last executing test programs: 28.315858814s ago: executing program 3 (id=78): io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) nanosleep(&(0x7f0000000040), 0x0) 27.971111161s ago: executing program 3 (id=81): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) read$FUSE(r5, &(0x7f0000003ec0)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0x0, [0xb, 0x3, 0x8, 0x200, 0x1, 0x872, 0x497, 0xfff, 0x100, 0xbdc9, 0x7, 0x69da00, 0x10, 0x1, 0x800, 0x1000, 0x4, 0x6ef, 0x0, 0x1, 0x4, 0x8001, 0x6, 0x3ff, 0x99e4, 0x9, 0x0, 0x3ff, 0x8, 0x7, 0xfffff000, 0x3, 0x4, 0x3, 0x9, 0x8000000, 0x8, 0x6, 0x1, 0x400, 0xfff, 0x4, 0xb, 0x3ff, 0xfffffffc, 0x2, 0x6, 0xb, 0x5, 0x3, 0x614b, 0x8, 0x200, 0x6, 0x3, 0x1, 0xc, 0x9, 0x2, 0xca2a, 0x0, 0x2, 0xcf, 0x5, 0x1, 0x7, 0x80000000, 0xa, 0x8, 0x10, 0x2, 0x2, 0x101, 0xfffffffc, 0x6, 0xfffff000, 0x2, 0xb6, 0x9, 0x0, 0x2, 0x2, 0xe18, 0x0, 0x53b6, 0x6, 0x5, 0x40, 0x0, 0x8, 0x9, 0x6, 0x7, 0x7ff, 0xfffffff5, 0x4, 0x2, 0x25552a11, 0x0, 0x7, 0x5, 0xffff, 0x3, 0x2, 0x3, 0x3, 0x0, 0xd, 0x7fffffff, 0xa, 0x8, 0x6c90, 0x97e, 0x1, 0x2, 0x9, 0x8, 0x6, 0xd, 0x3, 0x35, 0x2, 0x7f, 0x7, 0x8000, 0x4, 0x8, 0x2]}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x27c}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r8, 0x4b52, &(0x7f0000000000)) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, 0x0, 0x0) fstat(r5, 0x0) sendfile(r5, r5, &(0x7f00000000c0)=0x7, 0x6fecb1) 25.826595018s ago: executing program 3 (id=83): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x3, 0x46f, &(0x7f0000001200)="$eJzs3M1vFOUfAPDv7G7hx2v3h/gCoqJoJL60tKBy8KKJiQdNTPSAx1oKQRZqaE2ENLYYghcTJeFuTLyY+Bd48kTUk4lXvBsSYriAelkz3dllu91tt91tt3U/n2To83Sf3ef7nZln55kZpgH0rYPpP0nEzoi4GRGDEZGrb7CtsqTt7t2ZGf/rzsx4EuXyu38m6dvi7p2Z8WrTJPu5o1IppB+Uu5JEsUm/UxcvnR0rlSYuZPXh6XMfDU9dvPTimXNjpydOT5wfPX782NGRV14efakreaYx3d3/6eSBfW++f+3t8RPXPvj5+0q85fL1G0cW5NEdAxExU1snjZ7pbmc9t6uunBR6GAgrsjUiCtneejMGI39ld+21wXjjs54GB6ypcrlcHm398lwZ+A9LotcRAL1RPdCn57/VpX4C8M/aTj967vZrlROgNO972VJ5pRCXszYDDee33XQwIk7M/f11ukTD9RQAgLXwYzr/eaHJ/K8Y8VBdu93ZvaFiRPw/IvZExAMRsTciHoxK24cj4pEV9n+wob54/pO7tbrM2pPO/17N7m0tnP/V7oIV81lt13z+A8mpM6WJI9k6ORwDW9P6SNNPTyLm0p+/fdmq//r5X7qk/VfnglkctwpbF77n5Nj0WMeJZ25fjthfaJZ/EoX7WcS+iNi/yj7OPPfdgYW/yddKy+e/hC7cZyp/E/FsZfvPRUP+VcnS9yeH/xeliSPD1b1isV9+vfpOq/47yr8L0u2/ven+X8u/mNTfr51a9BFbluvj6u+ftzynWe3+vyV5b0Hnn4xNT18YidiSvLX493UXuKv1avs0/8OHmo//PXF/TTwaEelO/FhEPB4RT2SxPxkRT0XEoSXy/+n1pz9cff5rK81/dkXbf+WF/NkbP7Tqv73tf6xamQ+qne+/dgPsZN0BAADAZpGLiJ2R5IZq5VxuaKjy/+X3xvZcaXJq+vlTkx+fP1l5RqAYA7nqla7BuuuhI9m14Wp9NKvPZvWj2XXj6/lt8/Wh8cnSyV4nD31uR4vxn/oj3+vogDXneS3oX8Y/9K/Vj3/fHLDZLTOKc+sVB7D+HMWhfzUb/7M9iANYf47/0L9q4/+rNhrXPe7V+PAmsPk4/kP/Mv6hL3XyXP+GKMS3EUu3STZKqCsqfNHJ2wvrEGHkNsaKWsfCaD6ih2EU2v2rFnGxPNtxp73+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//Oyno9g==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 24.971603231s ago: executing program 3 (id=89): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) 23.56134325s ago: executing program 3 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x18, 0x8, 0x40, 0x40, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={r0, &(0x7f0000000180), 0x0}, 0x20) 19.091855952s ago: executing program 3 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.982015357s ago: executing program 32 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.005780233s ago: executing program 1 (id=127): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4091}, 0x20000011) unshare(0x62040200) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa9, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x23) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x700, 0x7807, 0x0, 0x4, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x66, 0x0, 0x2, 0x4, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x4, 0xe2, 0x1, 0x1}, @rr={0x7, 0x17, 0x6c, [@local, @multicast1, @private=0xa010101, @multicast2, @private=0xa010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'gretap0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) 7.742708105s ago: executing program 1 (id=149): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) 7.612719782s ago: executing program 1 (id=150): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x3, 0x46f, &(0x7f0000001200)="$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") prctl$PR_MCE_KILL(0x35, 0x1, 0x0) socket(0x18, 0x803, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpgid(r0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, @void}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r4 = socket$inet6(0xa, 0x3, 0x5) setresuid(0x0, 0xee00, 0x0) sendmmsg(r4, &(0x7f0000000140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000004793a8e1c913983ba8297c0029000000030000005700000000000000"], 0x18}}], 0x1, 0x24008000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 7.594331523s ago: executing program 0 (id=151): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, 0x0, 0x40) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000003640)={{0x12, 0x1, 0x0, 0x9, 0x7f, 0x2, 0x40, 0xbfd, 0x11a, 0x853e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x80, 0x6, "", [{{0x9, 0x4, 0x1c, 0xcf, 0x0, 0x4c, 0xc, 0xd2, 0x9}}]}}]}}, 0x0) 4.863724488s ago: executing program 1 (id=162): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socket$netlink(0x10, 0x3, 0x9) 4.682777787s ago: executing program 4 (id=163): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2800000, &(0x7f0000000500), 0x1, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") r1 = socket(0x25, 0x3, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fremovexattr(r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0xffd}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) socket$inet(0x2, 0x1, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x303}, "1468a26e2308e8b8", "9b3b9022c54ef9949208a796c7ecc3dfbca390ef91026222426fb2f9b75c622c", "021caa90", "d49472d62cbe8d8d"}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002000)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdff0000010200010008000600000000000c001400e0a396e5aa98ddf4"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000000) syz_genetlink_get_family_id$batadv(0x0, r1) openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x2000000000000012, &(0x7f0000000080)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 4.522323635s ago: executing program 0 (id=164): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001300)={0x44, &(0x7f00000010c0)={0x20, 0xc, 0x6, "3f9b14d5caa1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 4.392969051s ago: executing program 5 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 4.140024924s ago: executing program 1 (id=168): syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120101020af9570894060100166701020301090212000106ef400a0904"], &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) 4.064742068s ago: executing program 5 (id=169): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000340)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3", 0x2b}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x400c001}, 0x17e07d0d239ae846) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.530233854s ago: executing program 2 (id=170): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x37303250, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 3.529881644s ago: executing program 5 (id=171): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000200)="00c89baaef78d2e2bc058900591687ca00008100", 0x14}, {&(0x7f0000000100)="82f9", 0x2}], 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x7}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3.522624235s ago: executing program 4 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 3.476987657s ago: executing program 2 (id=173): syz_usb_connect$uac2(0x2, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6f, 0x40, 0x33, {0x8, 0xb, 0x0, 0x2, 0x1, 0xa, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1ff, 0xff, 0x15, 0x6b}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0x4, 0x1, 0xed, 0x7, 0x3d}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0xa, 0x8, {0x8, 0x25, 0x1, 0x83, 0x3, 0x76, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x0, 0xfb, {0x8, 0x25, 0x1, 0x0, 0x0, 0x10, 0x1}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 3.377740062s ago: executing program 4 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x1000000003, 0x0, 0x8, 0x0, 0x6, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.159381203s ago: executing program 4 (id=175): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x10}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$sock(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)='9', 0x1}], 0x1}}], 0x1, 0x4c00) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.20486991s ago: executing program 4 (id=176): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 2.127105334s ago: executing program 1 (id=177): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x17, 0xf, "b3aa98ae1fc2c28d413366ee9a1776"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 1.619688339s ago: executing program 2 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x28, {0x3, 0x3}}, {0x7, 0xfff8, {0x1, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x80, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xb}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x5}}, {0x2, 0x200, {0x3, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x0, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x2, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x3, 0x1}}, {0x40, 