last executing test programs: 10.400073541s ago: executing program 0 (id=312): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_open_dev$dri(&(0x7f0000000a80), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}, {0x7, 0x48a5}}}}, 0x11) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0x7) gettid() getpgid(0x0) tgkill(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = syz_io_uring_setup(0x46bc, &(0x7f0000000200)={0x0, 0xdf1, 0x400, 0x1, 0x2000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x810, r3, 0x97f18000) io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x40}}, 0x0) 9.751711573s ago: executing program 0 (id=322): socket$inet6_udplite(0xa, 0x2, 0x88) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000040)={'virt_wifi0\x00', @random="000007000100"}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x7ffffffff002, 0x7ffffffff000, 0x0, &(0x7f0000000000/0x4000)=nil) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r3}, {r1, 0x200}], 0x2, &(0x7f0000000140)={r4, r5+10000000}, &(0x7f0000000240), 0x8) socket$inet_dccp(0x2, 0x6, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='f2fs_gc_begin\x00', r6}, 0x10) memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) r7 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0xc4009420, &(0x7f0000000040)) r8 = socket$netlink(0x10, 0x3, 0x1) sendmsg$SOCK_DESTROY(r8, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5400000015000100000000000000000023000000"], 0x14}}, 0x0) setreuid(0x0, 0xee01) sched_setaffinity(0x0, 0x0, 0x0) 9.30974477s ago: executing program 2 (id=325): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000040), 0x1003) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fbff", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) setpgid(0x0, r4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000000)=0x100) 8.503681085s ago: executing program 3 (id=327): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.759995388s ago: executing program 4 (id=332): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_open_dev$dri(&(0x7f0000000a80), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}, {0x7, 0x48a5}}}}, 0x11) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0x7) gettid() getpgid(0x0) tgkill(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = syz_io_uring_setup(0x46bc, &(0x7f0000000200)={0x0, 0xdf1, 0x400, 0x1, 0x2000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x810, r3, 0x97f18000) io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x40}}, 0x0) 6.461818922s ago: executing program 0 (id=333): r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) socket(0x2, 0x80805, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000100)={0x1, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{}]}]}, 0x24}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaa"], 0x22) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f00000019c0)={{r2}, 0x1, &(0x7f00000002c0)=[0x6], 0x579a038c, 0xd, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="2b000e0059"], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105511, &(0x7f0000000700)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}}) syz_emit_vhci(&(0x7f0000002080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xec, @any, "11063d6a3b0540c199404981a111a524cdd584f680ee5dbbe4dcf01ab11ff0a503c960ab4654b4eb9b14a08697fd9641f340e32cdfaaa404431f84e2b0c27c8b22638fbf89d951ebbbb2f42f2e57cfbe9b478c20c0f77757784e095d98b66560764a2af192235fed0a6c773fbc8bd417943066d3cc97eccbf84a178bb7000f1a60c1d7b75fd9495fb7804ce0e69b69e5a7c24c991cda067e0f54a1a1477a1c003e5bc2947cc8cc8df91485940e1baf9c435c36f8e50ecdbd1b06cdd99db9ce69b3abef4a3b8f3567d310c904256fb406fac6a302718223f3a5a19d80c73768e7ffd74e6441c5f15d9160a3a3ca19e13993804710ea594226"}}}, 0x102) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10800010}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1614, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {0x3}, @device_b, @device_a, @multi={{0x1}, [], {0x0, 0x0, {0x6, 0xca}, "ccf79fac0a451730"}}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x15a0, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @initial, @broadcast, @device_b, {0xb, 0x9}, "", @void, @value=@ver_80211n={0x0, 0x2f61, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0xb5, "950b73861c3e9215e714da0631e88952a37d6534423ed6807c8eabb3ce23df5ca40ea2c28f1bdd4c54a3fab64f2610e864d62dad874a7b39c6403f04ee15748172e56c91bd88c1c9a79a8e1b878ea41f669529c09b206a50d4f70c69937694546eab7811c4d044e0ef42d269955da1aa9b027973f8d923c6db8e70410d88f622b6f8617ee3845d4fbc0bbe6c368a85e5f5c03ac11ea48653e288ebdbc9728a19aef52aab0064c04310df97037475bf09a7c46346ea"}, {@device_a, @broadcast, 0x41, "40a61ebe8b394f532f8be8170e6080f2ed9b910d8f528ab540eaf9dca065677e49d50c487a5bbc1db42862113c8310449a52c02d519321c7c6d121ad626330b5cd"}, {@broadcast, @device_b, 0xe6, "5c24090deeff20c0d7b83ada39af9d9cfbb2dc2cefd102937f6446eaebff79d0ac7123c3b95d773c09e9050100cd812b239a9daa4ed5e5f1471af1ffebf35cbdb185a9032bd07f8b6894750b7e407a5381ed76e4ea9188cd53b6233a923edaa34f6d09ea6140a8634d0c14fc34de463e6a48f9085621a7352465fede857b7a812c99694bd04ec9b26f91f11c09829c2284d9016840a36ef994685999c63e9b5e6858067861b93024866ea70fdde8cafe4beb040614f1726354aac188611f8bd6586fd08a49639add2c36bafb964c472ae02fa89515197b104d323755be7b229f7b39cc8cfc4c"}, {@broadcast, @device_a, 0xc8, "2e079c23575fc4866313e12aaf636260b9bbc0c1a9b0fb2415e08c2ef8ef31480d2ab976f186092f4f251f4f05084dc26d7ad6df14d296a9850382a6043724704a0f1e01bde7a5d86094c13fafda8603b33e5f6c025c80eeb70f55ab31cdff9b63b3fc0abb5834015c04e8aa53fefd4f744cbef60f5ff47393227da670e22ebc54221b917d20b5a24c2937c025f2f9c0e31f133beb4c0d0b8824336efbd81e1c4e059564de585947f1954b8790f2ae96e0317e040e07f16abef0026c15932283e1276a5d01f49118"}, {@broadcast, @device_a, 0x4, "1b92d83b"}, {@broadcast, @broadcast, 0xc4, "fcc9d759d162a5271357e603c927d9d1e3c9636c2a756c9d77c8848c6ffd2241ad8b197368381b0c9f6ee043601760b6faeb3182a0cf30afff92a092b6d14c8a6f87c8d4253a8ffb65d52e7bc9686e13410f49b6103c3930d867ccb5f2c644b59417663480cff7f5e8547a09286aca1381a261a3e70d8280f97d938979beda9cce3a72d04450f475d9c3e190f28eca2251106471b8dce69aaf220eade366df6242f05b24a8810b38d88924ea5af2c13c216264251026d52919a8539ceb3eee43785baaa0"}, {@device_b, @device_b, 0xf7, "fac0b1a13f5e85eab7595d0a24b616ca1e074262521563015c72c114d6f02568ba1421acd286fc7ed5555079d0c0ccb75c151f010ead6efe7c7ae241305710308f0c1acdb0a682a3cd53ea7e8ef5c7a40598d26085f5c1421db3172d1e99075db9814b20aff4d623aaee2e876cfca175a566ac7ba2c970662e5ca561a7263ed8bfdc7a6b9102bd509084783a377ae55183c7f4ba5122d83e9e8b72e4933c73f42b6fb313e0d2f5ec4aa930e244cd022e4ba7cf9da9a4a397a07dee4e4bab314baf001ab6e0d98261ffe21c9d80a8b2552e9484a239a289ee37319c936aa80d2fa8dadb859e69700eb1680fab2ab0cecea5526004fe2d88"}, {@device_a, @device_a, 0x1000, "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"}, {@device_b, @device_b, 0x8f, "c4a966aeb375e0f067ad0205accc155db857432438c95d18c274bd640eefa2d4441ee71da86130fd72fdade7724fe676ebe1e0066e4e8e9e9792dd0bde4461c79da7ba0fee013e471953324d8faddc8dda2b5d1c05c8e7f3e65ad8a373f3e60c1a5f4c9666fecbef8db9dfb6f1583c53bc7d70fc7179a0805226eb991a6ab59db1606048867891c9eaeca3eb8eb851"}]}}, @NL80211_ATTR_MAC={0xa}]}, 0x1614}, 0x1, 0x0, 0x0, 0x4008801}, 0x20040055) 6.411580297s ago: executing program 4 (id=334): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='qnx6\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xe0000001}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r7 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000300)={{0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 5.974820842s ago: executing program 3 (id=336): setrlimit(0x7, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) 5.968954033s ago: executing program 2 (id=337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x13, 0xa10, &(0x7f00000001c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.159916989s ago: executing program 4 (id=338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(0xffffffffffffffff, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 5.158244259s ago: executing program 1 (id=339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000100)={[{@sysvgroups}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@nobarrier}, {@nobh}, {@nobarrier}]}, 0x1, 0x4b3, &(0x7f0000000a00)="$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") 5.03151934s ago: executing program 3 (id=340): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x40000000000008, &(0x7f0000000040)) setreuid(0x0, 0xee01) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0), 0xb) lseek(r6, 0x0, 0x3) unshare(0x8000400) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 5.031069739s ago: executing program 4 (id=341): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xf4, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000a40)="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"/268, 0x10c, 0x4005, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) mount$cgroup(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="05c9"], 0x11) r3 = getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='afs_make_fs_call\x00', r4}, 0xfffffffffffffd94) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xd, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="b571803b91f3b46ad87af8792a13d13e333f28b70db0dadf241a96d8cfeae0bf640402541a323e81505eb684decb6afb2ec5c574f7cd2e21c4271acccdf803b69041203a55f022ae3df17186c3f293ea917f2f2b68fab21f6e0a37cc0fa12aa37b654a3ee34c21cb2fb876db5e18af95b0e73eb362058942530f0753b6d60a15c80745ac4c8001d88647ad6e93de373f6fc5aaa7f3866bc27ab71117215aa2cf423cc7dec116d90f89f0dd83d9394d21447f97d7aa3ce444bc341dc74e5caaf14c37c832f801c10ba3aa2d8d40b33336a1283101fdfe071fd467a49ffa78dd36", @ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000002a80)='\x00XL\xc9\xe9+%\xf6\x83\x92D\xeb\xc4\xf6x\x86&q\f\x05\xf2N\x91\xf6\xa0\x8c\x06\xe3\xa7*\xcc\x1e\x96\x1e\x00\x00\x00 A\xe3\x0f<\x02\xe9>\xf2\xcb\xf1\x00\x00C4\x94\x01\x1a\xc9\"\xf6\x8aK\xc7]\xc9v#$*\x0f\xe2\x93\x84\xfa\x0f\x0e\x1c\xd4\x90\xc7\x1a_07\x85N\veX\xd7\r\xac\x1b\xeb&\x85\xef>\xe5\xd0Y\v\xd9\xcf\x19\x1c\xc2\x7f,\xb0\x98\xceR\xe7c^\xbd\xa7\xf8XjV\xe98\xd3[2\xfa?&:.\xd31\xf1\xdahg\x01\x01L\xb4\x84z\xf1\xfb\xaa8\x11\xc2\x00\x00\xcf<\xad*\x9f\xe8\r;\xf4Ak/Qn\xe7\xc5\x1dm\x8c\x1a\rV\xff\x1dy$\xc5\x1a\xe1\x9eP\x95\xcc@>a*$&<\x1d\xde\xde\xc3\xb5\x12\x88\x00JG{\x9aH\x96\xfd\x87\x9c)\xd7\x15_\v\xc3e\xc8r\b,A`\x1f~\xc5\x16S\x1a3|g\x8bCU\xd2!\x8c\xd6\x87\xc4\xa0\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xea\x8c\xab\x96\x9co\xf2\x04\xe1\xad\xfd\xb0\x14\xc4\xa1\xf6h \x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\xb2\xaf%\xe2+\xde\xe3\x8d<\x00\x00\x16\x8f\xe5\xf3\xca\n\xfc\x8cZ\x9e\x8e<~\xdf\x1c\xb5\xda\xb0\x034\xee.\xd3\x04\xd4\xe8\xa5b[\t\x91\xb9AV;h\v@\x902\xc1\xb8R\xfar)cBCn\xeb*\'\x7f2\x81\xeb\xd7\t\xbe\xb8;\xa7\xb1{\x8c)\x87\\i\xd6\x03\x9e\xfc\xd4I\xc4\x14\xe2\xa0\xe2\x1f\x12\x1bPH\xba$\xfa\x81\xc5\xfaE/\xd3\x8d\x89`\xe0\x1c\x19\xe4\xa4T\x9a\xa3o\x9b\xb0\x10l\xe2\xe3\xf2\x86/\xa6\xf8,\x1c\x16\x85\x84\xd8F[\xd2$w3\x0f\xdbqR\xa8\xdf(\xfb1\x86\xb2\xcd\xb2\xcd\xa6&Gr\xc0\x98\xcb\xb7\xdf\xcd\v\xb61\xcc\xd6Dou=\xadF\xb7\xbfR\xcd\xf3S\xba\xa3\xe7\x8f\xad\x02\xf9\xfd\x9b\xf7RE\xe3\x0e\xeb\xbf\x1cr\xb1\xfb\x9f)\x890\xb8c\b\xeb\xd2Q\xea\x00\xa7K\x03\x9f}\xb4\xe8\xb7J\xed\x8d\x03NwT\xab\xd6\xe7\xc3\xca\x96p\xa5\x14\xa7\xdb\xa7$\xe4\x1c^tk\xaaq\xb1\xfd\x14\xfe*u\\w \x0e\xf9\xee\x8eDd\x9d=\xfc\n\x8da\xa9\x15\xde\x8a\xe0.7gxvc\xcd\x97') syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="04ff9a1b8e23930d0fe8348ffcef75bce7d9b48f6d960923cbf7a8c346b56201706e851dbb837a90da63a1a184eeadf19bbfc7e957c4b853377c27165423ff120df0a404e9ab76c7e0231ec9cc70dcb0179d4b69ba5c9c4f9fd6800966419f3f4a5ce2a688f5071b561bfc99bddc971e072ecaaa12333291f2bdb49c35059d907ce91abc39c6003f6e98cf3252d2858165ae3b67a8f3dc9339a67068801c85cc7a9467ccc15c0184f9dd3c5e9a79557de090e6b802a8f6ef793559296443e9390c638572de513228d22ba7d5b75ea0f616a8260c35248b713832df84a92289b88cfa03fcde"], 0x9d) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYRES8=r4, @ANYRESOCT=r4, @ANYRESOCT=r7, @ANYRESHEX, @ANYRES32=r1, @ANYRES16, @ANYRES16], 0x22) r8 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000000)=0x8, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getegid() r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') read$FUSE(r9, &(0x7f0000006240)={0x2020}, 0xffffffffffffffce) write(0xffffffffffffffff, &(0x7f00000000c0)="2700000014000707030e0000120f0a0011004ad75147a2c01f52ea064d13620100f5fe0012ff00", 0x27) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4.920392059s ago: executing program 1 (id=342): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x2, 0x400) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") r1 = getpgrp(0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x5, 0x2001) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x80047455, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) fallocate(0xffffffffffffffff, 0x3, 0x1b02, 0x0) write$cgroup_type(r3, &(0x7f0000000200), 0x175d9003) open$dir(&(0x7f0000000440)='./bus\x00', 0x2, 0xc) 4.849967254s ago: executing program 0 (id=343): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100766c616e000000002800028006000100000000001c0003800c00010000000000000000000c000100008000000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00'], 0x68}}, 0x0) 3.80772639s ago: executing program 0 (id=344): socket$inet6_udplite(0xa, 0x2, 0x88) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000040)={'virt_wifi0\x00', @random="000007000100"}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x7ffffffff002, 0x7ffffffff000, 0x0, &(0x7f0000000000/0x4000)=nil) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r3}, {r1, 0x200}], 0x2, &(0x7f0000000140)={r4, r5+10000000}, &(0x7f0000000240), 0x8) socket$inet_dccp(0x2, 0x6, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='f2fs_gc_begin\x00', r6}, 0x10) memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) r7 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0xc4009420, &(0x7f0000000040)) r8 = socket$netlink(0x10, 0x3, 0x1) sendmsg$SOCK_DESTROY(r8, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5400000015000100000000000000000023000000"], 0x14}}, 0x0) setreuid(0x0, 0xee01) sched_setaffinity(0x0, 0x0, 0x0) 3.628168154s ago: executing program 2 (id=345): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) 3.565790099s ago: executing program 3 (id=346): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040), &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.356480246s ago: executing program 4 (id=347): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000040), 0x1003) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fbff", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) setpgid(0x0, r4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000000)=0x100) 3.224092167s ago: executing program 2 (id=348): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003540), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r1, &(0x7f0000007700)={0x2020}, 0x2020) pread64(r1, &(0x7f0000004c40)=""/103, 0x67, 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x0, @broadcast}}) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) 2.888838555s ago: executing program 2 (id=349): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='qnx6\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xe0000001}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r7 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000300)={{0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 2.395265775s ago: executing program 1 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000300)={r0, &(0x7f0000000480)="75bdc450d8aa5d40ada6351884125daa17bf915616395c137855134b0ede5130baa0ca7e2986c3cc285c5ef10ec2575732d607798185dcee348dcbea00bd019410a6fa6e1993b88e38648026bc427c2e", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r7) accept4$tipc(r6, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = dup2(r8, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0) 1.171294365s ago: executing program 0 (id=351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(0xffffffffffffffff, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.160285386s ago: executing program 1 (id=352): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x1000ff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 391.469419ms ago: executing program 2 (id=353): r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) socket(0x2, 0x80805, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000100)={0x1, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{}]}]}, 0x24}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaa"], 0x22) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f00000019c0)={{r2}, 0x1, &(0x7f00000002c0)=[0x6], 0x579a038c, 0xd, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="2b000e0059"], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105511, &(0x7f0000000700)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}}) syz_emit_vhci(&(0x7f0000002080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xec, @any, "11063d6a3b0540c199404981a111a524cdd584f680ee5dbbe4dcf01ab11ff0a503c960ab4654b4eb9b14a08697fd9641f340e32cdfaaa404431f84e2b0c27c8b22638fbf89d951ebbbb2f42f2e57cfbe9b478c20c0f77757784e095d98b66560764a2af192235fed0a6c773fbc8bd417943066d3cc97eccbf84a178bb7000f1a60c1d7b75fd9495fb7804ce0e69b69e5a7c24c991cda067e0f54a1a1477a1c003e5bc2947cc8cc8df91485940e1baf9c435c36f8e50ecdbd1b06cdd99db9ce69b3abef4a3b8f3567d310c904256fb406fac6a302718223f3a5a19d80c73768e7ffd74e6441c5f15d9160a3a3ca19e13993804710ea594226"}}}, 0x102) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10800010}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1614, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {0x3}, @device_b, @device_a, @multi={{0x1}, [], {0x0, 0x0, {0x6, 0xca}, "ccf79fac0a451730"}}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x15a0, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @initial, @broadcast, @device_b, {0xb, 0x9}, "", @void, @value=@ver_80211n={0x0, 0x2f61, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0xb5, "950b73861c3e9215e714da0631e88952a37d6534423ed6807c8eabb3ce23df5ca40ea2c28f1bdd4c54a3fab64f2610e864d62dad874a7b39c6403f04ee15748172e56c91bd88c1c9a79a8e1b878ea41f669529c09b206a50d4f70c69937694546eab7811c4d044e0ef42d269955da1aa9b027973f8d923c6db8e70410d88f622b6f8617ee3845d4fbc0bbe6c368a85e5f5c03ac11ea48653e288ebdbc9728a19aef52aab0064c04310df97037475bf09a7c46346ea"}, {@device_a, @broadcast, 0x41, "40a61ebe8b394f532f8be8170e6080f2ed9b910d8f528ab540eaf9dca065677e49d50c487a5bbc1db42862113c8310449a52c02d519321c7c6d121ad626330b5cd"}, {@broadcast, @device_b, 0xe6, "5c24090deeff20c0d7b83ada39af9d9cfbb2dc2cefd102937f6446eaebff79d0ac7123c3b95d773c09e9050100cd812b239a9daa4ed5e5f1471af1ffebf35cbdb185a9032bd07f8b6894750b7e407a5381ed76e4ea9188cd53b6233a923edaa34f6d09ea6140a8634d0c14fc34de463e6a48f9085621a7352465fede857b7a812c99694bd04ec9b26f91f11c09829c2284d9016840a36ef994685999c63e9b5e6858067861b93024866ea70fdde8cafe4beb040614f1726354aac188611f8bd6586fd08a49639add2c36bafb964c472ae02fa89515197b104d323755be7b229f7b39cc8cfc4c"}, {@broadcast, @device_a, 0xc8, "2e079c23575fc4866313e12aaf636260b9bbc0c1a9b0fb2415e08c2ef8ef31480d2ab976f186092f4f251f4f05084dc26d7ad6df14d296a9850382a6043724704a0f1e01bde7a5d86094c13fafda8603b33e5f6c025c80eeb70f55ab31cdff9b63b3fc0abb5834015c04e8aa53fefd4f744cbef60f5ff47393227da670e22ebc54221b917d20b5a24c2937c025f2f9c0e31f133beb4c0d0b8824336efbd81e1c4e059564de585947f1954b8790f2ae96e0317e040e07f16abef0026c15932283e1276a5d01f49118"}, {@broadcast, @device_a, 0x4, "1b92d83b"}, {@broadcast, @broadcast, 0xc4, "fcc9d759d162a5271357e603c927d9d1e3c9636c2a756c9d77c8848c6ffd2241ad8b197368381b0c9f6ee043601760b6faeb3182a0cf30afff92a092b6d14c8a6f87c8d4253a8ffb65d52e7bc9686e13410f49b6103c3930d867ccb5f2c644b59417663480cff7f5e8547a09286aca1381a261a3e70d8280f97d938979beda9cce3a72d04450f475d9c3e190f28eca2251106471b8dce69aaf220eade366df6242f05b24a8810b38d88924ea5af2c13c216264251026d52919a8539ceb3eee43785baaa0"}, {@device_b, @device_b, 0xf7, "fac0b1a13f5e85eab7595d0a24b616ca1e074262521563015c72c114d6f02568ba1421acd286fc7ed5555079d0c0ccb75c151f010ead6efe7c7ae241305710308f0c1acdb0a682a3cd53ea7e8ef5c7a40598d26085f5c1421db3172d1e99075db9814b20aff4d623aaee2e876cfca175a566ac7ba2c970662e5ca561a7263ed8bfdc7a6b9102bd509084783a377ae55183c7f4ba5122d83e9e8b72e4933c73f42b6fb313e0d2f5ec4aa930e244cd022e4ba7cf9da9a4a397a07dee4e4bab314baf001ab6e0d98261ffe21c9d80a8b2552e9484a239a289ee37319c936aa80d2fa8dadb859e69700eb1680fab2ab0cecea5526004fe2d88"}, {@device_a, @device_a, 0x1000, "0a29474a457328c65559d2e4c7a40d1ce9504e5111ab39201da49bdf73a1c7af093bf2b5b22ed1044c1dab4a645e605b6c68d5ee75dc07d317bb327a6f11f8d2f7eab2ee880c7f31b17f2e63114aa6b1a3662250d013ae2055b8fdb48d2bf186587a6714e4f30a2e373edd4f0834b2ff9fbe11479d3eebff4f2fb7e641e29bf19b9d001f2456cdd00a7c965a8809c728af65c2b91613454db6a43bc7ba1967dd4a9cdda1f9a869cbbee12af4bb0701f79c59ffdaebbcaffb23110214a378641d981a60d9a19d2beb30b5095a9e83d1008e1e7b5b30de5092d0872d63f2e9c7b741d810a4182a5c0f4d0aa8b6cbfd81e7acd0a4d8e5967490ce4be31e0425189c8f7a21a6b722205c886ec940090d23c8cc17acc843c306b24013346fb30117dd613a45c42ad58cc913ac6ebd3084053968e5228d65d43c7fe7b3fc0d8d55ba8503ee730ec6ff01f12d097d6f9cd2751de21dbfdb0731601b1df06e72dc6cf447256d74194b91c4505fb43de76ce788fcab0e913132eb366c814ca2deab7bf5c7d68fe37902b26097d1d52b35bc963214c15b69b87c3a76cfdeb8eb94d702ec09590776f248232d12fd5d27df940d04e66c406482a6927bca50b4a26c116f1f2f1635615d936c07d0aa17e826bf91a7eb8a95bbd67f0749a68df9257089fa2832a7b45c541a0c58bb23d2457ef4776102efbbbd6127e01f176170e3e6545670657be9439803544a8870a041d069ae56fbe15d7c50f15ef2bd052c1260e087fc72147748f87843ddbd931a96956f961db55e0aed9af2bf592f03b5355df5622098a310f3513640b0c11d50230abff56465afb4bc41b4195f05f05a92e831c2b77f472a67054f30f7b674f0d43517e989de9874be86c584b2e1f5fa93b188339792379ec4435f04ef83892c96073c0cd6612fac7e59560985775204509a46b5682aff744af1c4fb6c284e0d1bfcde7db48f6f7b584705f74483cafa11b40a86945c60d3544876b1c0b2082d03aba1c46fbeed287dfe9c7e6c57ff62fe29095a8242888ab4e02c4dd853222354ae795123d8986a6d736760590e605f99ff985c55ac9fcd5db60991abdef88b649eee564e0dbf7ac32e55b3506d9a73b5e448cdcbee1642371eed1d4923730f87b0e4b2888a9090d379d6c8d6ad45c07d887f364d5f8d6eae06c54fcea73aab6c015b774acd6947e8d8e8abd07e0d016f2830d892f4dfd15a7464d575e773b99b9cf6548a8397f4f3abc856e238c9a85f88372fc7ea18dd38e95c514dc58e63b8c4358e6cff77592c2a189c83d737863a245cf691da50a3bb455857fab381d073ed6dbcd24b47be50512325178918bc80f869d2c4dafde495a3d9ca47a43808e17d9c9382406bf1048734ac1e41feab0cae27968b464ed1a180b1fc153e2d2b97bac03c6f449df143301ba31cb70b0eb82cb1665a7cdf0f5cb6969572566c873e2e0c9c42c1ec034f0349845cfc929bf8760e0d85644320d8569b5d84fb85829a7476efb95583d218b72637c3d61d988010ab0de52f3fece4ed852e84f9808a3e7200e0393d1b4bcfd6e7e56630171d91c058cbdcc5b6ace0ec2d3234401f4ed1d9d686d373525c224cd256927b14861a7b24f2c69ffbe0ec6befa5147552603ece1e55e426f506772ba8b580507bc3c1ad275527100f6aab626ac95da0285a91fa19c15c418e0de56f5eb75cea0d14b8a4af243c1a76afc3a0811bdb8c79edf298e2f2b15d4ebc6a5a288bab3c9eccb96ab13325b9de2f34648b242fa86e95b249bbfdf8bbf3cc2af889377468427dc6de6f29666eb9e7e3082c87cb6ac5270a96a965f5c9f7385762addb193d517e3c48b5a0f9a394404cc5b50937652a9546993a7ecb738dc11f74d507b5845d84aca3cff93242e038b24404ff8ae6fa7146fa61cee57d99ad5f4b4ddf3de4581a89d6ce558dd80a7802d96892c35fbb7cbc7f17a6d99c4079db35a07ea0ceb3d5331aa6a175e9b5897b0f6a1c79068a9c36fe2eac7c562fce59c333c5535935d0e9bd056cb57194a40c3c7b775dbbfbe7c51d2571229057f843930e3a476ba29783c1d2abb63c13e9814944d39fd0a4a9b0aef83aa7d30e695b8cf76453a535d8752ac7a9ddca3a87a6c6ab75503aa05790eef91d329d130b5a4d000efb662ea9b90f404cd8485eae12834f84eaf538b56b339a4274ae2d0a39062d4310e327462073696e3ff3ad8ddb302cf57f514532fbd9dc37e0649499c78072d34b361036446d30c6c519442f41d071ea45e2aff53e6cdf3f3dd0332469cee820b796f5b29df760bb4ac58df663f6e1c035aa6c96499673101679dc5a7c4b5ec48f55fab4f3cb8d9c0b1cbc19d07693247a26504d49a90a60f7f9bcce40a2472df3979e0bace10b13dbbb4313bcdff1b7bfd4e37442e99e3ea9d0bd647af321e1a775d88da81de80137d93d37e471c6427a67b974715948a61f0899353654a0d74fb457bf24d4a0bfd9a2b4fbd44a310bd9a60673a6937fabd0d2d0b1b24e7c2cc6cbfe6205b744212e4207be6ec4165eaf23c1bfa3d3d09c8e6655431d703aac6ff809f1591a57d65cea5df0aabb2109cf8ad11ade02661bcb8eb018e704bbd8321e1dfe9dad0c02f1bf94c9fd52a4a17bbacbc37fff6b2881b8e66f27ca07e553876075d3ae9546adf7b7172c9556b38b7dbe0049475d568542fde45911d2fafd8628a9dffe376cb3abba281f31559529b9eb414e2e49581098dddb8ea57d48a8d8abfdf019a23ca2d8316e1244a2d214ee08e5050eb0f1907569a35f09be2f9c17ef6d4b103e2b17b348bf3ee286e54163f1950dbfc3c19d7752186d84ef66102d3cec8e18fbbd90d4911445a0701addd9508dbe52801d1608700ebe070f85640f76ef31acff341d6476ddee2dc5d9e8c2b3c37f2a2966b1853b4a517cfe5ec951bb4481767e86d8a150d78d6244d97d13a1baa05254feaa6b53b97da11f75af04624644a5ac43e5051556de93790c12d275aeec96cb3f9f04cbee17fe609f08a96385d3c04c4371e066f8f2774ff2da8b3ccba96df00af4db01f11e5ad96697b3c3de74b3b69c4a33cfd9148606514c42b92482bc3518d1484481a99104a1cb3aef30ae7ef50e7255c71eacff90c32a57cde969d058e00cd6fc9a3dfb65596909a0a6dc66cafbb61e6ccc9940c9f4da08ae3803bf2154a5f30dc50b9ca7163b3b18e5609a5ccfde5a90238e00a86a8d617b86969978f3b74ca2d2b78cce64b17be5fd6fc9665cd9591b2deeb0bfcf594884b9d8d0eaa905dac9f1d1100f6d4ec0505be1682c603feebc1fbc17bf79c583c52c9eca1d9d8f71d6862b2e39938ed4d3c68f41112ea15f662803aeadf91bb57809dac4517c16b5b7c8a55bc040d810357a6530b7f982a7c239b32d5d10c3ca690659a45cdaaac72484692d24beeae47c96e600444df552cbacad4064a9f168cda1e0dace822bfa4bb7ddd05f386f694157d18ebf27d7661242d44d33805b97fd6f2f1aa776c659c4eee9b4e4e34b8acda098ff1706d7c4ed283093aef1d62709eaee39bc4f3eb402c6dd6b3ac77b02b18e363b2cd5005f1c2df66032d0cf267c6613a9f36c67bb351ec80c485142385e6ca038d51acbe8bbb517595ee352ba60eb0b20bbf6d242fc7a36ace05be749b5cfca16fc025d4e9a08d458f550d040555d1ba42acad792072aa4ab7ed0a6027054449a88ad7220861b279c49176dde629119105e2736126d25301334110892a4aab5daf96ee18d93a6f56a34a8028bd4b4a58f97697ebdf114b6b18b27617e0feb7dd82b357cfa9eb2e6ad06a1d28c9f1de83affefb9490b494eccb513ae53ae12478c1eb38840512a4a57dc720be5172eed9dce5e2ba255294135ed3c2abe1dd0307c5d19572d51b76538a6bf6e8856760e890a0ce1d9b60c830afa45a499057e9da4d607830d8d174ce4bd870a3527334b6c53fd1e45e1c5bffb01fe0abf562be408b865c22edae21e58cf72a81022c83cf818e2f1c783f8b07cb2c7ecf3603d51d51b71143e0f96bb00a1ba649581b98eeb6ba1f56b13a5a47b6e308ce825b6f87774082468b5952a4d160b31228906edbc8d3ffa15f23ea8f500fa9352dbd25b7f6c3880523f5bd5efe28d5a8c4c7d7ba083ff48aa7e65b605d8826952e6b51cd1efd7583bddad2b752a51aa27aaadb59a76baa75381c9e01f409576a5532e5ef969a04e1f710ff7fbc5d1c9275d89d7980934693f08f6850b97b48340607d5fa5965005eedc08569e45b00693c576748d5708e07bb1bae489f791a4eb1e3c7753d6005ead85634ce7b3ebae723be6586b260202cfc56be7ab1c2cf04b8cf9c20a932b643087b613f37b5c95082f86458c7f7fbe861dc396023b1bfd76b1bac754fff0a6def0b48c5f6d89eef6dd4f770e2559261704ed02f6c81cbd1624b8f4bbc16c0112980a05d74c3e57084e3960ebe4dbc35a877ea2729e5944908e2a3fc3d75828b5cb0a9706d953b5f43ee7f216763e7a7dcd7608b54bc9d70f5c169477a2e04de2b352bdac56a9c3bfb0025a479bc76a5f658259aa45d1541b7bef473d47e9da2e6ea8652a36ae73d8376c3ebc20a0b3bc44a2222b0dce646ed21263d006eac1fce6fe61bab39a4057f4050cf60f150ef70292bae2c5a72f157f424f9fc2d3027f2e9768eb2bc91d4308067776428f4a6af6d33001fa623e5c858373761faf4253f910c2c41d271108797a969169bfcdb959c9eb012fa51bb3d95f02a3a5d7ac103e83fc3cc1aaa353edc044d260e0c95dea73bf86a51223f4747bf34e16a967b42e51d1bf7dd252e44a702547b8dfb1e2d7580507d556fdae3433421851a60a9e3ca5d672e547696658cb2258a5c820acae7c864acec646163190bc0d888b7d8a138976a970b05f58c9eb02ff19984b608757ce2bdce291e875a979ce4fbf2f20f58fd070b677f3de2269acd57d42fecd6c169e6624c9004faa92ecabf4a1f3f2171a9105b9675ab0eb4db2e7d04f9540619c04393d1dec260d11d7fbce6750eca52e07e43470ced9c335ddc5596a2684480eb7a880a16f71726700e01790afbc7aeecff5d3c4899ce65c1c7cab88ef4b4a7f1b5a79a1677285d9202ce26eadaac2b06731b13639e12a4dec59ab85525ecb220df3ce6695c18f64131ad2be8e4fc0375b727153845edbcde61a5018782c1f15fcedec6e1ededd0c7ab9731d0f3998eb4b81636a5f2c357abfc298102d2761d2a7128de3be1a21201f22484ca711603bdbf4d3bdbc2465a99ee267aea28278157f3fc62dc68411bea6c36b1baae46a8d2e1a6934ebe022d5955ea91319b79e98026fc9fa078208612c832da5f8cad7041d78b9dabd3e369ca962ea6f1ec06820cfddcf9077b6c67fc555c71d3248931f485ae300dc9d28675972c338c7b66effd84db6888c4ac90b7325ae3498952dae38ee56f37aa6ddb1232180ca4cf45e9d1adcc437325bae492d22676c85d54aac39cef4b9f85c7792cf2f41f066b03c7c932dd8e04cb92479edaf2dae0580f5330d38bceca99ec807db56aa1c298423f03956d5b0b009e24f4405c9936b713ce2da1a15fe769859739de37840d7690284ec7b267f1e388c381d649944206baa5d0f69bc3037abda65f37f0212a9928420c18107f6b1319f59f7b48bce62d1d349d5fc11181110f436065fa21cfe813c7094047067e31f1464eee605b4b1565c750ae8b632615f4d2bb9d14c4e51a6465e4eeb3efff0efcef3aa31ee67fa324adfc93f8d2ee940a1c87fdeed137ebaa0614b253d74e85246a236a832f258bd"}, {@device_b, @device_b, 0x8f, "c4a966aeb375e0f067ad0205accc155db857432438c95d18c274bd640eefa2d4441ee71da86130fd72fdade7724fe676ebe1e0066e4e8e9e9792dd0bde4461c79da7ba0fee013e471953324d8faddc8dda2b5d1c05c8e7f3e65ad8a373f3e60c1a5f4c9666fecbef8db9dfb6f1583c53bc7d70fc7179a0805226eb991a6ab59db1606048867891c9eaeca3eb8eb851"}]}}, @NL80211_ATTR_MAC={0xa}]}, 0x1614}, 0x1, 0x0, 0x0, 0x4008801}, 0x20040055) 149.744918ms ago: executing program 3 (id=354): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100766c616e000000002800028006000100000000001c0003800c00010000000000000000000c000100008000000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00'], 0x68}}, 0x0) 149.397289ms ago: executing program 1 (id=355): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) syz_open_pts(r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') dup(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 116.966271ms ago: executing program 4 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x13, 0xa10, &(0x7f00000001c0)="$eJzs3c1vXGe9B/Dv8UviulWStrm9vVGbTNKb1G19Hdu5TW7UxSWxJ4mLX5DtSI1YNKVxUBRDoQWprZBIJWBFBRKIBewqVqwqdUM3qDvYwYoFEuq/UCEWYWV0zoyTsT1jO2lsp+nnY83Mefmd5/mdOS+PZ3x8nrCzLj+y3twba6Ys7V0xtrRUPe5y/OLvPk/qfPGdHf/0gw/fLx/v3ciudOfF4vdJX5Ja0pPkyaR3bHx2ZmqDgq4nl5N8khRJdqfxuimXU/wsLYfBJyl+U9bb0a7NlsxGlvhS2+n9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7kfF2Pjw8EixKxPTF1+pNSS1NcbGZ2eKLC2tnbO8TMPHVa/fxccb1psU5SN9fctdfT+5//bsJ5LUjuSpxthTVYfk6cu7Dz+x76XHe7qWl++Uzeeye/PFvvXOu9dfW1xceHNLErn/na9PT8zNTEydOV+vTczN1E6fPDl8/MK5udq5icn63KW5+fpUbWy2fmZ+ZrY2MPZcbeT06RO1+tClmYvT58eHJuvLE0/9z+jw8Mnay0Nfq5+ZnZuZPv7y0NzYhYnJyYnp81VMObuMOVXuiF+dmK/N189M1WpXry0unFiVU3dW7b9l0MhGa1IGjW4UNDo8OjoyMjo68l6z9+xbE06+ePrFU8PDPcOrZE3EFu203F8e6ryZ7/1JHO5SV6P9TyYzkelczCuptf0Zy3hmM5OpDvObltv/o8fr69bb2v43W/meltkHyqcjOdic2Neh/e+Qy/b9vJV38m6u57UsZjELeXPHM9ren/OpZzoTmctMJjKVM9WUWnNKLadzMicznFdzIYcyl1rOZSKTqWculzKX+dSrPWoss6nnTOYzk9nUMpCxPJdaRnI6p3MitdQzlEuZycVM53zGc6Yq5WquVe/7iXVyvBU0spmg0XWC1jTmd9z+11f/csKXzlacxuGuLDXb/10bhw6MbUdCAAAAwD33X3/Knv2P/fHvSZGnq+/lz01M1od3Oi0AAADgHqou13uqfOkth55O4fM/AAAAPGiKHGx+C9CfQ42h5f+E8iUAAAAAPCCqv/8fTHHo9gSf/wEAAOAB89DyQMd77G94F/5icPn2v7UrjdcrzYjGWNF/bmKyPjQ2M/nSSI5Vdxmo/tNgTWndSdFb/fvB8znciDrc33jtv11iWWdfGTUy9NJIns+RRsSRgWfKl2cG2kSONiKfbUQ+2xrZnRWRJ8pIAHjQHWnfHhebbP97VxQ2eKBq8nsOtGmDh7WsAHC/OFJd/5/kX80uzdp8/m9GHOz0+f9/V33+77mysv1/LFcPNS4pGMrreSOLuZLBNK84ONSu1OXeCBqXIQxu8G1Af/OShb+c6srgmu8D+m6ta2vsQkYz2PYbgZZyi+UcTjTiurdoIwDANjuybju8ufZ/MIONiA6f//tdUggA95VbPdhv4cBOryMAsJJWGgAAAAAAAAAAAAAAAAAAAAAAAAAAAO69Td3A/8/HksXFhWQbOgu4NdB3JxmuP9CVbcp5xwe6k+xU7f+fO16q3Mb3y1v34A38+J+NI+juFt/JsxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbpUi6203vSnYnGU5yfPuz2jo3djqBe6W27tz3Os0obuZm3s6erUgJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODLrHn//640Xh9uTEpPV3I0yeUkX9/pHO+lmzudwI75VvXccv//rqQ3S7nR0+wAougdG5+dmSo3f7G7nP/pBx++Xz42LnttrwplAWUNKzqXaNbQMqV35VKPVkv1jy+8df17b3ynNn622jHPzp+bHJ86P/uV24FPFB81ukBo7QZhOd8fHP3Dz1sm72pW/lF6OuW/ut5zVb3ja+v9z3ZLd6h3E64tLoyWNc3XX5n//revvd0y67EcTp4ZSAZW1vTN8tGhpsOr38+Vis+KnxR78qtcrrZ/+W4US0W5ifZW6//Q1WuLC0Ovv7F45VZOP1yR074cSnIl6VuZ0/Jou5wOVeeTth6uau0tax2ugsqn/Rus47paShzp8L4+Wu0y/WvWYb06a53XobLB+97M6ETbjH7x3cdz7I639LENamyr+Kz4W3Ehf82PWvr/6Cq3/9G0PTrbFFFFtuwprfNWHF5djchqzUdbZ7y6usyORyVb4Kf5Rv7v1vbvWirK97/luNmm81FLje2Pi+TOj4vf7l3TotxWtUj7V7VIzbNPp2Waee5vRHXI8z/yQtJz4I7OKC9scEbZquP/18VA/pEb+v8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuf0XS3W56V3I0yb4ke8vxWrK0OubGXdTX1V/cTZr3zN3k/MVTdFzR4mZu5u3s2e6MAAAAAAAAANgaZ8c//eDD98tH9ff47vx3V3NOLelJsq/4Ze/Y+OzM1AYF9SaXl/+k33dnOVwunx65Pf5JOfbkBgvt7OUDAPCF9u8AAAD//yjzadA=") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.75274ms ago: executing program 3 (id=357): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "ea24ffc0"}]}}, 0x0}, 0x0) 0s ago: executing program 1 (id=358): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xf4, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000a40)="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"/268, 0x10c, 0x4005, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) mount$cgroup(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="05c9"], 0x11) r3 = getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='afs_make_fs_call\x00', r4}, 0xfffffffffffffd94) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xd, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="b571803b91f3b46ad87af8792a13d13e333f28b70db0dadf241a96d8cfeae0bf640402541a323e81505eb684decb6afb2ec5c574f7cd2e21c4271acccdf803b69041203a55f022ae3df17186c3f293ea917f2f2b68fab21f6e0a37cc0fa12aa37b654a3ee34c21cb2fb876db5e18af95b0e73eb362058942530f0753b6d60a15c80745ac4c8001d88647ad6e93de373f6fc5aaa7f3866bc27ab71117215aa2cf423cc7dec116d90f89f0dd83d9394d21447f97d7aa3ce444bc341dc74e5caaf14c37c832f801c10ba3aa2d8d40b33336a1283101fdfe071fd467a49ffa78dd36", @ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000002a80)='\x00XL\xc9\xe9+%\xf6\x83\x92D\xeb\xc4\xf6x\x86&q\f\x05\xf2N\x91\xf6\xa0\x8c\x06\xe3\xa7*\xcc\x1e\x96\x1e\x00\x00\x00 A\xe3\x0f<\x02\xe9>\xf2\xcb\xf1\x00\x00C4\x94\x01\x1a\xc9\"\xf6\x8aK\xc7]\xc9v#$*\x0f\xe2\x93\x84\xfa\x0f\x0e\x1c\xd4\x90\xc7\x1a_07\x85N\veX\xd7\r\xac\x1b\xeb&\x85\xef>\xe5\xd0Y\v\xd9\xcf\x19\x1c\xc2\x7f,\xb0\x98\xceR\xe7c^\xbd\xa7\xf8XjV\xe98\xd3[2\xfa?