last executing test programs: 7.919288417s ago: executing program 1 (id=239): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000240)=0x17, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 7.515329161s ago: executing program 1 (id=241): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) 6.376596317s ago: executing program 2 (id=244): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c010000000101"], 0x10c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000000c0)=0x7fff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000005b0001800c00028005000100010000000c0002800500"], 0x8c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.196511818s ago: executing program 1 (id=245): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.116463243s ago: executing program 2 (id=246): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) connect$netlink(0xffffffffffffffff, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 6.036727397s ago: executing program 1 (id=247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_TDX_INIT_VM(r1, 0xc008aeba, 0x0) 5.974399561s ago: executing program 2 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x3, 0x3, 0x4, 0x3, 0x5, 0xb, 0x8, 0x7, 0x9, 0x6, 0x3, 0x9, 0x8, 0xf, 0x3], 0x1, [0x1, 0x10, 0x3, 0x9, 0x0, 0x3, 0x6, 0xadf, 0x7fff, 0x81, 0xff, 0x800, 0xcbe6, 0xd80, 0xf638, 0x1], [0x3, 0x9, 0x8, 0x4, 0x0, 0x3, 0xc, 0x6, 0x5, 0x0, 0xe, 0x8001, 0x8a67, 0x4, 0x7fff, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x404c001}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="ba", 0x1, 0x40, 0x0, 0x0) 5.773709293s ago: executing program 3 (id=250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) sendfile(r0, r0, 0x0, 0x6) 5.660433989s ago: executing program 2 (id=251): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000240)=0x17, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 5.619205282s ago: executing program 1 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(0x0, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) close(r5) setrlimit(0x7, &(0x7f00000000c0)={0xd219, 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x69d, &(0x7f0000000840)="$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") 5.535994577s ago: executing program 3 (id=253): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f00000003c0)=ANY=[], 0x1f, 0x1518, &(0x7f0000001040)="$eJzs3AuYTlX7MPD7XmttxjTxNMlhWGvdmycNlkOSHJLkkCTJK0lOCaFJkoTEOCZpSJIcJ8lhCMlhGpPG+XzIOUmSJklCQsL6Lr369PYe+t7/2/e5vnfu33Xty7qfve+11973fuxn7ed65tseI+s0q1uzCRHBfwT/+k8yAMQAwFAAyAcAAQBUjK8Yf2l9HonJ/9lO2J/rwbSrPQJ2NXH9czauf87G9c/ZuP45G9c/Z+P652xc/5yN689YTrZ1VuHreMm5Cz//z8n4/v9fJLvMxC/Xl7mh57+RwvXP2bj+ORvXP2fj+udsXP+cjeufs3H9czauP2M52f/82TF/d/DfsFzt648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWM5w1l+hAODX9tUeF2OMMcYYY4wxxv48PvfVHgFjjDHGGGOMMcb+70MQIAERIBfkhhjIA7FwDcTBtZAX8kEEroN4uB7yww1QAApCISgMCVAEioIGAxYIQigGxSEKN0IJuAkSoSSUgtLgoAyUhXJQHm6GCnALVIRboRLcBpWhClSFanA7VIc7oAbcCTXhLqgFtaEO1IW7oR7cA/XhXmgA90FDuB8awQPQGP4CTeBBaAoPQTN4GJrDI9ACWkIraA1t/kf5z0MfeAH6Qj9Ihv4wAAbCIBgMQ+BFGAovwTB4GYbDK5ACI2AkvAqj4DUYDa/DGHgDxsKbMA7GwwSYCJNgMqTCWzAF3oap8A5Mg+kwA2ZCGsyC2fAuzIG5MA/eg/nwPiyAhbAIFkM6fAAZsAQy4UNYCh9BFiyD5bACVsIqWA1rYC2sg/WwATbCJtgMW2ArfAzbYDvsgJ2wC3bDHvgE9sKnsA8+g/3w+b+Zf+Z3+T0REFCgQIUKc2EujMEYjMVYjMM4zIt5MYIRjMd4zI/5sQAWwEJYCBMwAYtiUTRokJBQXb6SSmAJTMRELIWl0KHDslgWy+PNWAErYEWsiJWwElbGKlgFq2E1rI7VsQbWwJpYE2thLayDdfBuvBvvwfpYHxtgA2yIDbERNsLG2BibYBNsik2xGTbD5tgcW2ALbIWtsA22wbbYFtthO+yAHbAjdsTO2BmTMAm7YBfsil2xG3bD7tgde2AP7Im9sBc+j8/jC/gC9sNaoj8OwAE4CAfhEHwRX8SXcBi+jC/jK5iCI3Akvoqv4ms4Gk/jGHwDx+JYrC7G4wSciCQmYyqm4hScglNxKk7D6TgdZ2IazsLZOBvn4Fyci+/hfHwf38eFuBAXYzqmYwYuwUzMxKV4BrNwGS7HFbgSV+FKXINrcQ2uxw24HjfhJtyCW/Bj/Bi343bciTtx96VzjZ/gp/gppuB+3I8H8AAexIN4CA9hNmbjYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZPIvn8Byex2cTvm66u+S6FBCXKKFELpFLxIgYEStiRZyIE3lFXhEREREv4kV+kV8UEAVEIVFIJIgEUVQUFUYYQSIUxUQxERVRUUKUEIkiUZQSpYQTTpQVZUV5UV5UEBVERXGrqCRuE5VFFdHeVRPVRHXRwdUQd4qaoqaoJWqLOqKuqCvqiXqivqgvGogGoqFoKBqJB0Rj0R+H4IPiUmWaiRHYXIzEFqKlaCVai9fwUdFWjMZ2or3oIB4Xb+AY7CzauiTxpOgiJmBX8bSYiM+I7mIy9hDPiZ6il+gtnhd9RDvXV/QT07C/GCBm4iAxWAwRL4o5WFtcqlgd8YpIESPESPGqWIyviV+v8bHiTTFOjBcTxEQxSUwWqeItMUW8LaaKd8Q0MV3MEDNFmpglZot3xRwxV8wT74n54n2xQCwUi8RikS4+EBliicgUH4ql4iORJZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+FtvEdrFD7BS7xG6xR3wi9opPxT7xmdgvPhcHxBfioPhSHBJfiWzxtTgsvhFHxLfiqPhOHBPfi+PihDgpfhCnxI/itDgjzoqfxDnxszgvLoiLwguQKIWUUslA5pK5ZYzMI2PlNTJOXivzynwyIq+T8fJ6mV/eIAvIgrKQLCwTZBFZVGpppJUkQ1lMFpdReaMsIW+SibKkLCVLSyfLyLKynCwvb5YV5C2yorxVVpK3ycqyiqwqq8nbZXV5h6wh75Q15V2ylqwt68i68m5ZT94j68t7ZQN5n2wo75eN5AOysfyLbCIflE3lQ7KZfFg2l4/IFrKlbCVbyzbyUdlWPibbyfayg3xcdpSdZGf5hEyST8ou8inZVT4tu8lnZHf5rOwhn5M9ZS/ZW16QF6WXfWU/mSz7ywFyoBwkB8sh8kU5VL4kh8mX5XD5ikyJAQD5qhwlX5Oj5etyjHxDjpVvynFyvJwgJ8pJcrJMlW/JKfJtOVW+I6fJ6XKGnCnT5Cw55HJP8/4P8t/+B/nDZYocIbfIrfJjuU1ulzvkTrlL7pZ75B65V+6V++Q+uV/ulwfkAXlQHpSH5CGZLbPlYXlYHpFH5FF5VB6Tx+RxeUL+JH+Qp+SP8rQ8I8/In+Q5eU6ev3wOQKESSiqlApVL5VYxKo+KVdeoOHWtyqvyqYi6TsWr61V+dYMqoAqqQqqwSlBFVFGllVFWkQpVMVVcRdWNePktokqp0sqpMqqsKvfv5KsS6iaVqEr+Tf4fja+NaqPaqraqnWqnOqgOqqPqqDqrzipJJakuqovqqrqqbqqb6q66qx6qh+qpeqreqrfqo/qovqqvSlbJaoAaqAapwWqIelEN7Q9qmBqmhqvhKkWlqJFqpBqlRqnRarQao8aosWqsGqfGqQlqgpqkJqlUlaqmqClqqpqqpqlpaoaaodJUmpqtZqs5ao6ap+ap+Wq+WqAWqEVqkUpX6SpDZahMlamWqqUqSy1Ty9QKtUKtUqvUGrVGrVPr1Aa1QW1Sm1SW2qq2qm1qm9qhdqhdapfao/aovWqv2qf2qf1qvzqgDqiD6qA6pA6pbJWtDqvD6og6oo6qo+qYOqaOq+PqpDqpTqlT6rQ6rc6qs+qcOqfOq/PqorqoIIBABCJQgQpyBbmCmCAmiA1ig7ggLsgb5A0iQSSID+KD/MENQYGgYFAoKBwkBEWCooEOTGADCsKgWFA8iAY3BiWCm4LEoGRQKigduKBMUDYoF5QPbg4qBLcEFYNbg0rBbUHloEpQNagW3B5UD+4IagR3BjWDu4JaQe2gTlA3uDuoF9wT1A/uDRoE9wUNg/uDRsEDQePgL0GT4MGgafBQ0Cx4OGgePBK0CFoGrYLWQZs/q38FQdPA+9MFH3N9dT+drPvrAXqgHqQH6yH6RT1Uv6SH6Zf1cP2KTtEj9Ej9qh6lX9Oj9et6jH5Dj9Vv6nF6vJ6gJ+pJerJO1W/pKfptPVW/o6fp6XqGnqnT9Cw9W7+r5+i5ep5+T8/X7+sFeqFepBfrdP2BztBLdKb+UC/VH+ksvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vv2x3qa36x16p96ld+s9+hO9V3+q9+nP9H79uT6gv9AH9Zf6kP5KZ+uv9WH9jT6iv9VH9Xf6mP5eH9cn9En9gz6lf9Sn9Rl9Vv+kz+mf9Xl9QV/U/tKH+0u3d6OMMrlMLhNjYkysiTVxJs7kNXlNxERMvIk3+U1+U8AUMIVMIZNgEkxRU9RcQoZMMVPMRE3UlDAlTKJJNKVMKeOMM2VNWVPelDcVTAVT0VQ0lUwlU9lUNlVNVXO7ud3cYe4wd5o7zV3mLlPb1DZ1TV1Tz9Qz9U1908A0MA1NQ9PINDKNTWPTxDQxTU1T08w0M81Nc9PCtDCtTCvTxrQxbU1b0860Mx1MB9PRdDSdTWeTZJJMF9PFdDVdTTfTzXQ33U0P08P0ND1Nb9Pb9DF9TF/T1ySbZDPADDCDzCAzxAwxQ81QM8wMM8PNcJNiUsxIM9KMMqPMaDPajDFvmLHmTTPOjDcTzEQzyUw2qSbVTDFTzFQz1Uwz08wMM8OkmTQz28w2c8wcM8/MM/PNfLPALDCLzCKTbtJNhskwmSbTLDVLTZbJMsvNcrPSrDSrzWqz1qw16816s9FsNJvNZrPVbDXbzDazw+wwu8wus8fsMXvNXrPP7DP7zX5zwBzwCGAOmUMm22Sbw+awOWKOmKPmqDlmjpnj5rg5aU6aU+aUOW1Om7PmrDlnfjbnzQVz0XgTY/PYWHuNjbPX2rw2n/19XMgWtgm2iC1qtS1gC/5NbKy1ibakLfXrFNOWs4mX7qW2tHW2jC1ry9nKtoqtaqvZ2211e4et8fs4H9h7bH17r21g77N17d223m/ihvZ+28g+bBvbR2wT29I2ta1tM/uwbW4fsS1sS9vKtrYdbSfb2T5hk+yTtot96u/iDLvErrXr7Hq7we61n9qz9id7xH5rz9mfbV/bzw61L9lh9mU73L5iU+yIv4vH2jftODveTrAT7SQ7+Tdx8Es8w860aXaWnW3ftXPs3L+L0+0Hdr7NtAvsQrvILv4lvjSmTPuhXWo/sll2mV1uV9iVdpVdbdf877GusJvsZrvF7rGf2G12u91hd9pddvcv8aXj2Gc/s/vt5/aw/cYetF/aQ/aozbZf/xJfOr6j9jt7zH5vj9sT9qT9wZ6yP9rT9syl4/eXjv0He8FetN4CIQmSpCigXJSbYigPxdI1FEfXUl7KRxG6juLpespPN1ABKkiFqDAlUBEqSpoMWSIKqRgVpyjdSCXoJkqkklSKSpOjMlSWylF5upkq0C1UkW6lSnQbVaYqVJWq0e1Une6gGnQn1aS7qBbVpjpUl+6menQP1ad7qQHdRw3pfmpED1Bj+gs1oQepKT1Ezehhak6PUAtqSa2oNbWhR6ktPUbtqD11oMepI3WizvQEJdGT1IWeoq70NHWjZ6g7PUs96DnqSb2oNz1PfegF6kv9KJn60wAaSINoMA2hF2kovUTD6GUaTq9QCo2gkfQqjaLXaDS9TmPoDRpLb9I4Gk8TaCJNosmUSm/RFHqbptI7NI2m0wyaSWk0i2bTuzSH5tI8eo/m0/u0gBbSIlpM6fQBZdASyqQPaSl9RFm0jJbTClpJq2g1raG1tI7W0wbaSJtoM22hrfQxbaPttIN20i7aTXvoE9pLeS6/4T6nA/QFHaQv6RB9Rdn0NR2mb+gIfUtH6Ts6Rt/TcTpBJ+kHOkU/0mk6Q2fpJzpHP9N5ukAXyROEGIpQhioMwlxh7jAmzBPGhteEceG1Yd4wXxgJrwvjw+vD/OENYYGwYFgoLBwmhEXCoqEOTWhDCsOwWFg8jIY3hiXCm8LEsGRYKiwdurBMWDYsF5YPbw4rhLeEFcNbw0rhbWHlsEr48H3VwtvD6uEdYY3wzrBmeFdYK6wd1gnrhneH9cJ7wvrhvWGD8L6wQnh/2Ch8IITLv1dpGj4UNgsfDpuHj4QtwpZhq7B12CZ8NGwbPha2C9uHHcLHw45hp7Bz+ESYFD4Zdgmf+sP1yWH/cEA4MBwYen+vXBRdHE2PfhDNiC6JZkY/jC6NfhTNii6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kbo5uiXpfNzc4dMJJp1zgcrncLsblcbHuGhfnrnV5XT4Xcde5eHe9y+9ucAVcQVfIFXYJrogr6rQzzjpyoSvmiruou9GVcDe5RFfSlXKlnXNlXFnX2rVxbVxb95hr59q7Du5x97jr5Dq5J9wT7knXxT3lurqnXTf3jOvunnXPuudcT9fL9XbPuz7uBdfX9XPJLtkNcAPcIDfIDXFD3FA31A1zw9xwN9yluBQ30o10o9woN9qNdmPcGDfWjXXj3Dg3wU1wk9wkl+pS3RQ3xU11U10AADPcDJfm0txsN9vNcXPcPDfPzU+c7xa4BW6RW+TSXbrLcBku02W6pW6py3JZbrlb7la6lW61W+3WurVuvVvvNrqNbrPb7La6rW6b2+Z2uB1ul9vl9rg9bq/b6/a5fW6/2+8OuAPuoDvoDrmvXLb72h1237gj7lt31H3njrnv3XF3wp10P7hT7kd32p1xZ91P7pz72Z13F9xF511q5K3IlMjbkamRdyLTItMjMyIzI2mRWZHZkXcjcyJzI/Mi70XmR96PLIgsjCyKLI6kRz6IZESWRDIjH0aWRj6KZEWWRZZHVkRWRlYp8EW2hb6YL+6j/kZfwt/kE31JX8qX9s6X8bl9OV/e3+wr+Ft8RX+rr+Rv85V9FV/VP+Jb+Ja+lW/t2/hHfVv/mG/n2/sO/nHf0Xfynf0TPsk/6bv4p3xX/7Tv5p/x3f2zvod/zvf0vXxv/7zv41/wfX0/n+z7+wF+oB/kf52KveSH+Zf9cP+KT/Ej/Ej/qh/lX/Oj/et+jH/Dj/Vv+nF+vJ/gJ/pJfrJP9W/5Kf5tP9W/46f56X6Gn+nT/Cw/27/r5/i5fp5/z8/37/sFfqFf5Bf7dP+Bz/BLfKb/0C/1H/ksv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vv+x3+a3+x1+p9/ld/s9/hO/13/q9/nP/H7/uT/gv/AH/Zf+kP/KZ/uv/eGsb/wR/60/6r/zx/z3/rg/4U/6H/wp/6M/7c/4s/4nf87/7M/7C/7iv/mbtdr/6WNzxhhjjLH/Tw38g/X9/8FrCgDE5fbP3vtrtxfO/u16CQAbC/y1PVgkdIwAwJP9ejz461KrVnJy8uVtsyQExRcCQOR3O7gcL4MO0AmSoD2U/4fjGyx6naN/0X/GaJoUvRUg9jc5MXAlvtL/F/+k/0cfH5tRKTwb/8/HH10IkFj8Ss6lWXhi8b+eomXQ4ZevDttDhX/Sf8G2/2r8WRLyfJkK0O43OXEA0C7P78dfFh6DpyDpb7Zs8A/3yRhjjDHGGGMs5xksqnb7g/nnL/PzBHUlJzdcif9ofs4YY4wxxhhjjLGr75levZ94NCmpfTducIMbOazR6V9sc7X/Z2KMMcYYY4z92a586L/yWp6rOSDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywH+n/xl8au9jEyxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9v/CgAA//+Nci04") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 5.483304489s ago: executing program 2 (id=254): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendto$inet6(r2, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x3, 0x322, [0x2000000014c0, 0x0, 0x0, 0x2000000026ac, 0x2000000026dc], 0x0, 0x0, &(0x7f00000014c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x58, 0xf6, 'geneve1\x00', 'gretap0\x00', 'batadv_slave_1\x00', 'veth0_to_bridge\x00', @remote, [0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0xd6, 0x10e, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @snat={'snat\x00', 0x10, {{@random="35bfcce3e696", 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@random="65345f68f90f", 0xfffffffffffffffe}}}}, {0x5, 0x1f7361e9f5d5a9bc, 0x1c, 'veth0_to_bond\x00', 'veth1_virt_wifi\x00', 'bridge_slave_1\x00', 'dvmrp0\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @random="97a70e3688f8", [0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x11, 0x12, 0x15, 'veth1_to_bond\x00', 'geneve1\x00', 'veth0_virt_wifi\x00', 'syzkaller1\x00', @local, [0x0, 0xff, 0x0, 0xff], @random="c8e84e37e8bf", [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 0xfffffffffffffffe}}}}]}]}, 0x39a) 1.845797902s ago: executing program 1 (id=256): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) 1.70843471s ago: executing program 4 (id=257): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c010000000101"], 0x10c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000000c0)=0x7fff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000005b0001800c00028005000100010000000c000280"], 0x8c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.666540662s ago: executing program 3 (id=258): write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) 1.489759563s ago: executing program 4 (id=259): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.439726286s ago: executing program 0 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800010a000000003f000000040000000a0016"], 0x28}}, 0x0) 1.436693416s ago: executing program 3 (id=261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x3, 0x3, 0x4, 0x3, 0x5, 0xb, 0x8, 0x7, 0x9, 0x6, 0x3, 0x9, 0x8, 0xf, 0x3], 0x1, [0x1, 0x10, 0x3, 0x9, 0x0, 0x3, 0x6, 0xadf, 0x7fff, 0x81, 0xff, 0x800, 0xcbe6, 0xd80, 0xf638, 0x1], [0x3, 0x9, 0x8, 0x4, 0x0, 0x3, 0xc, 0x6, 0x5, 0x0, 0xe, 0x8001, 0x8a67, 0x4, 0x7fff, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x404c001}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="ba", 0x1, 0x40, 0x0, 0x0) 1.260482607s ago: executing program 4 (id=262): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.250759617s ago: executing program 0 (id=263): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f00000002c0)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@acl}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@noacl}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}, {@resgid, 0x32}]}, 0xdb, 0x4df, &(0x7f0000001700)="$eJzs3ctrXNcZAPDvXmnkl1zJtAvXUNfULpJpPSNZtS0KdVso7cpQ6i66c1VpJIRGGqEZ2ZYwrfwXFIppC111lU0gf0AgeJdtSDAk+0BCQkjsZJFF4gnzcmR5Ro94pBHS7wdXc+5j9H1nhjkz59zDvQEcWuci4nJEPK1UKhcjYqCxPW0sD09ExFr9uCeP701WlyQqlZufJpE0tlWPH173PxtPqfnTHyL+lrwYt7SyOjdRKOSXGuu58vxirrSyeml2fmImP5NfGBsbvTp+bfzK+EhH6tkfEdd/9+G///nK76+/8fM779/6ePjv1bR+1djfrEen1aueiaPrtvVGxNJuBOuCnkZ9Mt1OBACAbWn+zv9JRFyMgeip/ZoDAAAADpLKr/vjqySiAgAAABxYaW1ubJJmG/MA+iNNs9n6HN4fxPG0UCyVfzZdXF6Yqs+hHYxMOj1byI805goPRiapro/Wyt+uX96wPhYRpyLiwcCx2np2sliY6vbgBwAAABwSJzb0/78YqPf/AQAAgANmsNsJAAAAALtO/x8AAAAOvhb9/790Iw8AAABgV/zxxo3qUmne/3rq9sryXPH2pal8aS47vzyZnSwuLWZnisWZ2jX75rf6f4VicfEXsbB8N1fOl8q50srqrfni8kL51uxzt8AGAAAA9tCpHz98L4mItV8eqy1Vfd1OCtgTvTs5+IPdywPYez3dTgDomh19/wMHSqbbCQBdl2yxv+3knbc6nwsAALA7hn7Y+vx/suXYwFq6RykCu8T4Hxxezv/D4eX8PxxemegJHXk43Hb//H+lsqOEAACAjuuvLUmajaiNA/RHmmazESdrtwXIJNOzhfxIRHwvIt4dyBypro/Wnpls2WcAAAAAAAAAAAAAAAAAAAAAAAAAAOoqlSQqAAAAwIEWkX6UNO7/NTRwoX/j+EBf8uVA7TEi7vzv5n/uTpTLS6PV7Z89217+b2P75W6MYAAAAAAbNfvpzX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTSk8f3JpvLXsb95LcRMdgqfm8crT0ejUxEHP88id51z0sioqcD8dfuR8TpVvGTalox2MiiVfxjXYyfRsSJDsSHw+xhtf35TavPXxrnao+tP39Xay3Uy2vf/qXP2r+eNu3PyW3GOPPotVzb+PcjzvS2bn+a8ZM28c9vM/5f/7y62m5f5f8RQy2/f5LnYuXK84u50srqpdn5iZn8TH5hbGz06vi18SvjI7np2UK+8bdFhL74149ef7pZ/Y/Hg7bt72b1v7DN+n/96O7j79eLmVbxh8+3fv9Pt4mfNr77ftooV/cPNctr9fJ6Z199+2zEO2+2q/9Um9d/q/d/eJv1v3hkmwcCAHuitLI6N1Eo5Jf2R6EvuhL9pV6N6s+iffDSKey88I/9kca+LHS3XQIAADrvxT7w8zpxjh0AAAAAAAAAAAAAAAAAAADY3He6QliysyvebYy51p2qAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs6psAAAD///ws0zo=") read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000080)='./file0/../file0\x00', r1, r2) 