0x6, {0x1, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x10001}}, {0x5, 0x3, {0x2}}, {0x401, 0x5, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000142000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 1.39678565s ago: executing program 2 (id=179): ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000180)=@ethtool_eee={0x44, 0xfffffff8, 0x3, 0x9, 0xf940, 0x10003, 0xfffffff7, 0x5, [0x800, 0x10003]}}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x8080) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.350874093s ago: executing program 4 (id=180): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT=0x0], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, r0, 0x0) 1.340428683s ago: executing program 2 (id=181): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa05", 0x5c}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6a", 0x1c}, {0x0}, {&(0x7f0000000cc0)="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", 0xfc}, {0x0}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {0x0}], 0x7, &(0x7f00000014c0)}}, {{&(0x7f0000000500)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80, &(0x7f0000000580)=[{&(0x7f0000003840)="a724f62f362cbf2eb314123dfde22125a5285e5e9ab141e1f62433d0c3e58c93ccbc70ca8fed20ce356f89a808c5ce4cfaf700aabb2c21a21899177b9cb87383f48d453dabf1dc3b87d273704b579f4e7398a4a1e03127a7ffdee4ba3af6c2ddfad7d5ba0c67eed7cc5e048e3f84281e8c325aab535368c9bed46170a2476256c9609679ea97ef1c98fa86176dc4f80e74800ec18379c3773a9a6fa007bf4832dbd9761b4cbadbb83221759e6b8d58ed89c75f9d09190f3b55129d0ba3337c9c4ce12a331a2755610df63e81c74a4b243737dd958ceb54bdb4a18469df6500ca5a5a421679b802e723bc5ce6e0f110179c7b2e87d23785fa487b1e144119dea004161e4f9e9bc8b628617715674501fcc8c49f53806e3d421061642eacde65f1c09fafd53d80bb9cd0102323799f83587dbeabffba1b7b88f4efbfedbeed8c1aa61c4d96a2ad9f9a17023e6a91427bfe5d2688f244e1e35967f16977ffa72a65b33e1d8e5bc2852adb7247c71f8275671ffbacf849312604418ef3c20702425324d79c5a65ab416b9cde0ed44b46340168bebe51b0bf297798d5170be634490a654bc20d3c78d7f869c4fd26b24a96d561af83cb4fd15620e882ba184d9cd6215544d200228e93635f6e9d83a5aca6e28c8cdc2ed3984fbbdc8e5249e934b5c117f7b4ac4af0616bd17301ba5b6ffd5708b65cb00991b515b6279019580013a04633e0c2ceb928f7d9433a301591a16659bce8941b6f901cc3d38b417f78109ab4fae944baf9aedbe6cfaf26539aa3d19c527bec09d996eff60e6a13971767e141d984effa556e9ecc12718feeff0dd508fa2158811df8d4abd0541747ffd023235355bf1f0310966e7a2e665920cdcf8d119db8409ca47c4f0f420aadac1541238fc53be569005c74ca36fb88d54f3c4a25825887874e5905b45aaa8cbec9298fadfc69438dfbb1490b4562628583bda309eca33f641fd6d64d7e371d742891ac376990333da8227fed11fa9d76ba6353afef26548b585137c0de3fca07026f432305c6c6c3b5e8b562a5bf0ee1422a4126b838250d689c0541140979a4a2d8317fd1a96be449e8362cc5fca6b1ee9d67a5d1eadbddf47e0a764ede63922eee4883ef03bb70d09d130154528bcb9d47d1929075300eb6627c6b398f8b5465fd2bde68b4a50bc0b9ab52754a05a82f045d70605726804fb61aeb26b2a8cc9f12eb2649c0f349d4213522e5bb5d48fc99e8c2a7d62d5c4520f8d2a8da44be128d6e3de7db38fb39758c7232bbaa30049200cf8e7f5761f1f54b34b8f5e915eff65898bc25062622655c431eebed08bc264f17a0404b27e663a2b383450a8ceb36fcc0974865c48efb481e159eb992dc478c592fb3c25941eab073b018fddfc9df3bf00955d295f7f53045942985ff096a2e0175b686ef3b4dbdcd6d8bf457eba8750434f4b0fc05d1600268c75310790388b44b207ac105326af14513987dd243e13aa5f3796f4153eca7faf48a0974ba7b24b1c39c0b2cad2b654b3d87418cb43e863eda66927988d67d2595ff89ac6db4888f72465a2177e03c6ccd4b194975373d322e104e7828fa541c3c444933f8ced4bb642f836697f4c16465346de3b194d10761cfdb382cf0a8f9fc74e88faee0a92af0b4ceeb2f03f786c9d31112466c85be89d4c500be07bcc3a7f4f6eaf7f07af03d43fffacd35b05a66ebbe2be07aa5d7bf435bbd55ddd01adc66d75c78489978d8e40a40de0a8b29c34acfd3ffd75195151dc2b5b6b5e76f38ed4c1b1405be4891dc20effcaa8af021e84f2998182a6bb84382a08559032fd01177158eb162a77458d0d3dc1ede3a853c7ba1263af2447e5e23e485207cebe28a53e126f3d160fa7fd1c17814cbe7c4fc8c79b8dd81eb788751f3e20fd125591eca6bcedbf6be64e7ce2e7fcaea869e39a162ddec8631fa568f4357a3a638127f3ab6b01b08280e0c05cc829f48327fcf72387b7cbed777d5002179994914ef30d1b4b4432447386f863eb4972a378551dae6bb8c485ecffb7487978278428b72021670b6ccdce409247c1aaa2e6f6b749309d61e39a3217b041c897cb62786ab5e9b7965cab52f74b1d41d7fcd513c46d4f34e62d4ce65d1ed770fb800ea6edd584ddd4274acc1e34eb7fe854c40c876dd2aa57679b0b86bb7df2ae54238dc493a5dfcad124f49aa0d39e7cb1bfa347cf41818c22d7f6aa506d8a00e94f8d094e8c254331c16fd26328f76c7f2bea9f56dc405f6a8b952377267c39eb0af7d5c19b10a72e1d20feb6e61ed9f8e8233b1daaeb3a5ea9137a7abbc5bc2ae48e8b9d090517e97ebc1fca17d4e58b92a993dbd89432cb3a02e82738201ad4cdfe5869b31bc85f33a82feaecae90e1432bdbf360efd479a431cbba4291dec68d3ee468da4bb784daee8fbed33814c766fc66bb3b5a88cd8aad99e6a67edae15f15480a1259298eb06ab824be054b56d5e218320472b274574df1f287fbf4c82c4d8061ae50695ce598defa6b277cdc0bdad16d14f38d532ef9cfe264db2ccbbfd9a2f629b5685f01f8778af129d7fc31352b9af12b975f5acc8218f1779c6d5a624f7c7c3eb18997f1580c3c98d56c37c67088234de6838db5f8e02537f72717caecbddbced9e0ed2250b7bf40748f8b4df4d6e90c79923437a83433f34c9be6dbcb9ed5550d9dfddd6b605cfa0e0e22a33cb4423717771684cbb7b733fc66d85115e394903fc0a348ba609c475e3bc1d043ea5659c8b60eaf9e6e67cf968d8ffb95bf8d870db3421751611346d748f0e0b00c5c85b6c9356d6f608f20004ecbea1463a25ee2308968250736a8867485f0544b072da47db102ee3f2d11e094d9796a6d4fa2de7b48ed3af1b9d0756cefb0663781cfb76", 0x801}], 0x1, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0xe}}], 0x48}}], 0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.230043979s ago: executing program 2 (id=182): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x31ce, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0xfd, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ec0)={0x2c, &(0x7f00000000c0)={0x20, 0xf, 0x6, {0x6, 0x22, "2449f4fa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.227038959s ago: executing program 5 (id=183): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2800000, &(0x7f0000000500), 0x1, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") r1 = socket(0x25, 0x3, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fremovexattr(r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0xffd}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) socket$inet(0x2, 0x1, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x303}, "1468a26e2308e8b8", "9b3b9022c54ef9949208a796c7ecc3dfbca390ef91026222426fb2f9b75c622c", "021caa90", "d49472d62cbe8d8d"}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002000)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdff0000010200010008000600000000000c001400e0a396e5aa98ddf4"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000000) syz_genetlink_get_family_id$batadv(0x0, r1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x2000000000000012, &(0x7f0000000080)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 1.108958294s ago: executing program 0 (id=184): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.069139206s ago: executing program 0 (id=185): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b0637bd700000400000300000000a0001007770616e30000000"], 0x20}, 0x1, 0x8000000, 0x0, 0x1}, 0x400c0) 1.014063639s ago: executing program 0 (id=186): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x80, 0x7}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc, 0x15, {0x0, 0x100}}]}, 0x68}}, 0x4004040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 180.94712ms ago: executing program 0 (id=187): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004043556e00400001020301090224000101ff70010904080d010301000709217fff770122b10f09058103"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 153.402282ms ago: executing program 5 (id=188): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="91", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000440)="89376f", 0x3, 0xc09e, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 5 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x9, 0x4519b3ea, 0x6, 0x6, 0x4c9, 0x3, 0x53, 0xa32a, 0x4, 0x94f, 0x7, 0x2, 0x400, 0x1, 0xffffffffffffffff], 0x8080000, 0x28000}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x38, 0x8, 0x81, 0x0, 0x2, 0x6, 0x67, 0x0, 0x2, 0x6, 0x0, 0x9, 0x0, 0x5, 0x4, 0x3, 0xf4, 0x7a, 0x3, '\x00', 0x5, 0x44c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 49.712986][ T4171] cgroup: Unknown subsys name 'net' [ 49.819023][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.031567][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.662037][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.737811][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.834132][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.848869][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.856338][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.864691][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.873844][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 52.903331][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.910505][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.918920][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.936048][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 52.972890][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.979985][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.988595][ T4184] device bridge_slave_0 entered promiscuous mode [ 53.018938][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.026143][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.033926][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.042580][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.059633][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.122553][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.129627][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.138300][ T4189] device bridge_slave_0 entered promiscuous mode [ 53.148490][ T4183] team0: Port device team_slave_0 added [ 53.156559][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.176149][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.183547][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.192033][ T4195] device bridge_slave_0 entered promiscuous mode [ 53.199417][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.206758][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.214892][ T4189] device bridge_slave_1 entered promiscuous mode [ 53.224346][ T4183] team0: Port device team_slave_1 added [ 53.237536][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.259277][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.267001][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.275463][ T4195] device bridge_slave_1 entered promiscuous mode [ 53.309168][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.318519][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.326631][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.334522][ T4191] device bridge_slave_0 entered promiscuous mode [ 53.359814][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.376221][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.383528][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.391629][ T4191] device bridge_slave_1 entered promiscuous mode [ 53.400492][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.411113][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.418081][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.444088][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.457980][ T4184] team0: Port device team_slave_0 added [ 53.475828][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.485373][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.492369][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.518819][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.531788][ T4184] team0: Port device team_slave_1 added [ 53.539916][ T4189] team0: Port device team_slave_0 added [ 53.558816][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.577652][ T4189] team0: Port device team_slave_1 added [ 53.595703][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.627525][ T4191] team0: Port device team_slave_0 added [ 53.644164][ T4195] team0: Port device team_slave_0 added [ 53.650538][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.657622][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.684205][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.697315][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.704667][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.730725][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.743775][ T4191] team0: Port device team_slave_1 added [ 53.749951][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.757000][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.788352][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.800872][ T4195] team0: Port device team_slave_1 added [ 53.823820][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.831483][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.857772][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.909921][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.916793][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.939464][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.946847][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.953863][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.961876][ T4184] Cannot create hsr debugfs directory [ 53.967767][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.974941][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.000973][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.012875][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.019845][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.046470][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.073232][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.080205][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.106327][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.124600][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.131793][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.158061][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.195022][ T4189] device hsr_slave_0 entered promiscuous mode [ 54.202027][ T4189] device hsr_slave_1 entered promiscuous mode [ 54.208452][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.216387][ T4189] Cannot create hsr debugfs directory [ 54.286764][ T4195] device hsr_slave_0 entered promiscuous mode [ 54.293416][ T4195] device hsr_slave_1 entered promiscuous mode [ 54.300272][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.308063][ T4195] Cannot create hsr debugfs directory [ 54.328593][ T4191] device hsr_slave_0 entered promiscuous mode [ 54.335609][ T4191] device hsr_slave_1 entered promiscuous mode [ 54.342520][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.350091][ T4191] Cannot create hsr debugfs directory [ 54.411839][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 54.411840][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 54.412445][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 54.441106][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 54.447217][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 54.619677][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.632202][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.642010][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.656832][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.694742][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.706574][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.716057][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.726900][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.791346][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.841374][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.862157][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.885692][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.895678][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.924623][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.947367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.956810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.965792][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.978488][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.993828][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.008607][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.020361][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.029102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.037744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.066085][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.075612][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.098297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.107353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.116822][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.124123][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.133757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.144341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.153552][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.160632][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.168516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.179397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.188630][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.196007][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.204230][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.215174][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.223967][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.243956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.252359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.260659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.272419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.282969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.291701][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.298915][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.311244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.321524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.330152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.368721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.377655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.387380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.396211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.406241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.415072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.424449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.433265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.441939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.450228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.459224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.468436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.477223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.489700][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.527414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.545813][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.563102][