&:.\xd31\xf1\xdahg\x01\x01L\xb4\x84z\xf1\xfb\xaa8\x11\xc2\x00\x00\xcf<\xad*\x9f\xe8\r;\xf4Ak/Qn\xe7\xc5\x1dm\x8c\x1a\rV\xff\x1dy$\xc5\x1a\xe1\x9eP\x95\xcc@>a*$&<\x1d\xde\xde\xc3\xb5\x12\x88\x00JG{\x9aH\x96\xfd\x87\x9c)\xd7\x15_\v\xc3e\xc8r\b,A`\x1f~\xc5\x16S\x1a3|g\x8bCU\xd2!\x8c\xd6\x87\xc4\xa0\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xea\x8c\xab\x96\x9co\xf2\x04\xe1\xad\xfd\xb0\x14\xc4\xa1\xf6h \x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\xb2\xaf%\xe2+\xde\xe3\x8d<\x00\x00\x16\x8f\xe5\xf3\xca\n\xfc\x8cZ\x9e\x8e<~\xdf\x1c\xb5\xda\xb0\x034\xee.\xd3\x04\xd4\xe8\xa5b[\t\x91\xb9AV;h\v@\x902\xc1\xb8R\xfar)cBCn\xeb*\'\x7f2\x81\xeb\xd7\t\xbe\xb8;\xa7\xb1{\x8c)\x87\\i\xd6\x03\x9e\xfc\xd4I\xc4\x14\xe2\xa0\xe2\x1f\x12\x1bPH\xba$\xfa\x81\xc5\xfaE/\xd3\x8d\x89`\xe0\x1c\x19\xe4\xa4T\x9a\xa3o\x9b\xb0\x10l\xe2\xe3\xf2\x86/\xa6\xf8,\x1c\x16\x85\x84\xd8F[\xd2$w3\x0f\xdbqR\xa8\xdf(\xfb1\x86\xb2\xcd\xb2\xcd\xa6&Gr\xc0\x98\xcb\xb7\xdf\xcd\v\xb61\xcc\xd6Dou=\xadF\xb7\xbfR\xcd\xf3S\xba\xa3\xe7\x8f\xad\x02\xf9\xfd\x9b\xf7RE\xe3\x0e\xeb\xbf\x1cr\xb1\xfb\x9f)\x890\xb8c\b\xeb\xd2Q\xea\x00\xa7K\x03\x9f}\xb4\xe8\xb7J\xed\x8d\x03NwT\xab\xd6\xe7\xc3\xca\x96p\xa5\x14\xa7\xdb\xa7$\xe4\x1c^tk\xaaq\xb1\xfd\x14\xfe*u\\w \x0e\xf9\xee\x8eDd\x9d=\xfc\n\x8da\xa9\x15\xde\x8a\xe0.7gxvc\xcd\x97') syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="04ff9a1b8e23930d0fe8348ffcef75bce7d9b48f6d960923cbf7a8c346b56201706e851dbb837a90da63a1a184eeadf19bbfc7e957c4b853377c27165423ff120df0a404e9ab76c7e0231ec9cc70dcb0179d4b69ba5c9c4f9fd6800966419f3f4a5ce2a688f5071b561bfc99bddc971e072ecaaa12333291f2bdb49c35059d907ce91abc39c6003f6e98cf3252d2858165ae3b67a8f3dc9339a67068801c85cc7a9467ccc15c0184f9dd3c5e9a79557de090e6b802a8f6ef793559296443e9390c638572de513228d22ba7d5b75ea0f616a8260c35248b713832df84a92289b88cfa03fcde"], 0x9d) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYRES8=r4, @ANYRESOCT=r4, @ANYRESOCT=r7, @ANYRESHEX, @ANYRES32=r1, @ANYRES16, @ANYRES16], 0x22) r8 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000000)=0x8, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getegid() r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') read$FUSE(r9, &(0x7f0000006240)={0x2020}, 0xffffffffffffffce) write(0xffffffffffffffff, &(0x7f00000000c0)="2700000014000707030e0000120f0a0011004ad75147a2c01f52ea064d13620100f5fe0012ff00", 0x27) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 50.305900][ T3535] cgroup: Unknown subsys name 'net' [ 50.413460][ T3535] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.685140][ T3535] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.787507][ T3556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.788609][ T3558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.797375][ T3559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.803890][ T3560] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.816795][ T3560] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.817321][ T3559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.824318][ T3560] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.832658][ T3559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.845399][ T3561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.845568][ T3559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.853021][ T3561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.859790][ T3559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.867323][ T3561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.879847][ T3558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.881800][ T3561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.889116][ T3562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.896131][ T3561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.902167][ T3562] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.909231][ T3561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.915227][ T3559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.922879][ T3561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.936260][ T3560] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.937315][ T3561] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.943694][ T3562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 52.951278][ T3561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.957753][ T3559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.964529][ T3561] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.978414][ T3560] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 52.979177][ T3561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.995214][ T3551] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.343834][ T3547] chnl_net:caif_netlink_parms(): no params data found [ 53.439527][ T3545] chnl_net:caif_netlink_parms(): no params data found [ 53.489356][ T3549] chnl_net:caif_netlink_parms(): no params data found [ 53.546817][ T3544] chnl_net:caif_netlink_parms(): no params data found [ 53.576948][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.584053][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.592808][ T3547] device bridge_slave_0 entered promiscuous mode [ 53.609951][ T3546] chnl_net:caif_netlink_parms(): no params data found [ 53.633941][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.641430][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.649685][ T3547] device bridge_slave_1 entered promiscuous mode [ 53.698714][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.706021][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.713633][ T3545] device bridge_slave_0 entered promiscuous mode [ 53.751585][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.758903][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.766866][ T3545] device bridge_slave_1 entered promiscuous mode [ 53.776080][ T3547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.808459][ T3547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.829772][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.837255][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.844817][ T3544] device bridge_slave_0 entered promiscuous mode [ 53.852510][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.859693][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.867738][ T3549] device bridge_slave_0 entered promiscuous mode [ 53.899124][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.906461][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.914071][ T3544] device bridge_slave_1 entered promiscuous mode [ 53.921552][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.928676][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.936914][ T3549] device bridge_slave_1 entered promiscuous mode [ 53.945512][ T3545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.956822][ T3547] team0: Port device team_slave_0 added [ 53.963956][ T3545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.002343][ T3547] team0: Port device team_slave_1 added [ 54.008358][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.015645][ T3546] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.023594][ T3546] device bridge_slave_0 entered promiscuous mode [ 54.065366][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.072451][ T3546] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.080595][ T3546] device bridge_slave_1 entered promiscuous mode [ 54.089368][ T3544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.100282][ T3549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.112219][ T3545] team0: Port device team_slave_0 added [ 54.135108][ T3544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.145872][ T3549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.156140][ T3545] team0: Port device team_slave_1 added [ 54.170963][ T3547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.178104][ T3547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.204610][ T3547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.243325][ T3547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.250579][ T3547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.276705][ T3547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.289663][ T3546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.316281][ T3549] team0: Port device team_slave_0 added [ 54.322805][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.330275][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.356942][ T3545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.373691][ T3546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.385988][ T3544] team0: Port device team_slave_0 added [ 54.400326][ T3549] team0: Port device team_slave_1 added [ 54.414827][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.421908][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.448687][ T3545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.465383][ T3544] team0: Port device team_slave_1 added [ 54.509693][ T3546] team0: Port device team_slave_0 added [ 54.536089][ T3544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.543048][ T3544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.569349][ T3544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.589749][ T3546] team0: Port device team_slave_1 added [ 54.595965][ T3549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.602908][ T3549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.629290][ T3549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.652168][ T3545] device hsr_slave_0 entered promiscuous mode [ 54.658994][ T3545] device hsr_slave_1 entered promiscuous mode [ 54.666687][ T3544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.673646][ T3544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.699912][ T3544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.713475][ T3547] device hsr_slave_0 entered promiscuous mode [ 54.720145][ T3547] device hsr_slave_1 entered promiscuous mode [ 54.727089][ T3547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.734846][ T3547] Cannot create hsr debugfs directory [ 54.748505][ T3549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.755699][ T3549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.781673][ T3549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.833244][ T3546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.840351][ T3546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.866523][ T3546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.881789][ T3546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.888980][ T3546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.915052][ T3546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.963751][ T3549] device hsr_slave_0 entered promiscuous mode [ 54.970699][ T3549] device hsr_slave_1 entered promiscuous mode [ 54.977381][ T3549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.984924][ T3549] Cannot create hsr debugfs directory [ 54.994938][ T3544] device hsr_slave_0 entered promiscuous mode [ 55.001805][ T3544] device hsr_slave_1 entered promiscuous mode [ 55.008366][ T3544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.016624][ T3544] Cannot create hsr debugfs directory [ 55.076009][ T3563] Bluetooth: hci3: command tx timeout [ 55.076019][ T3556] Bluetooth: hci1: command tx timeout [ 55.076220][ T3556] Bluetooth: hci4: command tx timeout [ 55.081600][ T3563] Bluetooth: hci2: command tx timeout [ 55.087749][ T3556] Bluetooth: hci0: command tx timeout [ 55.132232][ T3546] device hsr_slave_0 entered promiscuous mode [ 55.139258][ T3546] device hsr_slave_1 entered promiscuous mode [ 55.146547][ T3546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.154106][ T3546] Cannot create hsr debugfs directory [ 55.402341][ T3549] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.415884][ T3549] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.428055][ T3549] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.438345][ T3549] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.458739][ T3547] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.474765][ T3547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.491166][ T3547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.513087][ T3547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.564007][ T3545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.588559][ T3545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.598222][ T3545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.612862][ T3545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.649993][ T3544] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.662913][ T3544] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.688223][ T3544] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.726129][ T3544] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.743308][ T3549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.801307][ T3545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.818955][ T3546] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.839768][ T3547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.849295][ T3546] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.859090][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.868500][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.876635][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.884179][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.909343][ T3545] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.918927][ T3549] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.927300][ T3546] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.937329][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.945865][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.956397][ T3547] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.979143][ T3546] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.991036][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.000155][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.009434][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.016720][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.025794][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.036351][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.044770][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.051895][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.059829][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.068818][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.078176][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.085282][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.092792][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.101560][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.110062][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.117167][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.124700][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.133565][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.142092][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.150690][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.159455][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.166604][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.176708][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.184637][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.192849][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.200925][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.233280][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.261539][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.273549][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.282390][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.289508][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.297424][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.306254][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.314928][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.323756][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.348085][ T3544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.355327][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.363957][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.373103][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.381873][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.390850][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.399501][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.408240][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.417177][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.425302][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.444209][ T3549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.454730][ T3549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.477891][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.487761][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.496538][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.504995][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.514676][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.523385][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.531916][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.540565][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.549128][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.557641][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.566107][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.574726][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.583941][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.618082][ T3544] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.636135][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.671518][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.681240][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.695320][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.728983][ T3547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.761862][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.779835][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.789188][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.798336][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.806940][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.815457][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.822520][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.830132][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.838798][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.847871][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.854937][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.862519][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.900071][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.909499][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.918405][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.930064][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.940325][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.952652][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.971613][ T3546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.984892][ T3549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.005747][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.013622][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.023715][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.060810][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.069840][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.084431][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.092702][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.105989][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.114750][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.136050][ T3546] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.143180][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.155640][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.155702][ T3556] Bluetooth: hci0: command tx timeout [ 57.163462][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.169624][ T3556] Bluetooth: hci2: command tx timeout [ 57.177664][ T3551] Bluetooth: hci1: command tx timeout [ 57.181693][ T3556] Bluetooth: hci4: command tx timeout [ 57.181720][ T3556] Bluetooth: hci3: command tx timeout [ 57.198959][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.211930][ T3545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.222047][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.269732][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.279674][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.288834][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.298451][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.307448][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.316337][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.325265][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.333890][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.342579][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.349687][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.358131][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.367759][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.376929][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.384579][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.394252][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.421934][ T3545] device veth0_vlan entered promiscuous mode [ 57.432588][ T3549] device veth0_vlan entered promiscuous mode [ 57.448070][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.458558][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.468510][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.481300][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.492432][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.499570][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.513602][ T3547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.527313][ T3545] device veth1_vlan entered promiscuous mode [ 57.540597][ T3549] device veth1_vlan entered promiscuous mode [ 57.555539][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.563662][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.573676][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.622502][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.631864][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.643191][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.652375][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.661688][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.671152][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.679950][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.693767][ T3545] device veth0_macvtap entered promiscuous mode [ 57.718319][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.736077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.744721][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.754364][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.763148][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.773077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.783787][ T3545] device veth1_macvtap entered promiscuous mode [ 57.791726][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.818276][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.832758][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.841546][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.859914][ T3549] device veth0_macvtap entered promiscuous mode [ 57.890272][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.900065][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.909544][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.922070][ T3544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.937488][ T3549] device veth1_macvtap entered promiscuous mode [ 57.964911][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.990547][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.020859][ T3549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.045474][ T3549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.067150][ T3549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.074570][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.091014][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.100709][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.126048][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.134741][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.144119][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.153364][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.167778][ T3545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.176905][ T3545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.186262][ T3545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.194957][ T3545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.210465][ T3549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.221388][ T3549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.232595][ T3549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.260594][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.269724][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.291240][ T3549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.300517][ T3549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.310757][ T3549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.319694][ T3549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.341547][ T3546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.354632][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.363604][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.372641][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.380527][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.388016][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.396784][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.429278][ T3547] device veth0_vlan entered promiscuous mode [ 58.449624][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.458353][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.499381][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.507967][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.516819][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.525076][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.533300][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.542307][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.551143][ T3544] device veth0_vlan entered promiscuous mode [ 58.580514][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.588629][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.601905][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.621614][ T3547] device veth1_vlan entered promiscuous mode [ 58.627926][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.636694][ T3544] device veth1_vlan entered promiscuous mode [ 58.667931][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.739885][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.748971][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.763473][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.777682][ T3546] device veth0_vlan entered promiscuous mode [ 58.784256][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.792486][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.803354][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.811342][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.830829][ T3544] device veth0_macvtap entered promiscuous mode [ 58.843380][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.853225][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.861768][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.870565][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.879524][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.890796][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.898714][ T3546] device veth1_vlan entered promiscuous mode [ 58.907532][ T3544] device veth1_macvtap entered promiscuous mode [ 58.915394][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.932970][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.936147][ T3547] device veth0_macvtap entered promiscuous mode [ 58.945083][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.951834][ T3547] device veth1_macvtap entered promiscuous mode [ 58.979251][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.988205][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.997282][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.005236][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.012958][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.021066][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.029515][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.044380][ T3546] device veth0_macvtap entered promiscuous mode [ 59.072973][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.084895][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.094940][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.105754][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.117628][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.127614][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.153926][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.163290][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.171976][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.180921][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.192332][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.203708][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.214228][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.224986][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.235423][ T3563] Bluetooth: hci1: command tx timeout [ 59.235619][ T3551] Bluetooth: hci3: command tx timeout [ 59.240826][ T3563] Bluetooth: hci4: command tx timeout [ 59.246273][ T3551] Bluetooth: hci2: command tx timeout [ 59.252684][ T3556] Bluetooth: hci0: command tx timeout [ 59.265927][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.276591][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.287695][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.297311][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.307820][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.318346][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.329767][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.341535][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.350958][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.369676][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.386385][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.398688][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.408707][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.419791][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.431321][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.442867][ T3546] device veth1_macvtap entered promiscuous mode [ 59.455692][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.482736][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.491663][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.501359][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.510286][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.519175][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.528161][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.539963][ T3547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.548881][ T3547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.559565][ T3547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.568522][ T3547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.591852][ T3544] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.601246][ T3544] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.618743][ T3544] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.633075][ T3544] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.662684][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.681518][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.697500][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.711868][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.729567][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.742286][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.754742][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.765643][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.776454][ T3633] QAT: Device 253 not found [ 59.787579][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.811694][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.824045][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.854622][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.871476][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.883164][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.895632][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.906775][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.917472][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.928098][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.939883][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.955691][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.971270][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.982295][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.004401][ T3546] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.014335][ T3546] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.023723][ T3546] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.033716][ T3546] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.128531][ T3635] loop2: detected capacity change from 0 to 512 [ 60.190347][ T3635] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.227052][ T3635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.235271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.281341][ T3635] EXT4-fs (loop2): 1 truncate cleaned up [ 60.305562][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.330410][ T3635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 60.332754][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.347096][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.365008][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.375902][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.384500][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.443727][ T3635] syz.2.7 (pid 3635) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 60.496997][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.512243][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.525768][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.533165][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.550190][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.566039][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.579742][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.616248][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.617091][ T3545] EXT4-fs (loop2): unmounting filesystem. [ 60.630039][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.656525][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.680928][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.725790][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.316222][ T3551] Bluetooth: hci4: command tx timeout [ 61.316373][ T3563] Bluetooth: hci0: command tx timeout [ 61.328259][ T48] Bluetooth: hci1: command tx timeout [ 61.328308][ T3548] Bluetooth: hci3: command tx timeout [ 61.328576][ T3556] Bluetooth: hci2: command tx timeout [ 61.475413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 61.483617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 61.641040][ T3649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 61.650939][ T3654] loop3: detected capacity change from 0 to 2048 [ 61.693677][ T3665] loop0: detected capacity change from 0 to 128 [ 61.756303][ T3654] Alternate GPT is invalid, using primary GPT. [ 61.762714][ T3654] loop3: p1 p2 p3 [ 61.815199][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.853291][ T3665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 61.910020][ T3665] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 61.962308][ T3665] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.11: No space for directory leaf checksum. Please run e2fsck -D. [ 62.043028][ T3665] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.11: checksumming directory block 0 [ 62.076793][ T3675] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.11: No space for directory leaf checksum. Please run e2fsck -D. [ 62.110320][ T3675] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.11: checksumming directory block 0 [ 62.146202][ T3676] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.11: No space for directory leaf checksum. Please run e2fsck -D. [ 62.175441][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.200562][ T3676] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.11: checksumming directory block 0 [ 62.202525][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 62.252292][ T3665] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.11: No space for directory leaf checksum. Please run e2fsck -D. [ 62.284906][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.308712][ T3675] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.11: No space for directory leaf checksum. Please run e2fsck -D. [ 62.361160][ T3665] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.11: checksumming directory block 0 [ 62.373371][ T3675] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.11: checksumming directory block 0 [ 62.425428][ T3665] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.11: No space for directory leaf checksum. Please run e2fsck -D. [ 62.474518][ T3665] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.11: checksumming directory block 0 [ 63.170366][ T3676] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.11: No space for directory leaf checksum. Please run e2fsck -D. [ 63.186482][ T14] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.247458][ T3676] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.11: checksumming directory block 0 [ 63.255115][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.262059][ T3675] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.11: No space for directory leaf checksum. Please run e2fsck -D. [ 63.291540][ T3674] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.297666][ T3675] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.11: checksumming directory block 0 [ 63.316397][ T14] usb 3-1: Product: syz [ 63.323690][ T14] usb 3-1: Manufacturer: syz [ 63.332331][ T14] usb 3-1: SerialNumber: syz [ 63.388722][ T14] cdc_ncm 3-1:1.0: skipping garbage [ 63.396823][ T3665] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.11: No space for directory leaf checksum. Please run e2fsck -D. [ 63.404726][ T14] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 63.430084][ T14] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 63.447230][ T14] cdc_ncm 3-1:1.0: bind() failure [ 63.456001][ T3665] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.11: checksumming directory block 0 [ 63.488774][ T3675] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.11: No space for directory leaf checksum. Please run e2fsck -D. [ 63.603030][ T3675] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.11: checksumming directory block 0 [ 63.623833][ T153] usb 3-1: USB disconnect, device number 2 [ 63.805781][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 63.875761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.883168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.888793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 63.909817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 63.935061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.943941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.963322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.518354][ T3707] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 64.572465][ T3563] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 64.664304][ T3707] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 64.717769][ T3707] syz.0.23 (3707) used greatest stack depth: 20120 bytes left [ 64.869463][ T3722] loop0: detected capacity change from 0 to 512 [ 64.940491][ T3722] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.990501][ T3722] EXT4-fs (loop0): 1 truncate cleaned up [ 65.135209][ T3722] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 65.269572][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 65.349128][ T3736] loop0: detected capacity change from 0 to 512 [ 65.453263][ T3736] EXT4-fs: Ignoring removed nobh option [ 65.475868][ T3593] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.550522][ T3736] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.614713][ T3736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.677339][ T3736] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 65.725110][ T3593] usb 2-1: Using ep0 maxpacket: 16 [ 65.864185][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 66.055379][ T3593] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 66.078521][ T3593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.125077][ T3593] usb 2-1: Product: syz [ 66.135748][ T3593] usb 2-1: Manufacturer: syz [ 66.140380][ T3593] usb 2-1: SerialNumber: syz [ 66.166878][ T3593] usb 2-1: config 0 descriptor?? [ 66.211824][ T3593] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 66.242235][ T3593] dvb-usb: bulk message failed: -22 (2/0) [ 66.270638][ T3593] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 66.315979][ T3593] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 66.339469][ T3766] loop0: detected capacity change from 0 to 512 [ 66.360600][ T3593] usb 2-1: media controller created [ 66.382771][ T3593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.397623][ T3766] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.433484][ T3593] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 66.449089][ T3766] EXT4-fs (loop0): 1 truncate cleaned up [ 66.454804][ T3766] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 66.515331][ T3563] Bluetooth: hci2: command tx timeout [ 66.521995][ T3593] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 66.626301][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 66.885153][ T3593] rc_core: IR keymap rc-dtt200u not found [ 66.890951][ T3593] Registered IR keymap rc-empty [ 66.924498][ T3593] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 66.966575][ T3593] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 67.004641][ T3593] dvb-usb: schedule remote query interval to 300 msecs. [ 67.128129][ T3785] loop2: detected capacity change from 0 to 512 [ 67.134601][ T3593] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 67.154928][ T3785] EXT4-fs: Ignoring removed nobh option [ 67.164671][ T3785] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.182382][ T3593] usb 2-1: USB disconnect, device number 2 [ 67.239199][ T3785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.265220][ T3785] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 67.288486][ T3593] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 67.419458][ T3545] EXT4-fs (loop2): unmounting filesystem. [ 67.510579][ T3800] netlink: 'syz.3.57': attribute type 10 has an invalid length. [ 67.549028][ T3800] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 67.622553][ T3556] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 67.799581][ T3812] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.59'. [ 68.715813][ T3821] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 68.727437][ T3821] qnx6: wrong signature (magic) in superblock #1. [ 68.733904][ T3821] qnx6: unable to read the first superblock [ 69.282173][ T3831] loop0: detected capacity change from 0 to 512 [ 69.322697][ T3831] EXT4-fs: Ignoring removed nobh option [ 69.371064][ T3831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.435494][ T153] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.450355][ T3831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.461184][ T3831] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 69.475276][ T3556] Bluetooth: hci3: command tx timeout [ 69.516637][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 69.545743][ T26] audit: type=1326 audit(1720767219.416:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 69.631694][ T26] audit: type=1326 audit(1720767219.476:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 69.705323][ T153] usb 5-1: Using ep0 maxpacket: 16 [ 69.716715][ T3846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.72'. [ 70.177049][ T153] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 70.285568][ T26] audit: type=1326 audit(1720767220.136:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 70.311402][ T153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.506314][ T153] usb 5-1: Product: syz [ 70.655854][ T153] usb 5-1: Manufacturer: syz [ 70.682095][ T26] audit: type=1326 audit(1720767220.146:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 70.707686][ T153] usb 5-1: SerialNumber: syz [ 70.713317][ T26] audit: type=1326 audit(1720767220.146:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 70.735654][ T153] usb 5-1: config 0 descriptor?? [ 70.750136][ T26] audit: type=1326 audit(1720767220.146:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 70.778232][ T26] audit: type=1326 audit(1720767220.146:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 70.833478][ T26] audit: type=1326 audit(1720767220.146:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 70.975813][ T26] audit: type=1326 audit(1720767220.146:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 71.028211][ T153] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 71.038158][ T153] dvb-usb: bulk message failed: -22 (2/0) [ 71.043901][ T153] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 71.085449][ T153] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 71.142899][ T3870] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 71.155007][ T3870] qnx6: wrong signature (magic) in superblock #1. [ 71.162039][ T3870] qnx6: unable to read the first superblock [ 71.219874][ T153] usb 5-1: media controller created [ 71.243980][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.258235][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.353021][ T26] audit: type=1326 audit(1720767220.146:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 71.490594][ T153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.747677][ T153] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 71.775359][ T153] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 71.951048][ T3880] loop2: detected capacity change from 0 to 512 [ 72.000426][ T3880] EXT4-fs: Ignoring removed nobh option [ 72.031354][ T3880] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.136911][ T3880] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.192027][ T3880] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 72.205420][ T153] rc_core: IR keymap rc-dtt200u not found [ 72.211164][ T153] Registered IR keymap rc-empty [ 72.237743][ T153] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 72.306453][ T3545] EXT4-fs (loop2): unmounting filesystem. [ 72.353432][ T153] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 72.419243][ T3900] loop2: detected capacity change from 0 to 256 [ 72.419803][ T3900] ======================================================= [ 72.419803][ T3900] WARNING: The mand mount option has been deprecated and [ 72.419803][ T3900] and is ignored by this kernel. Remove the mand [ 72.419803][ T3900] option from the mount to silence this warning. [ 72.419803][ T3900] ======================================================= [ 72.420870][ T3900] FAT-fs (loop2): Unrecognized mount option "tz=Uortname=win95" or missing value [ 72.436738][ T153] dvb-usb: schedule remote query interval to 300 msecs. [ 72.436762][ T153] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 72.596376][ T3563] Bluetooth: hci3: command 0x0406 tx timeout [ 72.608323][ T153] usb 5-1: USB disconnect, device number 2 [ 72.611800][ T3670] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.645810][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.655406][ T3907] loop0: detected capacity change from 0 to 256 [ 73.293915][ T153] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 73.475401][ T3670] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.729191][ T3900] loop2: detected capacity change from 0 to 32768 [ 73.742383][ T3900] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.85 (3900) [ 73.807771][ T3900] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.819537][ T3900] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 73.829260][ T3900] BTRFS info (device loop2): setting nodatasum [ 73.844509][ T3900] BTRFS info (device loop2): force zlib compression, level 3 [ 73.864024][ T3900] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 73.951993][ T3900] BTRFS info (device loop2): use lzo compression, level 0 [ 74.397391][ T3900] BTRFS info (device loop2): turning on flush-on-commit [ 74.417036][ T3900] BTRFS info (device loop2): enabling auto defrag [ 74.447485][ T3900] BTRFS info (device loop2): using free space tree [ 74.774796][ T3900] BTRFS info (device loop2): enabling ssd optimizations [ 74.783044][ T3942] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 74.793620][ T3942] qnx6: wrong signature (magic) in superblock #1. [ 74.800047][ T3942] qnx6: unable to read the first superblock [ 75.108759][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 75.108774][ T26] audit: type=1800 audit(1720767224.986:40): pid=3948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.85" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 75.457804][ T3545] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.361600][ T155] cfg80211: failed to load regulatory.db [ 76.515355][ T3955] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.581923][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 76.805213][ T3955] usb 3-1: Using ep0 maxpacket: 16 [ 76.889533][ T3548] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 76.889629][ T3548] CPU: 0 PID: 3548 Comm: kworker/u5:1 Not tainted 6.1.98-syzkaller #0 [ 76.889650][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 76.889661][ T3548] Workqueue: hci3 hci_rx_work [ 76.889697][ T3548] Call Trace: [ 76.889703][ T3548] [ 76.889711][ T3548] dump_stack_lvl+0x1e3/0x2cb [ 76.889744][ T3548] ? nf_tcp_handle_invalid+0x642/0x642 [ 76.889773][ T3548] ? panic+0x764/0x764 [ 76.889807][ T3548] sysfs_create_dir_ns+0x2c6/0x390 [ 76.889838][ T3548] ? sysfs_warn_dup+0xa0/0xa0 [ 76.889875][ T3548] kobject_add_internal+0x6df/0xd10 [ 76.889906][ T3548] kobject_add+0x14e/0x210 [ 76.889928][ T3548] ? device_add+0x3c2/0xfd0 [ 76.889947][ T3548] ? kobject_init+0x1d0/0x1d0 [ 76.889968][ T3548] ? __raw_spin_lock_init+0x41/0x100 [ 76.889988][ T3548] ? get_device_parent+0x128/0x400 [ 76.890012][ T3548] device_add+0x476/0xfd0 [ 76.890041][ T3548] hci_conn_add_sysfs+0xe4/0x1f0 [ 76.890065][ T3548] le_conn_complete_evt+0xcc6/0x1320 [ 76.890092][ T3548] ? trace_contention_end+0x61/0x170 [ 76.890117][ T3548] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 76.890137][ T3548] ? __mutex_unlock_slowpath+0x218/0x750 [ 76.890159][ T3548] ? mutex_unlock+0x10/0x10 [ 76.890173][ T3548] ? skb_pull_data+0x10e/0x220 [ 76.890197][ T3548] hci_le_enh_conn_complete_evt+0x181/0x410 [ 76.890225][ T3548] hci_event_packet+0xa40/0x1510 [ 76.890252][ T3548] ? hci_remote_host_features_evt+0x210/0x210 [ 76.890281][ T3548] ? bis_list+0x290/0x290 [ 76.890298][ T3548] ? do_raw_spin_unlock+0x137/0x8a0 [ 76.890319][ T3548] ? kcov_remote_start+0x4b5/0x7d0 [ 76.890340][ T3548] ? lockdep_hardirqs_on+0x50/0x130 [ 76.890366][ T3548] ? hci_send_to_monitor+0x99/0x4d0 [ 76.890387][ T3548] hci_rx_work+0x3cd/0xce0 [ 76.890403][ T3548] ? do_raw_spin_unlock+0x137/0x8a0 [ 76.890426][ T3548] ? process_one_work+0x7a9/0x11d0 [ 76.890445][ T3548] process_one_work+0x8a9/0x11d0 [ 76.890480][ T3548] ? worker_detach_from_pool+0x260/0x260 [ 76.890504][ T3548] ? _raw_spin_lock_irqsave+0x120/0x120 [ 76.890525][ T3548] ? kthread_data+0x4e/0xc0 [ 76.890562][ T3548] ? wq_worker_running+0x97/0x190 [ 76.890593][ T3548] worker_thread+0xa47/0x1200 [ 76.890620][ T3548] ? __sched_text_start+0x8/0x8 [ 76.890667][ T3548] kthread+0x28d/0x320 [ 76.890683][ T3548] ? worker_clr_flags+0x190/0x190 [ 76.890702][ T3548] ? kthread_blkcg+0xd0/0xd0 [ 76.890721][ T3548] ret_from_fork+0x1f/0x30 [ 76.890760][ T3548] [ 76.890814][ T3548] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 76.890839][ T3548] Bluetooth: hci3: failed to register connection device [ 76.908974][ T3968] loop4: detected capacity change from 0 to 512 [ 76.909599][ T3968] EXT4-fs: Ignoring removed nobh option [ 76.914193][ T3968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.007596][ T3968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.115284][ T3955] usb 3-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 77.149551][ T3968] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 77.153305][ T3955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.234177][ T3983] loop1: detected capacity change from 0 to 2048 [ 77.261858][ T3955] usb 3-1: Product: syz [ 77.304475][ T3983] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.353390][ T3955] usb 3-1: Manufacturer: syz [ 77.353412][ T3955] usb 3-1: SerialNumber: syz [ 77.363262][ T3955] usb 3-1: config 0 descriptor?? [ 77.378213][ T3547] EXT4-fs (loop4): unmounting filesystem. [ 77.398063][ T3955] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 77.398098][ T3955] dvb-usb: bulk message failed: -22 (2/0) [ 77.398132][ T3955] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 77.415470][ T3955] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 77.415528][ T3955] usb 3-1: media controller created [ 77.416555][ T3955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.420149][ T3955] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 77.517305][ T3955] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 77.624002][ T3989] binder: 3988:3989 ioctl 4018620d 0 returned -22 [ 77.744955][ T3995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 77.765435][ T3955] rc_core: IR keymap rc-dtt200u not found [ 77.771545][ T3955] Registered IR keymap rc-empty [ 77.777155][ T3995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 77.845750][ T3955] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 77.933867][ T3955] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7 [ 77.995521][ T3955] dvb-usb: schedule remote query interval to 300 msecs. [ 78.019542][ T3955] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 78.061135][ T3955] usb 3-1: USB disconnect, device number 3 [ 78.124265][ T3955] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 78.762151][ T4017] loop0: detected capacity change from 0 to 8192 [ 78.816166][ T4017] loop0: p1 p2 p3 p4[EZD] [ 78.821067][ T4017] loop0: partition table partially beyond EOD, truncated [ 78.845004][ T4017] loop0: p1 size 16128 extends beyond EOD, truncated [ 78.882146][ T4017] loop0: p2 size 2130728454 extends beyond EOD, truncated [ 78.915174][ T3563] Bluetooth: hci3: command 0x0406 tx timeout [ 78.926130][ T4017] loop0: p3 start 459039 is beyond EOD, truncated [ 78.939653][ T4017] loop0: p4 start 268437891 is beyond EOD, truncated [ 78.965177][ T155] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 79.204219][ T3563] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 79.224987][ T3563] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 79.365345][ T155] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.536018][ T155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.563926][ T4027] loop4: detected capacity change from 0 to 512 [ 79.571092][ T155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.583078][ T155] usb 3-1: Product: syz [ 79.590145][ T155] usb 3-1: Manufacturer: syz [ 79.597979][ T155] usb 3-1: SerialNumber: syz [ 79.629006][ T4027] EXT4-fs: Ignoring removed nobh option [ 79.631827][ T4029] loop1: detected capacity change from 0 to 128 [ 79.643493][ T4027] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.708841][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 79.726484][ T4027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.774925][ T4027] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 79.851991][ T3547] EXT4-fs (loop4): unmounting filesystem. [ 79.942922][ T4036] binder: 4035:4036 ioctl 4018620d 0 returned -22 [ 80.385205][ T3955] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.645272][ T3955] usb 2-1: Using ep0 maxpacket: 16 [ 81.066562][ T4047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.125'. [ 81.086164][ T155] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 81.094569][ T155] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 81.121091][ T155] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 81.215412][ T3955] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 81.232015][ T4054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.128'. [ 81.243761][ T3955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.261460][ T3955] usb 2-1: Product: syz [ 81.271686][ T3955] usb 2-1: Manufacturer: syz [ 81.287151][ T3955] usb 2-1: SerialNumber: syz [ 81.302997][ T3955] usb 2-1: config 0 descriptor?? [ 81.305388][ T155] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 81.344129][ T155] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 81.391936][ T3955] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 81.422371][ T3955] dvb-usb: bulk message failed: -22 (2/0) [ 81.439048][ T3955] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 81.469732][ T155] usb 3-1: USB disconnect, device number 4 [ 81.508470][ T155] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 81.525483][ T3955] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 81.553252][ T3955] usb 2-1: media controller created [ 81.565652][ T3955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.616109][ T3955] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 81.661642][ T3955] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 81.855172][ T3955] rc_core: IR keymap rc-dtt200u not found [ 81.861060][ T3955] Registered IR keymap rc-empty [ 81.879561][ T3955] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 81.929058][ T3955] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input8 [ 81.992661][ T3955] dvb-usb: schedule remote query interval to 300 msecs. [ 82.015458][ T3955] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 82.071729][ T3955] usb 2-1: USB disconnect, device number 3 [ 82.107231][ T4066] syz.2.132 uses obsolete (PF_INET,SOCK_PACKET) [ 82.150051][ T3955] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 82.348595][ T4071] binder: 4070:4071 ioctl 4018620d 0 returned -22 [ 82.610155][ T3563] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 82.610220][ T3563] CPU: 0 PID: 3563 Comm: kworker/u5:10 Not tainted 6.1.98-syzkaller #0 [ 82.610241][ T3563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 82.610254][ T3563] Workqueue: hci1 hci_rx_work [ 82.610278][ T3563] Call Trace: [ 82.610285][ T3563] [ 82.610293][ T3563] dump_stack_lvl+0x1e3/0x2cb [ 82.610327][ T3563] ? nf_tcp_handle_invalid+0x642/0x642 [ 82.610358][ T3563] ? panic+0x764/0x764 [ 82.610393][ T3563] sysfs_create_dir_ns+0x2c6/0x390 [ 82.610426][ T3563] ? sysfs_warn_dup+0xa0/0xa0 [ 82.610461][ T3563] kobject_add_internal+0x6df/0xd10 [ 82.610489][ T3563] kobject_add+0x14e/0x210 [ 82.610510][ T3563] ? device_add+0x3c2/0xfd0 [ 82.610531][ T3563] ? kobject_init+0x1d0/0x1d0 [ 82.610554][ T3563] ? __raw_spin_lock_init+0x41/0x100 [ 82.610575][ T3563] ? get_device_parent+0x128/0x400 [ 82.610600][ T3563] device_add+0x476/0xfd0 [ 82.610633][ T3563] hci_conn_add_sysfs+0xe4/0x1f0 [ 82.610659][ T3563] le_conn_complete_evt+0xcc6/0x1320 [ 82.610687][ T3563] ? trace_contention_end+0x61/0x170 [ 82.610719][ T3563] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 82.610755][ T3563] ? __mutex_unlock_slowpath+0x218/0x750 [ 82.610782][ T3563] ? mutex_unlock+0x10/0x10 [ 82.610799][ T3563] ? skb_pull_data+0x10e/0x220 [ 82.610824][ T3563] hci_le_enh_conn_complete_evt+0x181/0x410 [ 82.610852][ T3563] hci_event_packet+0xa40/0x1510 [ 82.610879][ T3563] ? hci_remote_host_features_evt+0x210/0x210 [ 82.610910][ T3563] ? bis_list+0x290/0x290 [ 82.610930][ T3563] ? do_raw_spin_unlock+0x137/0x8a0 [ 82.610952][ T3563] ? kcov_remote_start+0x4b5/0x7d0 [ 82.610974][ T3563] ? lockdep_hardirqs_on+0x50/0x130 [ 82.610996][ T3563] ? hci_send_to_monitor+0x99/0x4d0 [ 82.611017][ T3563] hci_rx_work+0x3cd/0xce0 [ 82.611033][ T3563] ? do_raw_spin_unlock+0x137/0x8a0 [ 82.611058][ T3563] ? process_one_work+0x7a9/0x11d0 [ 82.611084][ T3563] process_one_work+0x8a9/0x11d0 [ 82.611122][ T3563] ? worker_detach_from_pool+0x260/0x260 [ 82.611145][ T3563] ? _raw_spin_lock_irqsave+0x120/0x120 [ 82.611165][ T3563] ? kthread_data+0x4e/0xc0 [ 82.611197][ T3563] ? wq_worker_running+0x97/0x190 [ 82.611227][ T3563] worker_thread+0xa47/0x1200 [ 82.611252][ T3563] ? _raw_spin_unlock+0x40/0x40 [ 82.611277][ T3563] ? __sched_text_start+0x8/0x8 [ 82.611308][ T3563] ? _raw_spin_unlock+0x40/0x40 [ 82.611341][ T3563] kthread+0x28d/0x320 [ 82.611357][ T3563] ? worker_clr_flags+0x190/0x190 [ 82.611376][ T3563] ? kthread_blkcg+0xd0/0xd0 [ 82.611395][ T3563] ret_from_fork+0x1f/0x30 [ 82.611432][ T3563] [ 82.611497][ T3563] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 82.611522][ T3563] Bluetooth: hci1: failed to register connection device [ 82.797126][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 84.352694][ T4093] netlink: 60 bytes leftover after parsing attributes in process `syz.4.140'. [ 84.542215][ T4099] loop4: detected capacity change from 0 to 512 [ 84.553900][ T4099] EXT4-fs: Ignoring removed nobh option [ 84.576236][ T4099] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.639171][ T4099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 84.669239][ T4099] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 84.686777][ T3563] Bluetooth: hci1: command tx timeout [ 84.724156][ T3547] EXT4-fs (loop4): unmounting filesystem. [ 84.811863][ T4109] binder: BINDER_SET_CONTEXT_MGR already set [ 84.873479][ T4109] binder: 4108:4109 ioctl 4018620d 20000040 returned -16 [ 84.873668][ T4113] binder: 4108:4113 ioctl c0306201 200003c0 returned -22 [ 84.944862][ T4111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.954568][ T4111] team0: Port device bond0 added [ 84.964393][ T4109] binder_alloc: 4108: binder_alloc_buf, no vma [ 85.028098][ T4111] team0: Port device team_slave_0 removed [ 85.040961][ T4111] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 85.179777][ T4116] loop0: detected capacity change from 0 to 4096 [ 85.310120][ T4116] NILFS (loop0): invalid segment: Checksum error in segment payload [ 85.325615][ T4116] NILFS (loop0): trying rollback from an earlier position [ 85.352364][ T4120] loop4: detected capacity change from 0 to 1024 [ 85.396599][ T3563] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 85.405985][ T3563] Bluetooth: hci2: Injecting HCI hardware error event [ 85.414076][ T3548] Bluetooth: hci2: hardware error 0x00 [ 85.488778][ T4120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 85.499844][ T4116] NILFS (loop0): recovery complete [ 85.585521][ T4127] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.261827][ T3652] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 86.349400][ T3652] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1788 with error 28 [ 86.370351][ T3652] EXT4-fs (loop4): This should not happen!! Data will be lost [ 86.370351][ T3652] [ 86.500762][ T3652] EXT4-fs (loop4): Total free blocks count 0 [ 86.508960][ T3652] EXT4-fs (loop4): Free/Dirty block details [ 86.517485][ T3652] EXT4-fs (loop4): free_blocks=68451041280 [ 86.523590][ T3652] EXT4-fs (loop4): dirty_blocks=1792 [ 86.533076][ T3652] EXT4-fs (loop4): Block reservation details [ 86.555494][ T3652] EXT4-fs (loop4): i_reserved_data_blocks=112 [ 86.704632][ T4144] binder: BINDER_SET_CONTEXT_MGR already set [ 86.721128][ T4144] binder: 4143:4144 ioctl 4018620d 20000040 returned -16 [ 86.746070][ T4144] binder: 4143:4144 ioctl c0306201 200003c0 returned -22 [ 86.757665][ T3547] EXT4-fs (loop4): unmounting filesystem. [ 86.762621][ T4144] binder_alloc: 4143: binder_alloc_buf, no vma [ 87.475226][ T3548] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 87.618894][ T4158] loop2: detected capacity change from 0 to 32768 [ 87.635266][ T4158] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.161 (4158) [ 87.662386][ T4158] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 87.740500][ T4158] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 87.785007][ T4158] BTRFS info (device loop2): using free space tree [ 88.713686][ T4158] BTRFS info (device loop2): enabling ssd optimizations [ 88.895495][ T4201] binder: BINDER_SET_CONTEXT_MGR already set [ 88.940658][ T4201] binder: 4200:4201 ioctl 4018620d 20000040 returned -16 [ 88.963079][ T4206] binder: 4200:4206 ioctl c0306201 200003c0 returned -22 [ 89.015578][ T4201] binder_alloc: 4200: binder_alloc_buf, no vma [ 89.138316][ T3548] Bluetooth: hci0: unexpected event 0x30 length: 31 > 3 [ 89.244008][ T4212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.277587][ T4212] team0: Port device bond0 added [ 89.572475][ T4212] team0: Port device team_slave_0 removed [ 89.604332][ T4212] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 90.559561][ T3545] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 91.533799][ T4236] netlink: 'syz.1.178': attribute type 10 has an invalid length. [ 91.586082][ T3563] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 91.703249][ T4236] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 92.158591][ T3563] Bluetooth: hci0: unexpected event 0x30 length: 31 > 3 [ 93.554170][ T4256] loop2: detected capacity change from 0 to 32768 [ 93.565302][ T3563] Bluetooth: hci0: command tx timeout [ 93.582273][ T4256] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.177 (4256) [ 93.600994][ T4256] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.715224][ T4241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.748155][ T4256] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 93.799604][ T4256] BTRFS info (device loop2): using free space tree [ 93.915108][ T4241] usb 2-1: device descriptor read/64, error -71 [ 94.078515][ T4271] loop0: detected capacity change from 0 to 65536 [ 94.120818][ T3563] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 94.185124][ T4241] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.197154][ T4271] XFS (loop0): Mounting V5 Filesystem [ 94.200706][ T4256] BTRFS info (device loop2): enabling ssd optimizations [ 94.246911][ T4256] BTRFS error (device loop2): balance: invalid convert metadata profile single [ 94.319780][ T4271] XFS (loop0): Ending clean mount [ 94.405161][ T4241] usb 2-1: device descriptor read/64, error -71 [ 94.476388][ T3546] XFS (loop0): Unmounting Filesystem [ 94.528607][ T4241] usb usb2-port1: attempt power cycle [ 94.578108][ T3545] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.952885][ T3556] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 94.955165][ T4241] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.095363][ T4241] usb 2-1: device descriptor read/8, error -71 [ 95.514209][ T3556] Bluetooth: hci3: unexpected event 0x30 length: 31 > 3 [ 95.545204][ T4241] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.645719][ T3556] Bluetooth: hci0: command 0x0406 tx timeout [ 95.675324][ T4241] usb 2-1: device descriptor read/8, error -71 [ 95.795261][ T4241] usb usb2-port1: unable to enumerate USB device [ 95.844090][ T3548] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 95.844141][ T3548] CPU: 1 PID: 3548 Comm: kworker/u5:1 Not tainted 6.1.98-syzkaller #0 [ 95.844155][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 95.844162][ T3548] Workqueue: hci4 hci_rx_work [ 95.844179][ T3548] Call Trace: [ 95.844186][ T3548] [ 95.844191][ T3548] dump_stack_lvl+0x1e3/0x2cb [ 95.844212][ T3548] ? nf_tcp_handle_invalid+0x642/0x642 [ 95.844228][ T3548] ? panic+0x764/0x764 [ 95.844247][ T3548] sysfs_create_dir_ns+0x2c6/0x390 [ 95.844265][ T3548] ? sysfs_warn_dup+0xa0/0xa0 [ 95.844285][ T3548] kobject_add_internal+0x6df/0xd10 [ 95.844302][ T3548] kobject_add+0x14e/0x210 [ 95.844316][ T3548] ? device_add+0x3c2/0xfd0 [ 95.844329][ T3548] ? kobject_init+0x1d0/0x1d0 [ 95.844342][ T3548] ? __raw_spin_lock_init+0x41/0x100 [ 95.844355][ T3548] ? get_device_parent+0x128/0x400 [ 95.844369][ T3548] device_add+0x476/0xfd0 [ 95.844387][ T3548] hci_conn_add_sysfs+0xe4/0x1f0 [ 95.844401][ T3548] le_conn_complete_evt+0xcc6/0x1320 [ 95.844416][ T3548] ? trace_contention_end+0x61/0x170 [ 95.844437][ T3548] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 95.844450][ T3548] ? __mutex_unlock_slowpath+0x218/0x750 [ 95.844466][ T3548] ? mutex_unlock+0x10/0x10 [ 95.844477][ T3548] ? skb_pull_data+0x10e/0x220 [ 95.844501][ T3548] hci_le_enh_conn_complete_evt+0x181/0x410 [ 95.844529][ T3548] hci_event_packet+0xa40/0x1510 [ 95.844556][ T3548] ? hci_remote_host_features_evt+0x210/0x210 [ 95.844587][ T3548] ? bis_list+0x290/0x290 [ 95.844607][ T3548] ? do_raw_spin_unlock+0x137/0x8a0 [ 95.844644][ T3548] ? kcov_remote_start+0x4b5/0x7d0 [ 95.844668][ T3548] ? lockdep_hardirqs_on+0x50/0x130 [ 95.844695][ T3548] ? hci_send_to_monitor+0x99/0x4d0 [ 95.844716][ T3548] hci_rx_work+0x3cd/0xce0 [ 95.844727][ T3548] ? do_raw_spin_unlock+0x137/0x8a0 [ 95.844741][ T3548] ? process_one_work+0x7a9/0x11d0 [ 95.844753][ T3548] process_one_work+0x8a9/0x11d0 [ 95.844773][ T3548] ? worker_detach_from_pool+0x260/0x260 [ 95.844788][ T3548] ? _raw_spin_lock_irqsave+0x120/0x120 [ 95.844800][ T3548] ? kthread_data+0x4e/0xc0 [ 95.844817][ T3548] ? wq_worker_running+0x97/0x190 [ 95.844835][ T3548] worker_thread+0xa47/0x1200 [ 95.844849][ T3548] ? __sched_text_start+0x8/0x8 [ 95.844874][ T3548] kthread+0x28d/0x320 [ 95.844883][ T3548] ? worker_clr_flags+0x190/0x190 [ 95.844894][ T3548] ? kthread_blkcg+0xd0/0xd0 [ 95.844905][ T3548] ret_from_fork+0x1f/0x30 [ 95.844927][ T3548] [ 95.844941][ T3548] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 95.844956][ T3548] Bluetooth: hci4: failed to register connection device [ 97.439520][ T3548] Bluetooth: hci1: command tx timeout [ 97.682349][ T3556] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 97.719299][ T3548] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 97.875318][ T3548] Bluetooth: hci4: command tx timeout [ 97.914820][ T4364] loop1: detected capacity change from 0 to 512 [ 97.941104][ T4364] EXT4-fs: Ignoring removed nobh option [ 97.961230][ T4364] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.992066][ T4366] input: syz1 as /devices/virtual/input/input9 [ 98.029019][ T4364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.093328][ T4364] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 98.252210][ T3544] EXT4-fs (loop1): unmounting filesystem. [ 98.473263][ T4347] loop0: detected capacity change from 0 to 65536 [ 98.500787][ T3548] Bluetooth: hci0: unexpected event 0x30 length: 31 > 3 [ 98.519387][ T4347] XFS (loop0): Mounting V5 Filesystem [ 98.539654][ T26] audit: type=1326 audit(1720767248.416:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b73175bd9 code=0x7ffc0000 [ 98.565103][ T26] audit: type=1326 audit(1720767248.446:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b73175bd9 code=0x7ffc0000 [ 98.589248][ T26] audit: type=1326 audit(1720767248.446:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4b73175bd9 code=0x7ffc0000 [ 98.614838][ T26] audit: type=1326 audit(1720767248.446:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b73175bd9 code=0x7ffc0000 [ 98.638193][ T26] audit: type=1326 audit(1720767248.446:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b73175bd9 code=0x7ffc0000 [ 98.660821][ T26] audit: type=1326 audit(1720767248.446:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f4b73175bd9 code=0x7ffc0000 [ 98.688121][ T26] audit: type=1326 audit(1720767248.446:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b73175bd9 code=0x7ffc0000 [ 98.689069][ T4347] XFS (loop0): Ending clean mount [ 98.735700][ T26] audit: type=1326 audit(1720767248.446:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b73175bd9 code=0x7ffc0000 [ 98.757788][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.765511][ T4235] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.829830][ T26] audit: type=1326 audit(1720767248.446:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f4b73175bd9 code=0x7ffc0000 [ 98.892602][ T26] audit: type=1326 audit(1720767248.446:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b73175bd9 code=0x7ffc0000 [ 98.924110][ T3546] XFS (loop0): Unmounting Filesystem [ 98.936290][ T4395] binder: 4394:4395 ioctl c0306201 0 returned -14 [ 98.985326][ T4235] usb 5-1: device descriptor read/64, error -71 [ 99.255119][ T4235] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.455247][ T4235] usb 5-1: device descriptor read/64, error -71 [ 99.459788][ T4404] process 'syz.2.224' launched './file1' with NULL argv: empty string added [ 99.583721][ T4235] usb usb5-port1: attempt power cycle [ 99.927133][ T4421] netlink: 'syz.0.230': attribute type 11 has an invalid length. [ 99.945353][ T4421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.230'. [ 99.960031][ T4423] binder: 4422:4423 ioctl c0306201 0 returned -14 [ 99.995148][ T4235] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.095309][ T4235] usb 5-1: device descriptor read/8, error -71 [ 100.365319][ T4235] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.381569][ T4432] kvm: MWAIT instruction emulated as NOP! [ 100.465209][ T4235] usb 5-1: device descriptor read/8, error -71 [ 100.586575][ T4235] usb usb5-port1: unable to enumerate USB device [ 101.125872][ T4420] loop3: detected capacity change from 0 to 65536 [ 101.168538][ T4457] netlink: 'syz.1.244': attribute type 11 has an invalid length. [ 101.168585][ T4457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'. [ 101.185975][ T4420] XFS (loop3): Mounting V5 Filesystem [ 101.212774][ T3548] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 101.311437][ T4420] XFS (loop3): Ending clean mount [ 101.378051][ T3549] XFS (loop3): Unmounting Filesystem [ 101.706148][ T3556] Bluetooth: hci0: unexpected event 0x30 length: 31 > 3 [ 101.758225][ T4486] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 101.842525][ T4483] input: syz0 as /devices/virtual/input/input10 [ 102.120109][ T4495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 102.284825][ T4497] loop4: detected capacity change from 0 to 256 [ 102.292423][ T4497] FAT-fs (loop4): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 102.292423][ T4497] 18446744073709551615" or missing value [ 102.653225][ T4497] kvm: emulating exchange as write [ 103.548939][ T4538] loop4: detected capacity change from 0 to 256 [ 103.606385][ T4538] exfat: Deprecated parameter 'utf8' [ 103.630180][ T4492] loop2: detected capacity change from 0 to 65536 [ 103.638205][ T26] kauditd_printk_skb: 139 callbacks suppressed [ 103.638219][ T26] audit: type=1326 audit(1720767253.526:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4535 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 103.672072][ T4538] exfat: Deprecated parameter 'namecase' [ 103.678871][ T4538] exfat: Deprecated parameter 'utf8' [ 103.689457][ T26] audit: type=1326 audit(1720767253.526:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4535 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 103.722489][ T4538] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d) [ 103.824212][ T4492] XFS (loop2): Mounting V5 Filesystem [ 103.920232][ T4492] XFS (loop2): Ending clean mount [ 104.104320][ T3545] XFS (loop2): Unmounting Filesystem [ 104.172700][ T4551] loop4: detected capacity change from 0 to 8192 [ 104.223804][ T4551] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.240061][ T4551] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 104.254756][ T4551] REISERFS (device loop4): using ordered data mode [ 104.261879][ T4551] reiserfs: using flush barriers [ 104.270381][ T4551] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.287867][ T4551] REISERFS (device loop4): checking transaction log (loop4) [ 104.310926][ T4551] REISERFS (device loop4): Using r5 hash to sort names [ 104.320947][ T4551] REISERFS (device loop4): using 3.5.x disk format [ 104.333526][ T4551] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 104.372591][ T26] audit: type=1326 audit(1720767254.246:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4535 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 105.463087][ T4559] Zero length message leads to an empty skb [ 105.821678][ T4566] loop1: detected capacity change from 0 to 512 [ 105.933367][ T4566] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.277: casefold flag without casefold feature [ 105.949564][ T4566] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.277: missing EA_INODE flag [ 105.965508][ T4566] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.277: error while reading EA inode 12 err=-117 [ 106.021565][ T4566] EXT4-fs (loop1): 1 orphan inode deleted [ 106.040935][ T4566] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.201404][ T3556] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 106.457595][ T3544] EXT4-fs (loop1): unmounting filesystem. [ 106.951373][ T26] audit: type=1326 audit(1720767256.826:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba4b75bd9 code=0x7fc00000 [ 107.031121][ T26] audit: type=1326 audit(1720767256.846:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ba4b75bd9 code=0x7fc00000 [ 107.053419][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.132879][ T4590] loop0: detected capacity change from 0 to 65536 [ 107.215248][ T4583] loop3: detected capacity change from 0 to 32768 [ 107.235566][ T4583] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.281 (4583) [ 107.261065][ T4590] XFS (loop0): Mounting V5 Filesystem [ 107.300040][ T4583] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.376770][ T4590] XFS (loop0): Ending clean mount [ 107.391032][ T4583] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 107.415235][ T4583] BTRFS info (device loop3): using free space tree [ 107.430788][ T3548] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 107.466019][ T4614] netlink: 'syz.1.288': attribute type 10 has an invalid length. [ 107.516960][ T3548] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 107.529377][ T3546] XFS (loop0): Unmounting Filesystem [ 107.621379][ T26] audit: type=1326 audit(1720767257.496:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba4b75bd9 code=0x7fc00000 [ 107.677901][ T4583] BTRFS info (device loop3): enabling ssd optimizations [ 107.745482][ T4583] BTRFS error (device loop3): balance: invalid convert metadata profile single [ 107.764776][ T26] audit: type=1326 audit(1720767257.496:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9ba4b75bd9 code=0x7fc00000 [ 107.870079][ T26] audit: type=1326 audit(1720767257.496:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba4b75bd9 code=0x7fc00000 [ 107.925264][ T26] audit: type=1326 