1.186606981s ago: executing program 4 (id=264): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x103100, 0x0) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x4, 0xa, '\x00', [@generic={0xfe, 0x2b, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d41787454"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@generic={0xff}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}], 0xb8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f556234701", 0xd0}, {&(0x7f0000002840)="33db2a1949865d5bb1c5bfb13ffb96a1cdad02489f447c9f6e61ae185cf1962c0bee82f04dfd646365d75c057a118bea734fb3f7e5bd047d4c32bf72ead3fa9aca6aeb1cc044533c24edc3e8ec198203ec244cb6b2b79bedc3a8a74e17e85b4c32c0819c4c77dcc823cb4fa659cffc6e8348b875e177f03f4378da4b36ac7df34de2f67398e62f3708bb83c1b0f505aaa85a3422cf0a710a03415896a50197b4a0624542e33fdad43547a88b0fc5d26804a2c8f54e65fbeaae715fbba862f15688e80655f3890ac49ca3ccb40cb2dd711b88d4480d20c760f12c23568c8b5fe181abc11d1f2ab914f875ba85f8355c9d248deef68e71555867160c0161a078f42d6778ee2bcc3015ccb433ff9022b312b620c18e4f4b3824d186e3051adf3a6e0332222108e63f6eda5a1517ee3765ae0677f165fde798d1917a2583aa4b52e67438cf61f0cadd336edf8b5f132d54f4ca42b3d8d39ccba6293913d4f233f29af17bcf049306e43f99ad7c321bacbfa17c2e8d8269e42c5390e279a1a1370c15bec875beb8542823f5ab28abb5d48fd5662bbf3516ef63120e56fffe7d1e86748b788f80ef4deaaaeb0815d8fa04bdd351a00618ff45c64a886de5a7b51408a1d53ce8d4d7c2891492e10d1de29d4e0ef564a859500f97048c1a0b319e1305c1f228882d02a227dea730ce09b1200813bfbf6750800d1bd8d2c264ac6063d4b0fb4cb42c1924a6fac095d848450a00dcc6a827b9d0bcc0131ff3da234568d469f1246848b71bd3dfbe767de19ffe542a0a37317d84bfc63c9449a4cc04446c859f972b77188eb5b7517540b70c5a0701c78ca108c09aadd28a91278cb6633d88cff45cfd5e30f87d6be9eb53cf89d5c047f3c36f490fa652a148c5d824b2d9cb8ffe1edb80cd48922aede8f3b22d21806572bf5b7bbcd27555b41e137eb06e5a3f514780796a2c8700d13eeb1800227298d82e42388a3aad5293562cc05650ef93d23d5290dc0de915d8143f76b2838cea8db2ca4cc802cd8d6d2c43c95f919bf0ebd7403f8047a0c010dcbc26a4bead1b274b573773ad2a2000c7730b49d5a97505024b905be151207a4d737233ccd853c4420391150e546b205181aa376088c5ccfe1b42da805cb6eca7e7d622daeff2c66d75697f7cc50ce2cc096cfedfd5d6cc5551a83dd3beb24ecf9c0160e190138e8eb9e86de71ccd5d76a258844e34683f7accd5f0b07a87be90b7ae6976f4a89183ab489754c9034eee063309f8d8f36914cc56887e80acb660b40f8960df4280641cc2199fd90d4f71923f041396b834d3af2558f04055e1133140d3a4399cf32a1a1d441056c114a5311f0a9a13ee68ddc1481ccad45bcec671d980f8cc1e2155a637bd2f9dcc8f7ab57683c841545f4c6a1e75ebf778b518e2185935f7c6b020ee30a29355f6bf0e5adaac184a25aba83aa5221d983235d8c277c81c26497c1d019056a56abf062203887bd4a1143b991ac51b2aa136793e331ef84556ec6d254e2adadf0d77c21d46fadbe3cd187bf36f18905e24f6dbeb7e2a75119f943d1cd55ec316a58116fb2f00d511ddddc7baa8dd8e67a7b2a6a5bcac586115dd8ff84a899503d06d62e1d51f82d2681811da3ac71c76133f81308e048734030f24e6988b1cc512c9518365f87c0f00776ef77cab78d0f04f4d077dec4705da22593d934ad32b7bd17c6dc9957d5b742ef8f0894b15c27c3fac6775bbf4cbe107b1d726d1ef6f6b1d20a7ea23b34b87cb3dfcd5747f4f598bb4832de298032db313bbc727f1ea41ac96c8979387b375490e3199585d2a932734ab265afc1fb12253ede0c5dfcf702c88619919c8b8aff987ceaddd9e40bb43d34599b50b07bf2fc605e5e2c8e8b70e63bc0893af943641c3ae65cf717aa01d537e44eab989fff563d22be3c6ba7e25bd4ef6c8001e87a59788ac3140143620cf8a6e62cdad64a11fca4bbdece3d3c8032850f40de027e2dbaa3b250af2babc1549b8f8fa72c52e868743ba43e183f50c8b9d8ce45d0acf64758fd65edb776199ee84c6da0d228e0627e0ea92949e4dc6ef5f023b7c6e1a9d261384fa4db33962341c330b710405b1a339209fdfc6cb2eb29a7fb3ccbe4a1c7e2daf4f6f1c227ed4b77384938d082f59bfee13585ca9fc46c232f62ebb6287c3e02018313f22c0c8096a37c1506873294ede68b3eba8cc66ca31f40f0d19ff1536fd8fb42b3ff2fa3b191194d6d04e2d056b0c3c0c4abd88bc1c7e4c5b1e7b31245acebf616d2746d461c8a75ae762b2df0862c7705f2cad59f00303afaa9d9e774d005eecb3fe80c5bee4266703c2981803d7aad43c42d312e9376fc2a03b3a9067e88e1a4c063646493a63cc95082ad51505176a7dda5b4493dbc78a4021f6a0d31868d75ee08bb6129e84f247eb3ad352ec045c8d5dc8ee5ad7b7eae948ae056f523a4745f3839cb763505afe12e8b0a988caba151b38549e06738a15dfec6a5597b31f47fbbcb622b4b6dce331b50a4a7561396da5e3cd3383840afc00ac0537bf03a8aab179330a38d15115a01b0db44c9302bc908a5d86c5acef4859fc7464a0e4f2970f4221bffdd617bff126e6256cfbd24be7dc1eee65996013cd23a184ba66c7c0cdeb6b551fab006fda43591645106cf836bed95c143df06918fc0a3c32f6eea50a5208550fb42503987e64571d718b751597998d76941feed27076b64492eea782db891df0f69e89a6211d584f9f9c7d090ec9f6dd70a590436dfa4790a534bdfc1f46fd1ddbbcee124cd9668d968d95add753b630262989cf986b146722242b17cb2bbb083b590ab4946cf25326024a6d4377a9988a3335a84e0eba9c4287cf5fd3304e11cba1119c22a6ae371aa82cd398499a80be864159c08b6925ecc3d25b2aa9a841a5131123e09697cc5e516e9a117b6e86a6ebee3bb39f0801ffcc65f1acbd69f8cab1a1ec921d144366af2049aac2d58cbc20333d1fd63695891d50209e50a281f3a1906d8d12b5dd1610c307901d6283db0e8833bb63714785332cc03f28111d64a6649267da73ef1d9ebb0bd584fd651cce2518ce7bf40c48b07d6f50b1aa224d656d1cd8db83f250ddac303ff8076a4c151abacb7ceb18b10cc3c3de6f929d3858074223765d0e0005606b550f4a00cc855a8d8a99dac57a4a8b15729638dd982aec22e79c42bf3b5f67fe2ab4632acadc954444fb54806d730880b48cb10d641f3b607e6413d106c0622ba4670c169c0bc3073cf6bf160e7989b78aaae81e7306727c2d13776d827a209a4a84805f2b8f5bbf2950e9d213a344f236c9dfbfe0a4fed7eb5d27d3bb15e89d454bc3dc83df918e57e8b4c763aeabdd00cd768b69a052e848694b97cef6c333eed2d3278cefa13c73c4d1b886c1c23c3a9a5533d4f0aea3416fb0054a42c3b61ec6eebd0cadff6106cc7b58e2b5aefd2d9482d37cdbc04cfff4e8efde9397598d3f164483613391be5d96eab911ab979c9418b26abcf05d14e1c1fc84a943829d3a84d08ea171034c60a953fca50fb373aa1ffe26cf1ed8f1e2b64b50f05f22af000ccdfc87fc5d999ee0d5ade3e1438747a55ac95482b6619c4bf41dea7d164aaa6922b2f563a95ac5f4b906c3bc8172a184e7d28a1e10e0a38455a4a326610b41da0e48fcd60be7417b9a92ad92ecc6068dbcb93543f02c1ca310d45d118869e06169f2164d4ce5a6f96a5b8b75bbcd945c8f7e947cb435051fcf6f8f8244269b4d3412aaf91374b18f385ba052eedd9613793a9d1382d30b912f0af55bd3b7a821fb1fc32c62434970afd2af33707487beb86fae9a927e1a10e20803ff58bf02213ff4b019df223589710d2fb436a930c009e513cec0a3733badfb7c183bb4fe18f3c1f3efabc18629462fb16a82aaae57e976f233d8debf50c6f2b7b1e53870103bcd4ce8ed53e5effffccd5fb0d45a235a326aa3d4381d9031b25913203b8eb2f170e30f4e324db5fd01e0ae5b86dd48a27aba37871fb7d3f4be672f1191bca2516d2c17a9aaba68ffa02fb999f7441e7238341fbea72a00b7f9f9acbca02a3157984f7a88ec809c1083dddec5151bedc6892d77cbb0f878ff2bbdb61922daaaf99a419bb9aaf41c2e49f9470dee0fbac03b84272626eb1e11b37b3b9d735df63f08965d3cd2bcdda5d34fe7919c976702a01d9a18bf6b1d2cc5ba4d78bb38634198003cf17a33e17391b3e0ff25368e8adf469861496dcd5868d163a2087c584df9874f4185752cc16ebdb852d60932ece37096301a718b7489f3688848996b649775533aa55918327ca1b5de7abb448c178d98e7e13cd4ce939326edefeb9ea6bb65fb6131cf0749425df1afb553411dad6041232ff4493aa644624b960badd643ebbd84e7c80bcf9acd1aa3bcb0bac9208b05098c6005b8efff52699a04111bf93591b95c8800ad9adb3c33044684fbac1b05db253874b9fb00f428707e3da0bbedd7d290a4b17ec3e73f28bba6c27d83b8517b5c2e4ac0d26f5a524ec91d02bd118f0e68a286b1bf456702a3001ab0754c87895976ccb202e4d75171fe005a18ed6a7fbeb9d678b73a751a0d18c7e2d615b572f79902510213f7079a736ba035d9590c12d9a628f8babf40391cf592eb0c0a224d16a436b6c99170faf80551b010d2da7a8a215d23bc63dd100752da133107d255b53c20357bf975e19bfa383d316cbb1c6bade2fd47cacf1eb0f484b98a269ed56c7c03c65a99a5adcd4602109d0b02a9593b79eb11c60df9edf423c977c49c44378ffe874cb35314ccec8816097959ee7b6001854fb026c3be5e44859d09cad6ecb9b207adfc77c2b638f4debb693829da35769aaa5c7b06b920b75af374f68a649970e5f3f9d0e55ef72faa9b62fb36c42eeaf08b0951966d3c5636ddcf3639685980aa6b02082cd458b2ffefd57309f5865090e1aaec6c5fc48a8890b91a7836b901366e5397f5b711622371cf5f6614c74b4a4920e6165534a6245cff80f831ea59a43457329d2f5bfe294849dddf2abb78869e5b2d0762faa56f4b28924597", 0xdf4}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 983.188532ms ago: executing program 3 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 910.344337ms ago: executing program 0 (id=266): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8f40, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) syz_open_pts(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x2004, &(0x7f0000000000)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@resuid}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==") 780.396155ms ago: executing program 3 (id=267): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000300)='map_files\x00') socket$netlink(0x10, 0x3, 0xf) syz_usb_connect$rtl8150(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) 684.15818ms ago: executing program 4 (id=268): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1, 0x1}, {0x5, 0x3e}}}]}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) 513.34667ms ago: executing program 0 (id=269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="a00000000001010800000000000000000a00000118000480140001800500020080000000050003009f0000000c0017000000000600000006200004801c00038005000100ff0000000800024000000001080002400000000514000f8008000140000003ff0800014000000004140019800800020000040000080001000201000020001640"], 0xa0}, 0x1, 0x0, 0x0, 0xc000c80}, 0xc004) 358.903769ms ago: executing program 4 (id=270): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x598, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x1507, &(0x7f0000001c00)="$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") listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 200.369188ms ago: executing program 0 (id=271): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 106.743494ms ago: executing program 2 (id=272): socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0xfffffffe) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000080)="cf", 0x1}], 0x1) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) setns(r4, 0x24020000) syz_clone(0x761e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=273): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x20000, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r0, 0x12) close_range(0xffffffffffffffff, r4, 0x2) fstat(r4, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r5, r5, 0x0, 0x80800000009) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 66.224719][ T4255] cgroup: Unknown subsys name 'net' [ 66.327951][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.862534][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.829857][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.840598][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.848220][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.864699][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.872082][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.880648][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.888271][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.896313][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.904575][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.911459][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.912063][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.919104][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.926313][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.934166][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.939813][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.948084][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.962515][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.962697][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.969575][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.976955][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.984363][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.991763][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.998128][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.013127][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.021619][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.029648][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.037181][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.045659][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.054040][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.061808][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.499636][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 70.525039][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 70.539841][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 70.574335][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 70.718097][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 70.734643][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.742035][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.750184][ T4269] device bridge_slave_0 entered promiscuous mode [ 