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.609008][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.624533][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.637467][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.650382][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.664645][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.687628][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.707631][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.722819][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.763546][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.777429][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.788448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.796707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.806835][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.833102][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.842604][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.849853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.872983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.886219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.895052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.904337][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.911452][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.919310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.952991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.962023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.972295][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.979802][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.989565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.998884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.007567][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.014794][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.023825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.032532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.041983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.050477][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.057557][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.065911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.075067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.085637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.094221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.104680][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.127121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.135669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.145167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.157537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.165270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.174056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.182970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.192536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.201476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.210077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.219450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.233824][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.260629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.279458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.290291][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.297444][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.310944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.320001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.330609][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.337713][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.345475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.354742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.369009][ T4183] device veth0_vlan entered promiscuous mode [ 56.382840][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.394553][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.417858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.432638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.445228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.454236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.462816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.471995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.480615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.489435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.497116][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 56.502711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.503273][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 56.512162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.516875][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 56.529685][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 56.536281][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 56.539855][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.555773][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.590825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.605739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.625687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.654721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.663946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.673430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.682637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.691928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.700157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.710457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.718922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.727523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.736306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.745844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.754217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.762299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.769943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.784228][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.793397][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.823206][ T4183] device veth1_vlan entered promiscuous mode [ 56.832486][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.853347][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.872389][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.885025][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.941157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.948666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.962604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.971627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.985775][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.999615][ T4184] device veth0_vlan entered promiscuous mode [ 57.011236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.019838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.045268][ T4183] device veth0_macvtap entered promiscuous mode [ 57.064119][ T4184] device veth1_vlan entered promiscuous mode [ 57.074898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.084711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.098885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.114808][ T4183] device veth1_macvtap entered promiscuous mode [ 57.132856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.141391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.150073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.159204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.168625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.208041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.218293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.226810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.235145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.246855][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.255694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.265352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.277750][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.294228][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.304527][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.318711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.328989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.337692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.346906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.355883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.364644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.373759][ T4191] device veth0_vlan entered promiscuous mode [ 57.390196][ T4184] device veth0_macvtap entered promiscuous mode [ 57.400534][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.409994][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.418978][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.428950][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.441693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.451604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.460162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.473742][ T4191] device veth1_vlan entered promiscuous mode [ 57.483812][ T4184] device veth1_macvtap entered promiscuous mode [ 57.504633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.513343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.521449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.529965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.573026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.581704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.590414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.606108][ T4189] device veth0_vlan entered promiscuous mode [ 57.618771][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.629949][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.643050][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.655464][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.666103][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.678134][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.687476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.696993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.707098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.716211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.725287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.734289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.743870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.751996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.769086][ T4189] device veth1_vlan entered promiscuous mode [ 57.780547][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.790445][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.799418][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.808495][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.858118][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.868672][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.877089][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.886047][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.895466][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.904452][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.913957][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.922311][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.932040][ T4191] device veth0_macvtap entered promiscuous mode [ 57.957345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.965867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.974796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.986790][ T4195] device veth0_vlan entered promiscuous mode [ 58.001958][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.004202][ T4191] device veth1_macvtap entered promiscuous mode [ 58.009945][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.050279][ T4195] device veth1_vlan entered promiscuous mode [ 58.058331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.073820][ T4189] device veth0_macvtap entered promiscuous mode [ 58.095896][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.105437][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.117378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.127739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.138327][ T4189] device veth1_macvtap entered promiscuous mode [ 58.155503][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.169261][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.180599][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.193822][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.204847][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.215963][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.226883][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.240549][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.251785][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.262739][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.278430][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.287429][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.296500][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.306515][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.328431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.344906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.359306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.369276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.378566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.427699][ T4195] device veth0_macvtap entered promiscuous mode [ 58.439040][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.441301][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.458630][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.476485][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.483143][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.497098][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.507430][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.518155][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.537574][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.552632][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.562942][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.572631][ T4226] Bluetooth: hci4: command 0x040f tx timeout [ 58.573523][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.579197][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 58.593543][ T4226] Bluetooth: hci1: command 0x040f tx timeout [ 58.594377][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.600201][ T4226] Bluetooth: hci0: command 0x040f tx timeout [ 58.612109][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.626736][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 58.637935][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.674318][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.695622][ T4268] loop2: detected capacity change from 0 to 512 [ 58.697323][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.712462][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.723531][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.734122][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.745766][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.757455][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.767658][ T4195] device veth1_macvtap entered promiscuous mode [ 58.783317][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.799751][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.801844][ T4268] EXT4-fs (loop2): Ignoring removed bh option [ 58.810836][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.831263][ T4268] EXT4-fs (loop2): inline encryption not supported [ 58.837847][ T4268] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.842748][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.863026][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.873804][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.886333][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.919937][ T4268] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 58.925560][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.946131][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.952460][ T4268] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6: bg 0: block 248: padding at end of block bitmap is not set [ 58.956143][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.977342][ T4268] Quota error (device loop2): write_blk: dquota write failed [ 58.989419][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.999400][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.999586][ T4268] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 59.009991][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.010002][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.010015][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.011691][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.024191][ T4268] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.6: Failed to acquire dquot type 1 [ 59.039267][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.046906][ T4268] EXT4-fs (loop2): 1 truncate cleaned up [ 59.061930][ T393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.093048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.105347][ T393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.106677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.113834][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.130642][ T4268] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 59.131279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.153697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.361553][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.364378][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.490731][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.507039][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.861813][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.880244][ T4278] loop4: detected capacity change from 0 to 1024 [ 59.887674][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.922913][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.933689][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.943730][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.954236][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.961924][ T4278] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.965578][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.990924][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.004504][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.020507][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.032861][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.041377][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.048231][ T4278] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 