb_loop+0x30/0x80 [ 737.651791][T12955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 737.657897][T12955] RIP: 0033:0x7fc5dc7dedd9 [ 737.662358][T12955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.682051][T12955] RSP: 002b:00007fff5b331038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 737.690523][T12955] RAX: 0000000000000000 RBX: 00007fff5b331120 RCX: 00007fc5dc7dedd9 [ 737.698650][T12955] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 737.706834][T12955] RBP: 00000000000b3ef8 R08: 0000000000000001 R09: 0000000000000000 [ 737.714914][T12955] R10: 0000001b2e820000 R11: 0000000000000246 R12: 00007fff5b331160 [ 737.722892][T12955] R13: 00007fc5dca57fac R14: 00000000000b3f3f R15: 00007fc5dca57fa0 [ 737.730957][T12955] [ 737.734216][T12955] Modules linked in: [ 737.738376][T12955] ---[ end trace 58b2042f2330d5ef ]--- [ 737.743848][T12955] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 737.750340][T12955] Code: e8 29 11 db ff 4c 89 f7 48 c7 c6 00 01 33 8a e8 aa fb 0d 00 0f 0b e8 13 11 db ff 4c 89 f7 48 c7 c6 40 01 33 8a e8 94 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 10 db ff eb 5d e8 f1 10 db ff 4c 89 f7 [ 737.770711][T12955] RSP: 0018:ffffc90003247688 EFLAGS: 00010046 [ 737.776786][T12955] RAX: ce837d03de7ca600 RBX: 0000000000000000 RCX: 0000000000000000 [ 737.785130][T12955] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000648ec4 [ 737.793250][T12955] RBP: 1ffffd4000287609 R08: ffff8880b902795b R09: fffff52000648e80 [ 737.801822][T12955] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea000143b040 [ 737.809804][T12955] R13: dffffc0000000000 R14: ffffea000143b040 R15: ffffea000143b048 [ 737.818141][T12955] FS: 00005555858c1500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 737.827174][T12955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.833795][T12955] CR2: 000000110c433828 CR3: 000000007d526000 CR4: 00000000003506f0 [ 737.842000][T12955] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 737.850014][T12955] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 737.858173][T12955] Kernel panic - not syncing: Fatal exception [ 737.865625][T12955] Kernel Offset: disabled [ 737.870058][T12955] Rebooting in 86400 seconds..