70.772281][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.779371][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.787846][ T4272] device bridge_slave_0 entered promiscuous mode [ 70.796454][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.804233][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.814685][ T4269] device bridge_slave_1 entered promiscuous mode [ 70.850567][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.860261][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.868861][ T4267] device bridge_slave_0 entered promiscuous mode [ 70.877839][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.885105][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.893342][ T4272] device bridge_slave_1 entered promiscuous mode [ 70.928671][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.946751][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.954324][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.962831][ T4267] device bridge_slave_1 entered promiscuous mode [ 70.978024][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.988269][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.998252][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.006342][ T4275] device bridge_slave_0 entered promiscuous mode [ 71.015841][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.043387][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.053051][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.060141][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.069036][ T4275] device bridge_slave_1 entered promiscuous mode [ 71.085673][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.128452][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.155490][ T4272] team0: Port device team_slave_0 added [ 71.163516][ T4269] team0: Port device team_slave_0 added [ 71.170362][ T4272] team0: Port device team_slave_1 added [ 71.192137][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.199301][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.207344][ T4274] device bridge_slave_0 entered promiscuous mode [ 71.217343][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.236577][ T4269] team0: Port device team_slave_1 added [ 71.255821][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.263211][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.272159][ T4274] device bridge_slave_1 entered promiscuous mode [ 71.280656][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.311591][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.318591][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.344956][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.358922][ T4267] team0: Port device team_slave_0 added [ 71.380492][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.391207][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.391378][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.417279][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.429367][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.435434][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.447826][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.473816][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.485918][ T4267] team0: Port device team_slave_1 added [ 71.516621][ T4275] team0: Port device team_slave_0 added [ 71.523126][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.530095][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.556424][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.572902][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.589614][ T4275] team0: Port device team_slave_1 added [ 71.612171][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.623001][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.629993][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.656411][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.700737][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.707810][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.734410][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.746219][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.753502][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.779807][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.796615][ T4272] device hsr_slave_0 entered promiscuous mode [ 71.803880][ T4272] device hsr_slave_1 entered promiscuous mode [ 71.832922][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.839890][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.865982][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.885225][ T4269] device hsr_slave_0 entered promiscuous mode [ 71.892364][ T4269] device hsr_slave_1 entered promiscuous mode [ 71.898824][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.906685][ T4269] Cannot create hsr debugfs directory [ 71.914439][ T4274] team0: Port device team_slave_0 added [ 71.953667][ T4274] team0: Port device team_slave_1 added [ 72.023557][ T4275] device hsr_slave_0 entered promiscuous mode [ 72.031014][ T4275] device hsr_slave_1 entered promiscuous mode [ 72.037532][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.045260][ T4275] Cannot create hsr debugfs directory [ 72.051369][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.058332][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.085498][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.100761][ T4267] device hsr_slave_0 entered promiscuous mode [ 72.107149][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 72.113404][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 72.113427][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 72.119585][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 72.136399][ T4267] device hsr_slave_1 entered promiscuous mode [ 72.142936][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.150479][ T4267] Cannot create hsr debugfs directory [ 72.174868][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.185039][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.191028][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 72.216640][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.311472][ T4274] device hsr_slave_0 entered promiscuous mode [ 72.318306][ T4274] device hsr_slave_1 entered promiscuous mode [ 72.325554][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.333190][ T4274] Cannot create hsr debugfs directory [ 72.562400][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.584689][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.608800][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.618546][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.685605][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.702774][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.721813][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.736499][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.806488][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.825394][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.848103][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.860736][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.870175][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.880589][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.896439][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.903718][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.941236][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.955151][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.964431][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.971692][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.979958][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.989715][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.999070][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.006217][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.023350][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.031875][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.042409][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.075662][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.085819][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.095678][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.106226][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.118004][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.140283][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.153874][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.165921][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.175269][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.218947][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.228508][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.244964][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.260679][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.277307][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.293559][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.303525][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.324461][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.335681][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.371075][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.408350][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.488498][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.497938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.508439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.528937][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.539334][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.556194][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.563404][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.585077][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.618985][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.632195][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.652387][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.672158][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.679328][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.688728][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.705259][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.734210][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.743871][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.753768][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.773823][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.792202][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.800738][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.814125][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.823168][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.830921][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.838612][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.872698][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.885783][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.894311][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.903960][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.913392][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.920451][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.928400][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.937306][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.945812][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.954736][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.963385][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.970462][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.978322][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.987368][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.995914][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.004853][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.013618][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.022946][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.030029][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.039215][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.047042][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.054791][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.063865][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.072529][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.079635][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.092153][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.099888][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.112316][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.124117][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.134689][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.148941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.181180][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 74.187233][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 74.193367][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 74.193536][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 74.210091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.260469][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.268840][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 