60.050119][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.101389][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.110130][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.119312][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.128068][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.247928][ T481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.283961][ T481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.304370][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.332564][ T4257] Quota error (device loop2): remove_tree: Getting block too big (0 >= 6) [ 60.359093][ T4257] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 1 [ 60.450865][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.458735][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.493056][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.526868][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.536619][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.546441][ T4290] loop2: detected capacity change from 0 to 256 [ 60.563458][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.602282][ T4292] device bridge1 entered promiscuous mode [ 60.657545][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 60.675032][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 60.711009][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 60.735700][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 60.757239][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 60.815779][ T4296] loop4: detected capacity change from 0 to 512 [ 60.932793][ T4296] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 60.960207][ T4296] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.981417][ T4296] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.11: Block bitmap for bg 0 marked uninitialized [ 61.120403][ T4296] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 61.161274][ T4296] EXT4-fs (loop4): 1 orphan inode deleted [ 61.190781][ T4296] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.611569][ T4308] 9pnet_virtio: no channels available for device syz [ 61.649526][ T4308] overlayfs: './file1' not a directory [ 62.475925][ T4298] loop1: detected capacity change from 0 to 40427 [ 62.594315][ T4298] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 62.632297][ T4298] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 62.724340][ T4298] F2FS-fs (loop1): invalid crc value [ 62.813081][ T4298] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 63.182831][ T4298] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 63.190696][ C0] sched: RT throttling activated [ 63.229121][ T4298] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.449744][ T4306] loop2: detected capacity change from 0 to 40427 [ 63.468455][ T4306] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 63.477900][ T4306] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 63.512832][ T4195] attempt to access beyond end of device [ 63.512832][ T4195] loop1: rw=2049, want=45104, limit=40427 [ 63.542165][ T4306] F2FS-fs (loop2): invalid crc value [ 63.563318][ T4315] loop4: detected capacity change from 0 to 256 [ 63.589032][ T4306] F2FS-fs (loop2): Found nat_bits in checkpoint [ 63.665569][ T4315] ======================================================= [ 63.665569][ T4315] WARNING: The mand mount option has been deprecated and [ 63.665569][ T4315] and is ignored by this kernel. Remove the mand [ 63.665569][ T4315] option from the mount to silence this warning. [ 63.665569][ T4315] ======================================================= [ 63.752293][ T4306] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 63.782293][ T4306] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.890808][ T26] audit: type=1800 audit(1774581333.603:2): pid=4306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 65.263796][ T4342] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.306807][ T4344] loop4: detected capacity change from 0 to 1024 [ 65.413499][ T4344] EXT4-fs (loop4): Ignoring removed bh option [ 65.424758][ T4344] EXT4-fs (loop4): Ignoring removed oldalloc option [ 65.447382][ T4344] EXT4-fs (loop4): Ignoring removed nobh option [ 65.464630][ T4344] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.503035][ T4344] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 65.503035][ T4344] [ 65.813236][ T4350] loop3: detected capacity change from 0 to 512 [ 66.046108][ T4352] loop2: detected capacity change from 0 to 512 [ 67.208889][ T4350] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 67.270185][ T4352] EXT4-fs (loop2): 1 truncate cleaned up [ 67.276314][ T4352] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nodelalloc,jqfmt=vfsv1,noload,inode_readahead_blks=0x0000000000000001,nouid32,,errors=continue. Quota mode: none. [ 67.978729][ T4350] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.016721][ T4350] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.26: Block bitmap for bg 0 marked uninitialized [ 68.132086][ T4350] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 68.201099][ T4350] EXT4-fs (loop3): 1 orphan inode deleted [ 68.207151][ T4350] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.013757][ T4369] loop0: detected capacity change from 0 to 256 [ 69.050239][ T4369] exfat: Deprecated parameter 'utf8' [ 69.226287][ T4371] loop1: detected capacity change from 0 to 4096 [ 69.316107][ T4371] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.465457][ T4378] loop2: detected capacity change from 0 to 256 [ 70.530488][ T4369] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119abc6) [ 70.560140][ T4378] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 70.573047][ T4378] exFAT-fs (loop2): failed to load alloc-bitmap [ 70.580027][ T4378] exFAT-fs (loop2): failed to recognize exfat type [ 70.581127][ T4381] loop4: detected capacity change from 0 to 256 [ 70.588194][ T4369] exFAT-fs (loop0): invalid boot region [ 70.600659][ T4369] exFAT-fs (loop0): failed to recognize exfat type [ 70.666017][ T4385] loop3: detected capacity change from 0 to 512 [ 70.759815][ T4381] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 70.787356][ T4385] EXT4-fs (loop3): Ignoring removed bh option [ 70.814230][ T4385] EXT4-fs (loop3): inline encryption not supported [ 70.828780][ T4385] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.895402][ T4385] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 71.032668][ T4385] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.36: bg 0: block 248: padding at end of block bitmap is not set [ 71.158130][ T26] audit: type=1800 audit(1774581340.873:3): pid=4380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.34" name="file1" dev="loop4" ino=1048593 res=0 errno=0 [ 71.158706][ T4385] Quota error (device loop3): write_blk: dquota write failed [ 71.243122][ T4385] Quota error (device loop3): find_free_dqentry: Can't write quota data block 4 [ 71.271635][ T4385] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 71.299464][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.306130][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.330260][ T4385] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.36: Failed to acquire dquot type 1 [ 71.373548][ T4385] EXT4-fs (loop3): 1 truncate cleaned up [ 71.379237][ T4385] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 71.504774][ T4392] loop0: detected capacity change from 0 to 256 [ 71.512232][ T4385] Quota error (device loop3): write_blk: dquota write failed [ 71.556907][ T4385] Quota error (device loop3): find_free_dqentry: Can't write quota data block 4 [ 71.582317][ T4385] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 71.601010][ T4385] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.36: Failed to acquire dquot type 1 [ 71.637421][ T4403] loop1: detected capacity change from 0 to 512 [ 71.684039][ T4392] netlink: 'syz.0.38': attribute type 4 has an invalid length. [ 71.744808][ T4385] syz.3.36 (4385) used greatest stack depth: 19344 bytes left [ 71.768987][ T4403] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.851350][ T4403] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.900585][ T4403] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.080880][ T4403] EXT4-fs (loop1): 1 truncate cleaned up [ 72.086766][ T4403] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x000000000000000d,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,data_err=ignore,dioread_lock,. Quota mode: none. [ 72.340944][ T4185] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.559985][ T4413] loop2: detected capacity change from 0 to 40427 [ 72.706305][ T4413] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x1ffff [ 72.770982][ T4185] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 72.812847][ T4185] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 73.011241][ T4428] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.060937][ T4185] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.070111][ T4185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 73.100030][ T4185] usb 4-1: SerialNumber: syz [ 74.096343][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'. [ 74.105325][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.113981][ T4284] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.752100][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.880996][ T4284] usb 2-1: Using ep0 maxpacket: 16 [ 74.911981][ T4185] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 75.043467][ T4185] usb 4-1: USB disconnect, device number 2 [ 75.060936][ T4284] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.073083][ T4185] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 75.088578][ T4284] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.277463][ T4451] loop2: detected capacity change from 0 to 256 [ 75.284335][ T4284] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.300284][ T4284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.317418][ T4284] usb 2-1: Product: syz [ 75.326205][ T4284] usb 2-1: Manufacturer: syz [ 75.336402][ T4284] usb 2-1: SerialNumber: syz [ 75.390057][ T4451] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 75.757157][ T26] audit: type=1800 audit(1774581345.473:4): pid=4453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.59" name="file1" dev="loop2" ino=1048594 res=0 errno=0 [ 75.841223][ T4284] usb 2-1: 0:2 : does not exist [ 75.937310][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.945967][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.128243][ T4284] usb 2-1: USB disconnect, device number 2 [ 76.194171][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.423837][ T1325] cfg80211: failed to load regulatory.db [ 77.073014][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.326795][ T4466] loop2: detected capacity change from 0 to 256 [ 77.368349][ T4466] FAT-fs (loop2): Unrecognized mount option "shortjame=wn95" or missing value [ 77.877527][ T4468] loop2: detected capacity change from 0 to 40427 [ 77.924407][ T4468] F2FS-fs (loop2): invalid crc value [ 77.965187][ T4468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.066113][ T4468] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 78.117076][ T4468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.163984][ T26] audit: type=1800 audit(1774581347.883:5): pid=4468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.66" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 78.228018][ T4446] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.239242][ T4446] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.251456][ T4446] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.260459][ T4446] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.272758][ T4183] attempt to access beyond end of device [ 78.272758][ T4183] loop2: rw=2049, want=45104, limit=40427 [ 79.121034][ T4185] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.601506][ T4491] loop3: detected capacity change from 0 to 256 [ 79.619686][ T4493] loop2: detected capacity change from 0 to 1024 [ 79.666700][ T4491] exfat: Deprecated parameter 'utf8' [ 79.726128][ T4493] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 79.729518][ T4491] exfat: Deprecated parameter 'namecase' [ 79.739296][ T4491] exfat: Deprecated parameter 'namecase' [ 79.749406][ T4491] exfat: Unknown parameter 'sys_tz' [ 79.766228][ T4493] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.888630][ T4493] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,data_err=abort,inode_readahead_blks=0x0000000000000004,data_err=ignore,init_itable,max_dir_size_kb=0x00000000004007b1,data_err=ignore,errors=continue,mblk_io_submit,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 80.400865][ T4269] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.804737][ T4517] loop2: detected capacity change from 0 to 4096 [ 80.863485][ T4511] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 80.925967][ T4517] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.947206][ T4511] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 82.461101][ T4269] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 82.500861][ T4269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.516210][ T4527] loop3: detected capacity change from 0 to 512 [ 82.533216][ T4269] usb 5-1: Product: syz [ 82.553458][ T4269] usb 5-1: Manufacturer: syz [ 82.571095][ T4527] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 82.591834][ T4269] usb 5-1: SerialNumber: syz [ 82.608619][ T4527] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.620940][ T4527] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.83: Block bitmap for bg 0 marked uninitialized [ 82.652312][ T4527] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 82.721254][ T4527] EXT4-fs (loop3): 1 orphan inode deleted [ 82.747059][ T4523] loop1: detected capacity change from 0 to 40427 [ 82.762083][ T4523] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 82.768501][ T4523] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 82.780268][ T4527] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.792977][ T4523] F2FS-fs (loop1): invalid crc value [ 82.859200][ T4523] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 82.950499][ T4538] 9pnet_virtio: no channels available for device syz [ 82.997544][ T4538] overlayfs: './file1' not a directory [ 83.019858][ T4523] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 83.033850][ T4523] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.209416][ T4195] attempt to access beyond end of device [ 83.209416][ T4195] loop1: rw=2049, want=45104, limit=40427 [ 83.920488][ T4550] loop3: detected capacity change from 0 to 512 [ 84.251815][ T4550] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.89: iget: bad i_size value: 38620345925642 [ 84.376735][ T4550] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.89: couldn't read orphan inode 15 (err -117) [ 84.427983][ T4550] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 84.724420][ T4558] loop2: detected capacity change from 0 to 256 [ 84.730252][ T4565] loop4: detected capacity change from 0 to 512 [ 85.132958][ T4565] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 85.199515][ T4565] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.409172][ T4565] EXT4-fs (loop4): shut down requested (0) [ 86.225919][ T4560] ODEBUG: Out of memory. ODEBUG disabled [ 86.400914][ T4269] rtl8150 5-1:1.0: couldn't reset the device [ 86.417909][ T4269] rtl8150: probe of 5-1:1.0 failed with error -5 [ 86.467019][ T4269] usb 5-1: USB disconnect, device number 2 [ 86.553825][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 86.978094][ T4554] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 87.303238][ T4574] syz.1.95 (4574) used greatest stack depth: 17240 bytes left [ 87.373577][ T4375] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.400975][ T4375] Quota error (device loop4): write_blk: dquota write failed [ 87.446848][ T4375] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 87.458184][ T4375] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.475663][ T4375] Quota error (device loop4): write_blk: dquota write failed [ 87.483649][ T4375] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 87.499334][ T4375] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 87.525209][ T4375] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 87.694033][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 87.706070][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 87.715459][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 87.726269][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 87.735458][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 87.745223][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 87.754357][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 87.763691][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 87.772814][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 88.668990][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.193864][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.261146][ T4592] loop1: detected capacity change from 0 to 512 [ 89.326778][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.347955][ T4592] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 89.389860][ T4592] EXT4-fs (loop1): orphan cleanup on readonly fs [ 89.406266][ T4592] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.99: Block bitmap for bg 0 marked uninitialized [ 89.482702][ T4592] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 89.505063][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.536117][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.552020][ T4592] EXT4-fs (loop1): 1 orphan inode deleted [ 89.589009][ T4592] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.717446][ T4597] 9pnet_virtio: no channels available for device syz [ 89.759401][ T4597] overlayfs: './file1' not a directory [ 89.916039][ T1325] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 89.925454][ T4602] loop0: detected capacity change from 0 to 512 [ 89.933179][ T1325] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 89.989627][ T4595] chnl_net:caif_netlink_parms(): no params data found [ 90.050458][ T4602] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.110989][ T1325] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 90.120776][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.128781][ T1325] usb 5-1: Product: syz [ 90.133229][ T1325] usb 5-1: Manufacturer: syz [ 90.137245][ T4580] loop2: detected capacity change from 0 to 131072 [ 90.137826][ T1325] usb 5-1: SerialNumber: syz [ 90.185200][ T4602] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 90.209198][ T4602] Quota error (device loop0): write_blk: dquota write failed [ 90.231870][ T4602] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 90.248960][ T4595] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.256668][ T4602] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.102: Failed to acquire dquot type 0 [ 90.274204][ T4580] F2FS-fs (loop2): inline encryption not supported [ 90.286017][ T4602] EXT4-fs (loop0): 1 truncate cleaned up [ 90.292849][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.293598][ T4602] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 