audit(1720767257.496:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba4b75bd9 code=0x7fc00000 [ 107.968360][ T26] audit: type=1326 audit(1720767257.496:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba4b75bd9 code=0x7fc00000 [ 107.990657][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.762340][ T3549] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.787677][ T4640] loop4: detected capacity change from 0 to 512 [ 108.797443][ T4640] EXT4-fs: Ignoring removed nobh option [ 108.851571][ T4640] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.156453][ T4640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.156576][ T4640] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 110.227547][ T3548] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 110.255859][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 110.310970][ T3547] EXT4-fs (loop4): unmounting filesystem. [ 110.478425][ T4669] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 110.638734][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 110.638749][ T26] audit: type=1326 audit(1720767260.516:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 110.652069][ T26] audit: type=1326 audit(1720767260.526:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 111.244537][ T4690] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 111.255246][ T4690] qnx6: wrong signature (magic) in superblock #1. [ 111.261689][ T4690] qnx6: unable to read the first superblock [ 111.355101][ T26] audit: type=1326 audit(1720767261.216:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 111.452298][ T26] audit: type=1326 audit(1720767261.216:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 111.557825][ T26] audit: type=1326 audit(1720767261.216:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 111.583332][ T4685] loop0: detected capacity change from 0 to 32768 [ 111.598522][ T4685] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.304 (4685) [ 111.642857][ T26] audit: type=1326 audit(1720767261.216:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 111.667845][ T4685] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.689480][ T4685] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 111.713213][ T4685] BTRFS info (device loop0): using free space tree [ 111.732679][ T26] audit: type=1326 audit(1720767261.216:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 111.754912][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.787465][ T26] audit: type=1326 audit(1720767261.216:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 111.850720][ T26] audit: type=1326 audit(1720767261.216:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 111.872890][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.997537][ T26] audit: type=1326 audit(1720767261.216:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5bd75bd9 code=0x7fc00000 [ 112.136108][ T4710] loop2: detected capacity change from 0 to 256 [ 112.142489][ T4685] BTRFS info (device loop0): enabling ssd optimizations [ 112.349383][ T4685] BTRFS error (device loop0): balance: invalid convert metadata profile single [ 112.448268][ T4719] syz.2.308[4719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.448636][ T4719] syz.2.308[4719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.917037][ T4667] loop4: detected capacity change from 0 to 65536 [ 113.043301][ T3546] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.174124][ T4667] XFS (loop4): Mounting V5 Filesystem [ 113.378588][ T4667] XFS (loop4): Ending clean mount [ 113.503241][ T3547] XFS (loop4): Unmounting Filesystem [ 113.510646][ T4752] netlink: 'syz.0.312': attribute type 10 has an invalid length. [ 113.657297][ T3556] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.345648][ T3636] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.765154][ T3636] usb 4-1: Using ep0 maxpacket: 32 [ 115.921354][ T4767] loop0: detected capacity change from 0 to 32768 [ 115.946467][ T4767] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.322 (4767) [ 115.995450][ T3636] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.008693][ T3636] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.185374][ T3636] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 116.226875][ T3636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.235787][ T3636] usb 4-1: Product: syz [ 116.240140][ T3636] usb 4-1: Manufacturer: syz [ 116.244758][ T3636] usb 4-1: SerialNumber: syz [ 116.261056][ T4767] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.273382][ T4767] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 116.282710][ T4767] BTRFS info (device loop0): using free space tree [ 116.290180][ T3548] Bluetooth: hci4: unexpected event 0x30 length: 31 > 3 [ 116.364210][ T4795] team0: Port device team_slave_0 removed [ 116.441289][ T4795] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 116.526589][ T3636] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 116.834107][ T4820] netlink: 'syz.4.332': attribute type 10 has an invalid length. [ 116.838840][ T3636] usb 4-1: USB disconnect, device number 2 [ 116.874299][ T3636] usblp0: removed [ 116.891163][ T4767] BTRFS error (device loop0): open_ctree failed [ 116.902642][ T3556] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 116.945923][ T4820] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 117.339005][ T4828] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 117.349852][ T4828] qnx6: wrong signature (magic) in superblock #1. [ 117.356446][ T4828] qnx6: unable to read the first superblock [ 118.328776][ T4844] loop1: detected capacity change from 0 to 512 [ 118.329416][ T4844] EXT4-fs: Ignoring removed nobh option [ 118.329946][ T4844] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.357405][ T4842] binder: BINDER_SET_CONTEXT_MGR already set [ 118.357440][ T4842] binder: 4841:4842 ioctl 4018620d 20000040 returned -16 [ 118.357750][ T4842] binder: 4841:4842 ioctl c0306201 200003c0 returned -22 [ 118.359538][ T4842] binder_alloc: 4841: binder_alloc_buf, no vma [ 118.372940][ T4839] loop2: detected capacity change from 0 to 1764 [ 118.412256][ T4844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.457517][ T4844] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038 (0x7fffffff) [ 118.485129][ T3565] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.531561][ T4833] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 118.538893][ T3544] EXT4-fs (loop1): unmounting filesystem. [ 119.552848][ T3556] Bluetooth: hci4: command tx timeout [ 119.629558][ T3556] Bluetooth: hci4: unexpected event 0x30 length: 31 > 3 [ 120.106986][ T4863] loop1: detected capacity change from 0 to 2048 [ 120.195233][ T4322] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.313909][ T4863] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.483882][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 120.483895][ T26] audit: type=1800 audit(1720767270.356:331): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.342" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 120.516022][ T4322] usb 4-1: Using ep0 maxpacket: 32 [ 120.645524][ T4322] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.661124][ T4868] loop0: detected capacity change from 0 to 32768 [ 120.667800][ T4322] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.670493][ T26] audit: type=1800 audit(1720767270.406:332): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.342" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 120.707664][ T4868] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.344 (4868) [ 120.879314][ T4868] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.892833][ T4868] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 120.896763][ T4884] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 120.935541][ T4884] qnx6: wrong signature (magic) in superblock #1. [ 120.942020][ T4884] qnx6: unable to read the first superblock [ 120.957814][ T4322] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.977741][ T4868] BTRFS info (device loop0): using free space tree [ 120.986428][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.006789][ T4322] usb 4-1: Product: syz [ 121.026786][ T4322] usb 4-1: Manufacturer: syz [ 121.041079][ T4322] usb 4-1: SerialNumber: syz [ 121.094145][ T3544] EXT4-fs (loop1): unmounting filesystem. [ 121.157943][ T4868] BTRFS info (device loop0): enabling ssd optimizations [ 121.204853][ T4868] BTRFS error (device loop0): balance: invalid convert metadata profile single [ 121.393149][ T4322] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 122.201084][ T4322] usb 4-1: USB disconnect, device number 3 [ 122.220244][ T4322] usblp0: removed [ 122.265497][ T3546] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.444693][ T4919] loop4: detected capacity change from 0 to 1764 [ 123.508719][ T3556] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 123.571879][ T4919] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 123.572255][ T4919] ------------[ cut here ]------------ [ 123.572295][ T4919] WARNING: CPU: 0 PID: 4919 at arch/x86/kvm/x86.c:11207 kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.572345][ T4919] Modules linked in: [ 123.572361][ T4919] CPU: 0 PID: 4919 Comm: syz.4.356 Not tainted 6.1.98-syzkaller #0 [ 123.572382][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 123.572395][ T4919] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.572422][ T4919] Code: e8 c4 79 d1 00 e9 62 eb ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 6a eb ff ff 4c 89 ff e8 a9 79 d1 00 e9 5d eb ff ff e8 bf f5 79 00 <0f> 0b e9 07 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 05 f9 ff [ 123.572443][ T4919] RSP: 0018:ffffc9000552fc68 EFLAGS: 00010283 [ 123.572463][ T4919] RAX: ffffffff8110a091 RBX: 0000000000000000 RCX: 0000000000040000 [ 123.572479][ T4919] RDX: ffffc9000a0ca000 RSI: 00000000000003de RDI: 00000000000003df [ 123.572493][ T4919] RBP: ffff88805d5fd26c R08: ffffffff8117fa21 R09: fffffbfff2093868 [ 123.572509][ T4919] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888022e61dc0 [ 123.572523][ T4919] R13: ffff88805d5fcf80 R14: ffff88805aec9000 R15: dffffc0000000000 [ 123.572539][ T4919] FS: 00007f9ba5a2e6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 123.572558][ T4919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.572573][ T4919] CR2: 0000001b3190fff8 CR3: 000000001bbe9000 CR4: 00000000003526f0 [ 123.572592][ T4919] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.572604][ T4919] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 123.572618][ T4919] Call Trace: [ 123.572626][ T4919] [ 123.572635][ T4919] ? __warn+0x15a/0x520 [ 123.572657][ T4919] ? kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.572687][ T4919] ? report_bug+0x2af/0x500 [ 123.572707][ T4919] ? kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.572738][ T4919] ? handle_bug+0x3d/0x70 [ 123.572756][ T4919] ? exc_invalid_op+0x16/0x40 [ 123.572775][ T4919] ? asm_exc_invalid_op+0x16/0x20 [ 123.572809][ T4919] ? kvm_lapic_hv_timer_in_use+0x61/0xc0 [ 123.572838][ T4919] ? kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.572865][ T4919] ? kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.572891][ T4919] ? kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.572925][ T4919] ? kvm_arch_vcpu_ioctl_run+0x13e/0x2470 [ 123.572950][ T4919] ? get_task_pid+0x1f/0x300 [ 123.572980][ T4919] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 123.573001][ T4919] ? __fget_files+0x28/0x4a0 [ 123.573027][ T4919] ? xa_release+0x50/0x50 [ 123.573059][ T4919] ? __fget_files+0x28/0x4a0 [ 123.573079][ T4919] ? __fget_files+0x435/0x4a0 [ 123.573101][ T4919] ? __fget_files+0x28/0x4a0 [ 123.573127][ T4919] ? bpf_lsm_file_ioctl+0x5/0x10 [ 123.573149][ T4919] ? security_file_ioctl+0x7d/0xa0 [ 123.573169][ T4919] ? xa_release+0x50/0x50 [ 123.573192][ T4919] __se_sys_ioctl+0xf1/0x160 [ 123.573226][ T4919] do_syscall_64+0x3b/0xb0 [ 123.573253][ T4919] ? clear_bhb_loop+0x45/0xa0 [ 123.573289][ T4919] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.573316][ T4919] RIP: 0033:0x7f9ba4b75bd9 [ 123.573339][ T4919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.573355][ T4919] RSP: 002b:00007f9ba5a2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.573376][ T4919] RAX: ffffffffffffffda RBX: 00007f9ba4d03f60 RCX: 00007f9ba4b75bd9 [ 123.573390][ T4919] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 123.573403][ T4919] RBP: 00007f9ba4be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 123.573416][ T4919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.573429][ T4919] R13: 000000000000000b R14: 00007f9ba4d03f60 R15: 00007ffd0a895338 [ 123.573462][ T4919] [ 123.573472][ T4919] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.573482][ T4919] CPU: 0 PID: 4919 Comm: syz.4.356 Not tainted 6.1.98-syzkaller #0 [ 123.573502][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 123.573512][ T4919] Call Trace: [ 123.573518][ T4919] [ 123.573525][ T4919] dump_stack_lvl+0x1e3/0x2cb [ 123.573558][ T4919] ? nf_tcp_handle_invalid+0x642/0x642 [ 123.573588][ T4919] ? panic+0x764/0x764 [ 123.573610][ T4919] ? 0xffffffffa0001f94 [ 123.573630][ T4919] ? vscnprintf+0x59/0x80 [ 123.573656][ T4919] panic+0x318/0x764 [ 123.573679][ T4919] ? __warn+0x169/0x520 [ 123.573698][ T4919] ? memcpy_page_flushcache+0xfc/0xfc [ 123.573736][ T4919] __warn+0x348/0x520 [ 123.573755][ T4919] ? kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.573784][ T4919] report_bug+0x2af/0x500 [ 123.573802][ T4919] ? kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.573829][ T4919] handle_bug+0x3d/0x70 [ 123.573844][ T4919] exc_invalid_op+0x16/0x40 [ 123.573857][ T4919] asm_exc_invalid_op+0x16/0x20 [ 123.573878][ T4919] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.573901][ T4919] Code: e8 c4 79 d1 00 e9 62 eb ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 6a eb ff ff 4c 89 ff e8 a9 79 d1 00 e9 5d eb ff ff e8 bf f5 79 00 <0f> 0b e9 07 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 05 f9 ff [ 123.573914][ T4919] RSP: 0018:ffffc9000552fc68 EFLAGS: 00010283 [ 123.573929][ T4919] RAX: ffffffff8110a091 RBX: 0000000000000000 RCX: 0000000000040000 [ 123.573940][ T4919] RDX: ffffc9000a0ca000 RSI: 00000000000003de RDI: 00000000000003df [ 123.573952][ T4919] RBP: ffff88805d5fd26c R08: ffffffff8117fa21 R09: fffffbfff2093868 [ 123.573964][ T4919] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888022e61dc0 [ 123.573975][ T4919] R13: ffff88805d5fcf80 R14: ffff88805aec9000 R15: dffffc0000000000 [ 123.573994][ T4919] ? kvm_lapic_hv_timer_in_use+0x61/0xc0 [ 123.574018][ T4919] ? kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.574044][ T4919] ? kvm_arch_vcpu_ioctl_run+0x22b1/0x2470 [ 123.574072][ T4919] ? kvm_arch_vcpu_ioctl_run+0x13e/0x2470 [ 123.574093][ T4919] ? get_task_pid+0x1f/0x300 [ 123.574118][ T4919] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 123.574135][ T4919] ? __fget_files+0x28/0x4a0 [ 123.574157][ T4919] ? xa_release+0x50/0x50 [ 123.574184][ T4919] ? __fget_files+0x28/0x4a0 [ 123.574200][ T4919] ? __fget_files+0x435/0x4a0 [ 123.574218][ T4919] ? __fget_files+0x28/0x4a0 [ 123.574240][ T4919] ? bpf_lsm_file_ioctl+0x5/0x10 [ 123.574257][ T4919] ? security_file_ioctl+0x7d/0xa0 [ 123.574274][ T4919] ? xa_release+0x50/0x50 [ 123.574299][ T4919] __se_sys_ioctl+0xf1/0x160 [ 123.574328][ T4919] do_syscall_64+0x3b/0xb0 [ 123.574353][ T4919] ? clear_bhb_loop+0x45/0xa0 [ 123.574378][ T4919] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.574402][ T4919] RIP: 0033:0x7f9ba4b75bd9 [ 123.574416][ T4919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.574429][ T4919] RSP: 002b:00007f9ba5a2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.574446][ T4919] RAX: ffffffffffffffda RBX: 00007f9ba4d03f60 RCX: 00007f9ba4b75bd9 [ 123.574458][ T4919] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 123.574469][ T4919] RBP: 00007f9ba4be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 123.574479][ T4919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.574490][ T4919] R13: 000000000000000b R14: 00007f9ba4d03f60 R15: 00007ffd0a895338 [ 123.574516][ T4919] [ 123.582598][ T4919] Kernel Offset: disabled [ 124.297841][ T4919] Rebooting in 86400 seconds..