74.282574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.292309][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.326123][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.343669][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.359863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.378601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.388722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.398702][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.407329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.416202][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.427741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.436139][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.445155][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.454157][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.468388][ T4269] device veth0_vlan entered promiscuous mode [ 74.486191][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.495516][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.505841][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.517931][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.528097][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.554774][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.564901][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.573442][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.584129][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.593632][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.603013][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.613481][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.622073][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.632717][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.644148][ T4269] device veth1_vlan entered promiscuous mode [ 74.655640][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.673448][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.686201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.695439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.705109][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.712250][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.749755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.762113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.787207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.797721][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.804910][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.820008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.838269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.859628][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.883482][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.900727][ T4269] device veth0_macvtap entered promiscuous mode [ 74.923525][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.942143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.961471][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.982360][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.002150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.013855][ T4269] device veth1_macvtap entered promiscuous mode [ 75.045516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.054982][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.063739][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.073154][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.083665][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.093894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.108862][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.117879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.132021][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.168097][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.188395][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.199304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.210144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.237227][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.259080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.279067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.308827][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.328568][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.350320][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.377391][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.529501][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.544416][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.583788][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.669029][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.691996][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.748795][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.762943][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.779163][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.792638][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.800178][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.818313][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.831442][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.840558][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.856759][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.878806][ T4274] device veth0_vlan entered promiscuous mode [ 75.906530][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.951971][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.961935][ T1103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.981613][ T4274] device veth1_vlan entered promiscuous mode [ 76.005321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.013495][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.026069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.034984][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.044206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.053222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.075817][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.087757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.097279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.157109][ T4272] device veth0_vlan entered promiscuous mode [ 76.192103][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.228353][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.253906][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.261955][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 76.261982][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 76.267971][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 76.274259][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 76.329372][ T4267] device veth0_vlan entered promiscuous mode [ 76.341555][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 76.347143][ T4274] device veth0_macvtap entered promiscuous mode [ 76.365437][ T4275] device veth0_vlan entered promiscuous mode [ 76.382437][ T4272] device veth1_vlan entered promiscuous mode [ 76.397258][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.407009][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.422951][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.437917][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.446738][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.464397][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.478418][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.488824][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.541843][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.555969][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.582743][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.598979][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.607382][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.936345][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.027356][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.240562][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.370643][ T4267] device veth1_vlan entered promiscuous mode [ 77.410569][ T4274] device veth1_macvtap entered promiscuous mode [ 77.447114][ T4275] device veth1_vlan entered promiscuous mode [ 77.492970][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.506553][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.518358][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.523987][ T4392] loop1: detected capacity change from 0 to 764 [ 77.558858][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.580645][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.620022][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.642146][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.673945][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.698235][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.723472][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.732519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.751766][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.791514][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.815404][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.834133][ T4267] device veth0_macvtap entered promiscuous mode [ 77.853160][ T4272] device veth0_macvtap entered promiscuous mode [ 77.863411][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.890992][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.899751][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.924310][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.937412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.947302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.982040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.009623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.018641][ T4396] loop1: detected capacity change from 0 to 512 [ 78.039194][ T4396] EXT4-fs: Ignoring removed bh option [ 78.049071][ T4275] device veth0_macvtap entered promiscuous mode [ 78.069655][ T4267] device veth1_macvtap entered promiscuous mode [ 78.100591][ T4396] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 78.121660][ T4272] device veth1_macvtap entered promiscuous mode [ 78.156206][ T4275] device veth1_macvtap entered promiscuous mode [ 78.190500][ T4396] EXT4-fs (loop1): 1 truncate cleaned up [ 78.226796][ T4396] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.238561][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.274224][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.289347][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.311248][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.338116][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.350849][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 78.351877][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 78.356879][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 78.363645][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 78.378209][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.394822][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.407981][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.421640][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 78.427863][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.437828][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.448358][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.459814][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.471362][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.487709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.496060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.496609][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 78.520688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.529252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.538098][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.547517][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.557262][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.568182][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.585603][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.609604][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.620357][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.627661][ T4401] loop1: detected capacity change from 0 to 512 [ 78.645315][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.669044][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.685212][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.703077][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.721455][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.728490][ T4401] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.733437][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.742952][ T4401] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.775032][ T26] audit: type=1800 audit(1770705610.624:2): pid=4401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 78.796776][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.806785][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.817393][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.829789][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.841907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.856394][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.856646][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 78.866752][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.879937][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.903705][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.930344][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.941627][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.952210][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.962194][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.972678][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.991447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.000850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.010843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 79.019139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 79.027548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 79.035863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 79.044263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 79.052562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 79.060857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 79.070847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 80.498049][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.513484][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.524067][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.535741][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.544778][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.559788][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.570175][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.587091][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.595943][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.605519][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.620619][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.639887][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.661638][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.677088][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.687868][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.704152][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.717386][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.735303][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.748308][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.766088][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.788704][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.802581][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.812398][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.838510][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.862077][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.877674][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.887379][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.903184][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.933464][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.014753][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.028875][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.038038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.168702][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.189718][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.205277][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.231317][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.239208][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.316705][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.387640][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.396317][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.406239][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.414492][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.417501][ T4412] capability: warning: `syz.1.11' uses deprecated v2 capabilities in a way that may be insecure [ 81.427774][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.451329][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.458122][ T4412] loop1: detected capacity change from 0 to 8 [ 81.463406][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.491720][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.507628][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.534843][ T4412] SQUASHFS error: Unable to read inode 0x11f [ 81.622141][ T7] cfg80211: failed to load regulatory.db [ 81.646099][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.690776][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.721868][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.918081][ T4421] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.026422][ T951] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.190996][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.265581][ T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.281871][ T951] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 82.292134][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.303893][ T4429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.324894][ T951] usb 4-1: config 0 descriptor?? [ 82.350019][ T4430] loop4: detected capacity change from 0 to 128 [ 83.296486][ T4428] sched: RT throttling activated [ 83.319433][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 83.334776][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.334199][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.367666][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.386449][ T951] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 85.395720][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.415463][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.425545][ T951] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 85.451103][ T7] usb 2-1: config 0 descriptor?? [ 85.472999][ T7] usb 2-1: can't set config #0, error -71 [ 85.509265][ T7] usb 2-1: USB disconnect, device number 2 [ 85.594533][ T951] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 85.630767][ T951] usb 4-1: USB disconnect, device number 2 [ 85.899049][ T4441] trusted_key: encrypted_key: insufficient parameters specified [ 85.970308][ T4441] loop0: detected capacity change from 0 to 256 [ 85.983266][ T4439] fido_id[4439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 86.011790][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.071055][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.169566][ T4445] loop2: detected capacity change from 0 to 16 [ 86.215329][ T4445] erofs: (device loop2): mounted with root inode @ nid 36. [ 86.223024][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.238372][ T26] audit: type=1800 audit(1770705618.084:3): pid=4445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 86.290972][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 86.294907][ T22] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.298218][ T7] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.331147][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.351929][ T22] usb 5-1: config 0 descriptor?? [ 86.375382][ T7] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.401597][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 86.410927][ T7] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 86.422519][ T7] usb 2-1: Product: syz [ 86.426739][ T7] usb 2-1: Manufacturer: syz [ 86.448401][ T7] hub 2-1:4.0: USB hub found [ 86.680898][ T4449] loop2: detected capacity change from 0 to 1024 [ 87.656016][ T7] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 87.975582][ T22] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 87.999954][ T4456] loop2: detected capacity change from 0 to 1024 [ 88.014921][ T22] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input6 [ 88.055891][ T4456] ======================================================= [ 88.055891][ T4456] WARNING: The mand mount option has been deprecated and [ 88.055891][ T4456] and is ignored by this kernel. Remove the mand [ 88.055891][ T4456] option from the mount to silence this warning. [ 88.055891][ T4456] ======================================================= [ 88.142466][ T22] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 88.267476][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.346473][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.399982][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.450722][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.479570][ T4468] loop3: detected capacity change from 0 to 512 [ 88.488759][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.526000][ T4408] usb 5-1: USB disconnect, device number 2 [ 88.589502][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.589705][ T4468] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 88.625541][ T4468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 88.638862][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.644524][ T4468] System zones: 0-1, 15-15, 18-18, 34-34 [ 88.679992][ T4468] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.686950][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.701117][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.702304][ T4466] fido_id[4466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 88.721044][ T4468] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 88.738082][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.756465][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.759317][ T4468] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.768236][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.803949][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.815404][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.820193][ T4468] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 88.834100][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.844264][ T4468] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.25: bad orphan inode 16 [ 88.875591][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.885525][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.889388][ T4468] ext4_test_bit(bit=15, block=18) = 1 [ 88.893204][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.898434][ T4468] is_bad_inode(inode)=0 [ 88.906704][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.918159][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.925791][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.929909][ T4468] NEXT_ORPHAN(inode)=0 [ 88.940675][ T4468] max_ino=32 [ 88.940775][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.951704][ T4468] i_nlink=2 [ 88.955076][ T4468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.958547][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.977315][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.985274][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.005726][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.036406][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.046733][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.069815][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.085166][ T4456] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.133031][ T26] audit: type=1800 audit(1770705620.984:4): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.21" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 89.152673][ T4468] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 89.171118][ T22] usb 2-1: USB disconnect, device number 3 [ 89.342790][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 89.520371][ T4480] device syzkaller0 entered promiscuous mode [ 89.651019][ T4320] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.699500][ T4485] loop3: detected capacity change from 0 to 1024 [ 89.720552][ T951] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.155751][ T4488] loop0: detected capacity change from 0 to 1024 [ 90.169434][ T4488] hfsplus: unable to parse mount options [ 90.465382][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.552930][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.734503][ T951] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.754716][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.991674][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.019293][ T4320] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.277167][ T951] usb 3-1: config 0 descriptor?? [ 91.343128][ T4320] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.471759][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.503545][ T4320] usb 5-1: config 0 descriptor?? [ 91.683215][ T4500] loop0: detected capacity change from 0 to 8192 [ 91.781073][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.807850][ T951] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 91.827448][ T951] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input8 [ 91.917467][ T951] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 91.981076][ T4408] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.991681][ T7] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 92.019226][ T7] usb 4-1: config index 0 descriptor too short (expected 65016, got 133) [ 92.035108][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.098986][ T7] usb 4-1: config index 1 descriptor too short (expected 65016, got 133) [ 92.113722][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.133062][ T7] usb 4-1: config index 2 descriptor too short (expected 65016, got 133) [ 92.151310][ T4320] usbhid 5-1:0.0: can't add hid device: -71 [ 92.164638][ T4320] usbhid: probe of 5-1:0.0 failed with error -71 [ 92.179424][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.201068][ T4408] usb 2-1: Using ep0 maxpacket: 16 [ 92.210552][ T4408] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.231313][ T4320] usb 5-1: USB disconnect, device number 3 [ 92.247392][ T4408] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 92.256735][ T7] usb 4-1: config index 3 descriptor too short (expected 65016, got 133) [ 92.277473][ T4408] usb 2-1: config 13 has no interface number 0 [ 92.285336][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.295854][ T4408] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 92.307416][ T4408] usb 2-1: config 13 interface 50 has no altsetting 0 [ 92.315914][ T7] usb 4-1: config index 4 descriptor too short (expected 65016, got 133) [ 92.325162][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.339143][ T4408] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 92.350356][ T7] usb 4-1: config index 5 descriptor too short (expected 65016, got 133) [ 92.358970][ T4408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.375628][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.393804][ T4408] usb 2-1: Product: syz [ 92.405896][ T4408] usb 2-1: Manufacturer: syz [ 92.411863][ T4408] usb 2-1: SerialNumber: syz [ 92.417996][ T7] usb 4-1: config index 6 descriptor too short (expected 65016, got 133) [ 92.437381][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.448694][ T4501] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 92.459051][ T7] usb 4-1: config index 7 descriptor too short (expected 65016, got 133) [ 92.468055][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.504532][ T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 92.516277][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.524583][ T7] usb 4-1: Product: syz [ 92.529023][ T7] usb 4-1: Manufacturer: syz [ 92.534551][ T7] usb 4-1: SerialNumber: syz [ 92.560967][ T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 92.621810][ T4320] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 92.726796][ T4408] usb 2-1: MIDIStreaming interface descriptor not found [ 92.879564][ T4408] usb 2-1: USB disconnect, device number 4 [ 92.908850][ T4512] loop4: detected capacity change from 0 to 1024 [ 92.942160][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.152267][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 93.165137][ T126] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.180039][ T126] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.185065][ T4512] hfsplus: b-tree write err: -5, ino 3 [ 93.200432][ T126] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 93.217099][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.220533][ T126] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 93.262548][ T126] usb 1-1: Product: syz [ 93.271972][ T126] usb 1-1: Manufacturer: syz [ 93.293186][ T4408] usb 4-1: USB disconnect, device number 3 [ 93.314433][ T126] hub 1-1:4.0: USB hub found [ 93.364433][ T1198] usb 3-1: USB disconnect, device number 2 [ 93.518784][ T126] hub 1-1:4.0: 2 ports detected [ 93.605218][ T4518] device syzkaller0 entered promiscuous mode [ 93.941019][ T4320] usb 4-1: Service connection timeout for: 256 [ 93.948350][ T4320] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 94.014016][ T4320] ath9k_htc: Failed to initialize the device [ 94.042052][ T4408] usb 4-1: ath9k_htc: USB layer deinitialized [ 94.073261][ T4530] netlink: 96 bytes leftover after parsing attributes in process `syz.1.49'. [ 94.096333][ T4528] loop4: detected capacity change from 0 to 1024 [ 94.134367][ T4531] loop3: detected capacity change from 0 to 128 [ 94.137380][ T126] usb 1-1: USB disconnect, device number 2 [ 94.187134][ T26] audit: type=1800 audit(2000000002.350:5): pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.50" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 94.263622][ T4531] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 94.505655][ T4537] loop1: detected capacity change from 0 to 128 [ 94.780380][ T4537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.794436][ T4537] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.826462][ T4335] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.911002][ T4545] device syzkaller0 entered promiscuous mode [ 95.029620][ T4335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.132557][ T4335] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.142062][ T4335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.160751][ T4335] usb 5-1: config 0 descriptor?? [ 95.602213][ T4335] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 95.639699][ T4335] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input9 [ 95.808305][ T4335] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 95.811849][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 95.860362][ T4554] loop3: detected capacity change from 0 to 1024 [ 95.868638][ T4554] EXT4-fs: Ignoring removed orlov option [ 95.934174][ T4554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.967135][ T4558] loop0: detected capacity change from 0 to 2048 [ 95.995862][ T4558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.013915][ T4335] usb 5-1: USB disconnect, device number 4 [ 96.043147][ T4559] fido_id[4559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 96.353061][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 96.384981][ T1198] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.784454][ T1198] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 96.873660][ T1198] usb 2-1: config index 0 descriptor too short (expected 65016, got 133) [ 97.046511][ T1198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.591679][ T1198] usb 2-1: config index 1 descriptor too short (expected 65016, got 133) [ 97.602527][ T1198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.615827][ T1198] usb 2-1: config index 2 descriptor too short (expected 65016, got 133) [ 97.650645][ T1198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.671384][ T1198] usb 2-1: config index 3 descriptor too short (expected 65016, got 133) [ 97.679872][ T1198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.757253][ T1198] usb 2-1: config index 4 descriptor too short (expected 65016, got 133) [ 97.781009][ T4583] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 97.794615][ T1198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.818712][ T1198] usb 2-1: config index 5 descriptor too short (expected 65016, got 133) [ 97.845455][ T4335] kernel write not supported for file /vcs (pid: 4335 comm: kworker/1:6) [ 97.854548][ T1198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.869780][ T1198] usb 2-1: config index 6 descriptor too short (expected 65016, got 133) [ 97.900429][ T1198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.943512][ T1198] usb 2-1: config index 7 descriptor too short (expected 65016, got 133) [ 97.989014][ T1198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.053046][ T1198] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 98.078829][ T1198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.133587][ T4598] loop4: detected capacity change from 0 to 1024 [ 98.156207][ T1198] usb 2-1: Product: syz [ 98.217125][ T1198] usb 2-1: Manufacturer: syz [ 98.242205][ T1198] usb 2-1: SerialNumber: syz [ 98.313521][ T1198] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 98.379665][ T1198] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 98.499775][ T4608] loop2: detected capacity change from 0 to 512 [ 98.519594][ T4608] EXT4-fs: Ignoring removed nobh option [ 98.601952][ T4608] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.649755][ T4608] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.699845][ T4608] EXT4-fs (loop2): 1 truncate cleaned up [ 98.714539][ T4608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.810262][ T4618] loop3: detected capacity change from 0 to 512 [ 98.862500][ T4608] syz.2.76 (4608) used greatest stack depth: 20528 bytes left [ 98.872380][ T4618] ext4: Unknown parameter 'noacl' [ 98.891662][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 98.921202][ T4444] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.960570][ T4618] loop3: detected capacity change from 0 to 128 [ 98.981172][ T4444] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.006864][ T4444] Buffer I/O error on dev loop3, logical block 0, async page read [ 99.055851][ T4408] usb 2-1: USB disconnect, device number 5 [ 99.108297][ T4618] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.171528][ T4618] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.567475][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 99.710872][ T1198] usb 2-1: Service connection timeout for: 256 [ 99.717196][ T1198] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 99.746312][ T1198] ath9k_htc: Failed to initialize the device [ 99.776604][ T4634] device syzkaller0 entered promiscuous mode [ 99.778161][ T4408] usb 2-1: ath9k_htc: USB layer deinitialized [ 99.909174][ T4636] Illegal XDP return value 702906368 on prog (id 8) dev syz_tun, expect packet loss! [ 100.196172][ T4639] loop3: detected capacity change from 0 to 1024 [ 100.492116][ T4639] hfsplus: catalog name length corrupted [ 101.277212][ T4650] loop3: detected capacity change from 0 to 512 [ 101.355834][ T4650] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.90: bg 0: block 5: invalid block bitmap [ 101.453773][ T4650] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 101.542397][ T4650] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.90: invalid indirect mapped block 3 (level 2) [ 101.578205][ T4650] EXT4-fs (loop3): 1 orphan inode deleted [ 101.596530][ T4650] EXT4-fs (loop3): 1 truncate cleaned up [ 101.626130][ T4650] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.832605][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 101.843177][ T22] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 102.041230][ T4672] Zero length message leads to an empty skb [ 102.042248][ T126] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.060974][ T22] usb 1-1: config 16 has an invalid interface number: 50 but max is 0 [ 102.089555][ T22] usb 1-1: config 16 has no interface number 0 [ 102.125917][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=08c2, bcdDevice=d4.71 [ 102.153418][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.170914][ T22] usb 1-1: Product: syz [ 102.183866][ T22] usb 1-1: Manufacturer: syz [ 102.194893][ T22] usb 1-1: SerialNumber: syz [ 102.212895][ T4678] loop3: detected capacity change from 0 to 16 [ 102.242354][ T4678] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.314920][ T126] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 102.325470][ T126] usb 5-1: config index 0 descriptor too short (expected 65016, got 133) [ 102.355316][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.372396][ T126] usb 5-1: config index 1 descriptor too short (expected 65016, got 133) [ 102.394274][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.436666][ T126] usb 5-1: config index 2 descriptor too short (expected 65016, got 133) [ 102.444207][ T4662] loop0: detected capacity change from 0 to 1024 [ 102.463399][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.484681][ T4662] EXT4-fs (loop0): filesystem is read-only [ 102.500269][ T126] usb 5-1: config index 3 descriptor too short (expected 65016, got 133) [ 102.506569][ T4662] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 102.528918][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.560958][ T4662] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 102.566589][ T126] usb 5-1: config index 4 descriptor too short (expected 65016, got 133) [ 102.579839][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.614165][ T126] usb 5-1: config index 5 descriptor too short (expected 65016, got 133) [ 102.615983][ T4662] EXT4-fs error (device loop0): ext4_get_journal_inode:5756: comm syz.0.95: inode #1: comm syz.0.95: iget: illegal inode # [ 102.640017][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.669636][ T4680] loop1: detected capacity change from 0 to 8192 [ 102.678413][ T126] usb 5-1: config index 6 descriptor too short (expected 65016, got 133) [ 102.696803][ T4662] EXT4-fs (loop0): no journal found [ 102.706532][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.708835][ T4662] EXT4-fs (loop0): can't get journal size [ 102.730184][ T126] usb 5-1: config index 7 descriptor too short (expected 65016, got 133) [ 102.756735][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.772280][ T4662] EXT4-fs error (device loop0): __ext4_fill_super:5423: inode #2: comm syz.0.95: iget: special inode unallocated [ 102.799296][ T126] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 102.809112][ T4662] EXT4-fs (loop0): get root inode failed [ 102.828517][ T4662] EXT4-fs (loop0): mount failed [ 102.842135][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.887816][ T126] usb 5-1: Product: syz [ 102.892631][ T126] usb 5-1: Manufacturer: syz [ 102.897327][ T126] usb 5-1: SerialNumber: syz [ 102.957619][ T126] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 103.051836][ T126] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 103.128774][ T22] usb 1-1: USB disconnect, device number 3 [ 103.731376][ T22] usb 5-1: USB disconnect, device number 5 [ 103.855245][ T4704] loop0: detected capacity change from 0 to 128 [ 103.916531][ T4704] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.931459][ T4704] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.230713][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 104.340950][ T126] usb 5-1: Service connection timeout for: 256 [ 104.347417][ T126] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 104.378372][ T126] ath9k_htc: Failed to initialize the device [ 104.406172][ T4709] loop0: detected capacity change from 0 to 1024 [ 104.501120][ T22] usb 5-1: ath9k_htc: USB layer deinitialized [ 105.016406][ T4727] loop0: detected capacity change from 0 to 256 [ 105.201019][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.437903][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 105.501751][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 105.588741][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.657005][ T22] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.774847][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.835454][ T22] usb 4-1: config 0 descriptor?? [ 105.841240][ T4718] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.073210][ T4742] syz.4.121 uses obsolete (PF_INET,SOCK_PACKET) [ 106.292927][ T22] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 106.300402][ T22] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 106.343812][ T22] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 106.364765][ T4752] loop0: detected capacity change from 0 to 16 [ 106.376464][ T22] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 106.386194][ T4752] erofs: (device loop0): mounted with root inode @ nid 36. [ 106.400758][ T22] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 106.429613][ T22] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 106.485115][ T4718] loop3: detected capacity change from 0 to 8 [ 106.493155][ T4746] loop2: detected capacity change from 0 to 1024 [ 106.529789][ T22] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 106.550875][ T4746] EXT4-fs (loop2): bad geometry: block count 4294901760 exceeds size of device (512 blocks) [ 106.576561][ T22] usb 4-1: USB disconnect, device number 4 [ 106.991886][ T4757] fido_id[4757]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 107.876445][ T4777] usb usb7: usbfs: process 4777 (syz.3.134) did not claim interface 0 before use [ 108.063433][ T4782] trusted_key: encrypted_key: insufficient parameters specified [ 108.117899][ T4784] loop0: detected capacity change from 0 to 256 [ 108.430875][ T4793] loop3: detected capacity change from 0 to 16 [ 108.457101][ T4793] erofs: (device loop3): mounted with root inode @ nid 36. [ 109.019583][ T4808] loop3: detected capacity change from 0 to 1024 [ 109.382504][ T4808] hfsplus: catalog name length corrupted [ 110.146732][ T4812] loop2: detected capacity change from 0 to 2048 [ 110.217489][ T4812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.267725][ T4819] loop4: detected capacity change from 0 to 512 [ 110.414918][ T4822] loop0: detected capacity change from 0 to 1024 [ 110.836546][ T4819] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.068186][ T4819] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.585018][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 111.765681][ T4830] trusted_key: encrypted_key: insufficient parameters specified [ 111.958411][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 112.443806][ T4842] loop4: detected capacity change from 0 to 128 [ 112.477585][ T4842] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 112.698404][ T4842] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 112.720887][ T4842] FAT-fs (loop4): Filesystem has been set read-only [ 112.729651][ T4842] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 113.335415][ T4861] loop4: detected capacity change from 0 to 764 [ 113.403360][ T1198] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.602837][ T1198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.638959][ T1198] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.676856][ T1198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.704978][ T1198] usb 1-1: config 0 descriptor?? [ 113.827352][ T4871] trusted_key: encrypted_key: insufficient parameters specified [ 113.854546][ T4871] loop2: detected capacity change from 0 to 256 [ 114.135718][ T1198] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 114.164451][ T1198] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input10 [ 114.258649][ T1198] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 114.706574][ T4891] loop1: detected capacity change from 0 to 1024 [ 114.755678][ T4893] loop4: detected capacity change from 0 to 764 [ 115.227706][ T4901] loop2: detected capacity change from 0 to 1024 [ 115.797122][ T4901] hfsplus: catalog name length corrupted [ 116.146256][ T1198] usb 1-1: USB disconnect, device number 4 [ 116.331770][ T4911] trusted_key: encrypted_key: insufficient parameters specified [ 116.345874][ T4911] loop3: detected capacity change from 0 to 256 [ 117.251044][ T4281] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.373564][ T4924] device syzkaller0 entered promiscuous mode [ 117.451342][ T4281] usb 2-1: Using ep0 maxpacket: 32 [ 117.468763][ T4281] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.499074][ T4281] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.523162][ T4281] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.555383][ T4281] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 117.579668][ T4281] usb 2-1: Product: syz [ 117.589533][ T4281] usb 2-1: Manufacturer: syz [ 117.613175][ T4281] hub 2-1:4.0: USB hub found [ 117.726900][ T4935] loop4: detected capacity change from 0 to 764 [ 117.730954][ T4938] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.825267][ T4281] hub 2-1:4.0: 2 ports detected [ 118.190947][ T4408] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.231060][ T4328] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.383680][ T4408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.394710][ T4408] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.404197][ T4408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.423775][ T4408] usb 1-1: config 0 descriptor?? [ 118.426093][ T4328] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 118.451226][ T4281] usb 2-1: USB disconnect, device number 6 [ 118.470856][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.479288][ T4328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.489732][ T4328] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.510036][ T4328] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.531098][ T4328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.540057][ T4328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.557167][ T4328] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.566900][ T4328] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.580268][ T4328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.588325][ T4328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.598508][ T4328] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.610042][ T4328] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.624607][ T4328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.632862][ T4328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.643891][ T4328] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.653215][ T4328] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.666253][ T4328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.672983][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 118.679929][ T4328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.701183][ T22] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 118.709487][ T22] usb 3-1: config 0 has no interface number 0 [ 118.715943][ T4328] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.724945][ T22] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 118.735825][ T4328] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.749929][ T4328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.764422][ T22] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 118.780936][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.789047][ T22] usb 3-1: Product: syz [ 118.793359][ T22] usb 3-1: Manufacturer: syz [ 118.798253][ T22] usb 3-1: SerialNumber: syz [ 118.803742][ T4328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.816828][ T22] usb 3-1: config 0 descriptor?? [ 118.822029][ T4328] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.832965][ T4328] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.850097][ T4408] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 118.852139][ T4947] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 118.874797][ T4328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.882860][ T4408] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input12 [ 118.888332][ T4328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.913791][ T4328] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.928622][ T4328] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.951646][ T4328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.960131][ T4328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.970450][ T4328] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.979577][ T4328] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.002487][ T4328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.009864][ T4408] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 119.011738][ T4328] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 119.097315][ T4328] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 119.113371][ T4947] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 119.170927][ T4328] usb 5-1: Product: syz [ 119.175279][ T4328] usb 5-1: Manufacturer: syz [ 119.195507][ T4328] usb 5-1: SerialNumber: syz [ 119.227142][ T4328] usb 5-1: config 0 descriptor?? [ 119.252940][ T4328] yurex 5-1:0.0: Could not find endpoints [ 119.490475][ T4960] device syzkaller0 entered promiscuous mode [ 119.582178][ T22] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 119.597987][ T22] asix: probe of 3-1:0.188 failed with error -61 [ 119.683939][ T4945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.701274][ T4945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.804196][ T4968] loop3: detected capacity change from 0 to 764 [ 120.061591][ T4974] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 120.134371][ T4281] usb 5-1: USB disconnect, device number 6 [ 120.231002][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.433116][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.450894][ T22] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.459988][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.502473][ T22] usb 4-1: config 0 descriptor?? [ 120.816241][ T4981] loop4: detected capacity change from 0 to 128 [ 120.869965][ T4981] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.909844][ T4981] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.977090][ T4408] usb 1-1: USB disconnect, device number 5 [ 121.282419][ T7] usb 3-1: USB disconnect, device number 3 [ 121.365540][ T4991] device syzkaller0 entered promiscuous mode [ 121.407437][ T4994] loop2: detected capacity change from 0 to 128 [ 121.429781][ T4994] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 121.481021][ T4408] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.516252][ T4433] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.682616][ T4408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.725350][ T4408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.770114][ T4408] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.787346][ T5002] loop1: detected capacity change from 0 to 764 [ 121.798837][ T4408] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.846428][ T4408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.881927][ T4408] usb 5-1: config 0 descriptor?? [ 122.080042][ T5009] loop1: detected capacity change from 0 to 2048 [ 122.088327][ T4281] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.150206][ T5009] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.281161][ T4281] usb 1-1: Using ep0 maxpacket: 8 [ 122.292734][ T4281] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.330403][ T4408] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 122.334264][ T4281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 122.345981][ T4408] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 122.367740][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 122.439034][ T4281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.470431][ T4281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 122.483285][ T4281] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 122.493762][ T4281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 122.505955][ T4281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 122.518127][ T4281] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 122.577762][ T4281] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 122.621227][ T4281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.629337][ T4281] usb 1-1: Product: syz [ 122.647588][ T4281] usb 1-1: Manufacturer: syz [ 122.652795][ T4281] usb 1-1: SerialNumber: syz [ 122.714722][ T4281] usb 1-1: config 0 descriptor?? [ 122.730430][ T5004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.747639][ T5004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.831214][ T5022] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 123.086790][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 123.095238][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 123.116511][ T22] usb 4-1: USB disconnect, device number 5 [ 123.323261][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.435570][ T5031] netlink: 'syz.3.233': attribute type 13 has an invalid length. [ 123.496872][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.537345][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 123.552424][ T27] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 123.580899][ T27] usb 3-1: config 0 has no interface number 0 [ 123.587093][ T27] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 123.601727][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.611915][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.619883][ T27] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 123.629742][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.650065][ T27] usb 3-1: Product: syz [ 123.658702][ T27] usb 3-1: Manufacturer: syz [ 123.667654][ T27] usb 3-1: SerialNumber: syz [ 123.677772][ T27] usb 3-1: config 0 descriptor?? [ 123.687968][ T5027] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 123.910323][ T5027] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 124.051707][ T5039] device syzkaller0 entered promiscuous mode [ 124.388448][ T5044] loop4: detected capacity change from 0 to 512 [ 124.417177][ T5044] EXT4-fs: Ignoring removed bh option [ 124.436967][ T5044] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 124.449663][ T5047] loop3: detected capacity change from 0 to 764 [ 124.449784][ T5045] loop1: detected capacity change from 0 to 2048 [ 124.505939][ T4408] usb 5-1: USB disconnect, device number 7 [ 124.526765][ T5044] EXT4-fs (loop4): 1 truncate cleaned up [ 124.544834][ T27] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 124.563821][ T27] asix: probe of 3-1:0.188 failed with error -32 [ 124.610870][ T5044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 124.633503][ T5045] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 124.759222][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 125.310705][ T5058] loop3: detected capacity change from 0 to 1024 [ 125.618632][ T5058] hfsplus: catalog name length corrupted [ 126.243694][ T4408] usb 3-1: USB disconnect, device number 4 [ 126.262589][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 126.720938][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.780522][ T5078] device syzkaller0 entered promiscuous mode [ 126.933419][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.950922][ T27] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 126.960015][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.016761][ T27] usb 5-1: config 0 descriptor?? [ 127.578035][ T951] usb 1-1: USB disconnect, device number 6 [ 128.521236][ T5093] trusted_key: encrypted_key: insufficient parameters specified [ 130.247211][ T5089] loop1: detected capacity change from 0 to 1024 [ 130.803179][ T5100] loop3: detected capacity change from 0 to 256 [ 130.916131][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 130.925931][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 130.987315][ T27] usb 5-1: USB disconnect, device number 8 [ 131.350964][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.362404][ T5113] device syzkaller0 entered promiscuous mode [ 131.534011][ T5119] loop0: detected capacity change from 0 to 512 [ 131.543675][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.560973][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.570561][ T5119] ext4: Unknown parameter 'noacl' [ 131.598841][ T5121] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 131.607041][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.657089][ T22] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.676627][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.707685][ T22] usb 2-1: config 0 descriptor?? [ 131.963962][ T5128] loop0: detected capacity change from 0 to 1024 [ 132.059527][ T4444] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.069130][ T5133] device syzkaller0 entered promiscuous mode [ 132.337404][ T22] usbhid 2-1:0.0: can't add hid device: -71 [ 132.346267][ T22] usbhid: probe of 2-1:0.0 failed with error -71 [ 132.372646][ T22] usb 2-1: USB disconnect, device number 7 [ 132.477058][ T5139] loop4: detected capacity change from 0 to 1024 [ 132.494507][ T4281] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.525229][ T5139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.771385][ T5139] ================================================================== [ 132.779522][ T5139] BUG: KASAN: use-after-free in ext4_xattr_list_entries+0x2c8/0x380 [ 132.787537][ T5139] Read of size 4 at addr ffff888053620028 by task syz.4.270/5139 [ 132.795264][ T5139] [ 132.797624][ T5139] CPU: 0 PID: 5139 Comm: syz.4.270 Not tainted syzkaller #0 [ 132.804928][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 132.815010][ T5139] Call Trace: [ 132.818309][ T5139] [ 132.821237][ T5139] dump_stack_lvl+0x188/0x24e [ 132.825923][ T5139] ? __lock_acquire+0x7d10/0x7d10 [ 132.830963][ T5139] ? show_regs_print_info+0x12/0x12 [ 132.836202][ T5139] ? load_image+0x400/0x400 [ 132.840731][ T5139] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 132.842624][ T4281] usb 4-1: config index 0 descriptor too short (expected 45, got 43) [ 132.846197][ T5139] ? __virt_addr_valid+0x188/0x540 [ 132.846230][ T5139] ? __virt_addr_valid+0x465/0x540 [ 132.861321][ T4281] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 132.864592][ T5139] ? ext4_xattr_list_entries+0x2c8/0x380 [ 132.864625][ T5139] print_report+0xa8/0x210 [ 132.874897][ T4281] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.880312][ T5139] kasan_report+0x10b/0x140 [ 132.880347][ T5139] ? ext4_xattr_list_entries+0x2c8/0x380 [ 132.907819][ T5139] ext4_xattr_list_entries+0x2c8/0x380 [ 132.913325][ T5139] ? ext4_get_inode_loc+0xc2/0xf0 [ 132.918384][ T5139] ext4_listxattr+0x208/0x5f0 [ 132.923102][ T5139] ? kasan_quarantine_put+0xd4/0x220 [ 132.928415][ T5139] ? lockdep_hardirqs_on+0x94/0x140 [ 132.933648][ T5139] ? ext4_xattr_get+0x650/0x650 [ 132.938540][ T5139] ? user_path_at_empty+0x48/0x60 [ 132.943591][ T5139] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 132.949010][ T5139] listxattr+0x283/0x2e0 [ 132.953295][ T5139] ? ext4_xattr_get+0x650/0x650 [ 132.958176][ T5139] path_listxattr+0xe1/0x1b0 [ 132.962805][ T5139] ? path_getxattr+0x4d0/0x4d0 [ 132.967604][ T5139] ? lockdep_hardirqs_on+0x94/0x140 [ 132.972831][ T5139] do_syscall_64+0x4c/0xa0 [ 132.977275][ T5139] ? clear_bhb_loop+0x60/0xb0 [ 132.981984][ T5139] ? clear_bhb_loop+0x60/0xb0 [ 132.986688][ T5139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.992612][ T5139] RIP: 0033:0x7f0e12d9af79 [ 132.997058][ T5139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.016704][ T5139] RSP: 002b:00007f0e13c35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 133.025149][ T5139] RAX: ffffffffffffffda RBX: 00007f0e13015fa0 RCX: 00007f0e12d9af79 [ 133.033150][ T5139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 133.041152][ T5139] RBP: 00007f0e12e316e0 R08: 0000000000000000 R09: 0000000000000000 [ 133.049155][ T5139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.057152][ T5139] R13: 00007f0e13016038 R14: 00007f0e13015fa0 R15: 00007ffe1b11b7b8 [ 133.065162][ T5139] [ 133.068201][ T5139] [ 133.070538][ T5139] The buggy address belongs to the physical page: [ 133.071504][ T4281] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 133.076951][ T5139] page:ffffea00014d8800 refcount:2 mapcount:1 mapping:ffff888077f1fb58 index:0x68e pfn:0x53620 [ 133.076977][ T5139] memcg:ffff888079b50000 [ 133.076987][ T5139] aops:shmem_aops ino:434 dentry name(?):"dev/zero" [ 133.092536][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.096329][ T5139] flags: 0xfff80000080016(referenced|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 133.096365][ T5139] raw: 00fff80000080016 ffffea00014d9bc8 ffffea00014d8848 ffff888077f1fb58 [ 133.096382][ T5139] raw: 000000000000068e 0000000000000000 0000000200000000 ffff888079b50000 [ 133.100711][ T4281] usb 4-1: Product: syz [ 133.107188][ T5139] page dumped because: kasan: bad access detected [ 133.107199][ T5139] page_owner tracks the page as allocated [ 133.107204][ T5139] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5149, tgid 5148 (syz.0.273), ts 132985626082, free_ts 80593153363 [ 133.107237][ T5139] post_alloc_hook+0x173/0x1a0 [ 133.107266][ T5139] get_page_from_freelist+0x1a1e/0x1ab0 [ 133.186832][ T5139] __alloc_pages+0x1ec/0x4f0 [ 133.191562][ T5139] __folio_alloc+0xe/0x30 [ 133.195922][ T5139] vma_alloc_folio+0x4a3/0x900 [ 133.200719][ T5139] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 133.206464][ T5139] shmem_get_folio_gfp+0x1361/0x3400 [ 133.211861][ T5139] shmem_fault+0x1b6/0x780 [ 133.216309][ T5139] __do_fault+0x13b/0x4e0 [ 133.220659][ T5139] handle_mm_fault+0x2407/0x3ee0 [ 133.225616][ T5139] __get_user_pages+0x40d/0xec0 [ 133.230494][ T5139] populate_vma_page_range+0x214/0x2b0 [ 133.236064][ T5139] __mm_populate+0x25c/0x380 [ 133.240688][ T5139] vm_mmap_pgoff+0x212/0x2d0 [ 133.245314][ T5139] do_syscall_64+0x4c/0xa0 [ 133.249758][ T5139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.255675][ T5139] page last free stack trace: [ 133.260359][ T5139] free_unref_page_prepare+0x8b4/0x9a0 [ 133.265849][ T5139] free_unref_page_list+0xbb/0x8e0 [ 133.270988][ T5139] release_pages+0x1fa6/0x2220 [ 133.275778][ T5139] __pagevec_release+0x6d/0xe0 [ 133.280571][ T5139] shmem_undo_range+0x7c2/0x20c0 [ 133.285533][ T5139] shmem_evict_inode+0x25b/0xa80 [ 133.290502][ T5139] evict+0x4c9/0x8d0 [ 133.294426][ T5139] do_unlinkat+0x388/0x580 [ 133.298876][ T5139] __x64_sys_unlink+0x45/0x50 [ 133.303577][ T5139] do_syscall_64+0x4c/0xa0 [ 133.308020][ T5139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.313955][ T5139] [ 133.316304][ T5139] Memory state around the buggy address: [ 133.322057][ T5139] ffff88805361ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 133.330151][ T5139] ffff88805361ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 133.338233][ T5139] >ffff888053620000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 133.346309][ T5139] ^ [ 133.351702][ T5139] ffff888053620080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 133.359782][ T5139] ffff888053620100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 133.367857][ T5139] ================================================================== [ 133.471427][ T5151] loop0: detected capacity change from 0 to 128 [ 133.490754][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.499806][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.913274][ T5139] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.920523][ T5139] CPU: 1 PID: 5139 Comm: syz.4.270 Not tainted syzkaller #0 [ 134.927821][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 134.937882][ T5139] Call Trace: [ 134.941164][ T5139] [ 134.944096][ T5139] dump_stack_lvl+0x188/0x24e [ 134.948785][ T5139] ? memcpy+0x3c/0x60 [ 134.952778][ T5139] ? show_regs_print_info+0x12/0x12 [ 134.958006][ T5139] ? load_image+0x400/0x400 [ 134.962551][ T5139] panic+0x2e5/0x730 [ 134.966463][ T5139] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.972629][ T5139] ? bpf_jit_dump+0xd0/0xd0 [ 134.977142][ T5139] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 134.983135][ T5139] ? _raw_spin_unlock+0x40/0x40 [ 134.987994][ T5139] check_panic_on_warn+0x80/0xa0 [ 134.992947][ T5139] ? ext4_xattr_list_entries+0x2c8/0x380 [ 134.998609][ T5139] end_report+0x66/0x110 [ 135.002891][ T5139] kasan_report+0x118/0x140 [ 135.007424][ T5139] ? ext4_xattr_list_entries+0x2c8/0x380 [ 135.013090][ T5139] ext4_xattr_list_entries+0x2c8/0x380 [ 135.018565][ T5139] ? ext4_get_inode_loc+0xc2/0xf0 [ 135.023607][ T5139] ext4_listxattr+0x208/0x5f0 [ 135.028329][ T5139] ? kasan_quarantine_put+0xd4/0x220 [ 135.033621][ T5139] ? lockdep_hardirqs_on+0x94/0x140 [ 135.038828][ T5139] ? ext4_xattr_get+0x650/0x650 [ 135.043688][ T5139] ? user_path_at_empty+0x48/0x60 [ 135.048716][ T5139] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 135.054104][ T5139] listxattr+0x283/0x2e0 [ 135.058365][ T5139] ? ext4_xattr_get+0x650/0x650 [ 135.063221][ T5139] path_listxattr+0xe1/0x1b0 [ 135.067826][ T5139] ? path_getxattr+0x4d0/0x4d0 [ 135.072599][ T5139] ? lockdep_hardirqs_on+0x94/0x140 [ 135.077808][ T5139] do_syscall_64+0x4c/0xa0 [ 135.082239][ T5139] ? clear_bhb_loop+0x60/0xb0 [ 135.086921][ T5139] ? clear_bhb_loop+0x60/0xb0 [ 135.091603][ T5139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.097500][ T5139] RIP: 0033:0x7f0e12d9af79 [ 135.101928][ T5139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.121539][ T5139] RSP: 002b:00007f0e13c35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 135.129994][ T5139] RAX: ffffffffffffffda RBX: 00007f0e13015fa0 RCX: 00007f0e12d9af79 [ 135.137968][ T5139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 135.145940][ T5139] RBP: 00007f0e12e316e0 R08: 0000000000000000 R09: 0000000000000000 [ 135.153911][ T5139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.161884][ T5139] R13: 00007f0e13016038 R14: 00007f0e13015fa0 R15: 00007ffe1b11b7b8 [ 135.169862][ T5139] [ 135.173279][ T5139] Kernel Offset: disabled [ 135.177601][ T5139] Rebooting in 86400 seconds..