90.341054][ T4595] device bridge_slave_0 entered promiscuous mode [ 90.509136][ T4580] fscrypt: Error allocating hmac(sha512): -2 [ 90.527463][ T4580] F2FS-fs (loop2): Error processing option "test_dummy_encryption" [-2] [ 90.642506][ T4595] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.677364][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.798087][ T4595] device bridge_slave_1 entered promiscuous mode [ 90.938064][ T4595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.981055][ T1325] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 90.996742][ T4595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.006802][ T1325] usb 5-1: unit 6 not found! [ 91.708639][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 91.732661][ T1325] usb 5-1: USB disconnect, device number 3 [ 91.756042][ T4641] loop2: detected capacity change from 0 to 256 [ 91.852271][ T26] audit: type=1326 audit(1774581361.563:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3a7f799 code=0x7ffc0000 [ 91.921317][ T26] audit: type=1326 audit(1774581361.573:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3a7f799 code=0x7ffc0000 [ 91.965637][ T4644] __nla_validate_parse: 11 callbacks suppressed [ 91.965654][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 92.000224][ T4650] loop4: detected capacity change from 0 to 256 [ 92.043867][ T26] audit: type=1326 audit(1774581361.613:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f44c3a7f799 code=0x7ffc0000 [ 92.096961][ T4649] loop0: detected capacity change from 0 to 4096 [ 92.204231][ T4649] EXT4-fs (loop0): inline encryption not supported [ 92.207289][ T4595] team0: Port device team_slave_0 added [ 92.209004][ T4595] team0: Port device team_slave_1 added [ 92.215033][ T4650] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 92.222030][ T4644] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 92.222061][ T4644] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 92.222080][ T4644] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 92.608763][ T4595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.608779][ T4595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.608800][ T4595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.610302][ T4595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.610314][ T4595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.610334][ T4595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.659399][ T4649] EXT4-fs (loop0): Test dummy encryption mode enabled [ 92.803453][ T4595] device hsr_slave_0 entered promiscuous mode [ 92.854086][ T4595] device hsr_slave_1 entered promiscuous mode [ 92.899010][ T4595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.929509][ T4595] Cannot create hsr debugfs directory [ 92.985105][ T4649] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 93.052325][ T4649] System zones: 0-5 [ 93.089585][ T4649] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,noquota,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 93.325925][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 93.770911][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 93.851318][ T4671] loop2: detected capacity change from 0 to 512 [ 93.917410][ T4671] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 93.972284][ T4671] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.004800][ T4671] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.112: Block bitmap for bg 0 marked uninitialized [ 94.096567][ T4671] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 94.105953][ T4671] EXT4-fs (loop2): 1 orphan inode deleted [ 94.112713][ T4671] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.313639][ T4682] 9pnet_virtio: no channels available for device syz [ 94.410694][ T4682] overlayfs: './file1' not a directory [ 94.587085][ T144] device hsr_slave_0 left promiscuous mode [ 94.623737][ T144] device hsr_slave_1 left promiscuous mode [ 94.656067][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.675316][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.706744][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.766235][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.787851][ T144] device bridge_slave_1 left promiscuous mode [ 94.796028][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.813583][ T144] device bridge_slave_0 left promiscuous mode [ 94.819863][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.843422][ T144] device veth1_macvtap left promiscuous mode [ 94.906913][ T144] device veth0_macvtap left promiscuous mode [ 94.919406][ T144] device veth1_vlan left promiscuous mode [ 94.946228][ T144] device veth0_vlan left promiscuous mode [ 96.294187][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 96.460861][ T144] team0 (unregistering): Port device team_slave_1 removed [ 96.486232][ T144] team0 (unregistering): Port device team_slave_0 removed [ 96.519259][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.554070][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.622147][ T4721] netlink: 240 bytes leftover after parsing attributes in process `syz.2.121'. [ 96.694486][ T144] bond0 (unregistering): Released all slaves [ 96.710393][ T4723] loop2: detected capacity change from 0 to 256 [ 96.746514][ T4723] exfat: Deprecated parameter 'utf8' [ 96.787944][ T4723] exfat: Deprecated parameter 'utf8' [ 96.849749][ T4723] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 97.079526][ T4595] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.140804][ T4595] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.191403][ T4595] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.193111][ T4740] comedi comedi0: dt2815: I/O port conflict (0x6,2) [ 97.282814][ T4595] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.365628][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 97.970952][ T4230] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.218521][ T4595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.261093][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.269145][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.300112][ T4595] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.311718][ T4760] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.331188][ T4225] Bluetooth: hci3: command 0x0419 tx timeout [ 98.337833][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 98.361166][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.366910][ T4230] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.378920][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.409250][ T4764] af_packet: tpacket_rcv: packet too big, clamped from 32834 to 3966. macoff=82 [ 98.434438][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.441582][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.478816][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.490179][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.499910][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.507068][ T4257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.515074][ T4230] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.524740][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.533541][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.543415][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.552819][ T4230] usb 2-1: SerialNumber: syz [ 98.561570][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.580396][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.590505][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.601970][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.618696][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.640325][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.651630][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.660262][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.684453][ T4595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.718238][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.741027][ T4225] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.750606][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.784863][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.804142][ T4773] binder: 4772:4773 ioctl c0306201 2000000003c0 returned -14 [ 98.980821][ T4225] usb 5-1: Using ep0 maxpacket: 8 [ 99.097812][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.116250][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.147719][ T4595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.201145][ T1109] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.278537][ T4230] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 99.340960][ T4225] usb 5-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice= 0.40 [ 99.360277][ T4225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.397864][ T4225] usb 5-1: Product: syz [ 99.411866][ T4225] usb 5-1: Manufacturer: syz [ 99.427404][ T4225] usb 5-1: SerialNumber: syz [ 99.457431][ T1109] usb 1-1: Using ep0 maxpacket: 8 [ 99.490412][ T4807] tipc: Started in network mode [ 99.496139][ T4807] tipc: Node identity 0e00822939af, cluster identity 4711 [ 99.511094][ T4807] tipc: Enabled bearer , priority 0 [ 99.577699][ T4807] device syzkaller0 entered promiscuous mode [ 99.604817][ T4805] tipc: Resetting bearer [ 99.664639][ T4805] tipc: Disabling bearer [ 99.694527][ T4230] usb 2-1: USB disconnect, device number 3 [ 99.706028][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.719294][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.724815][ T4230] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 99.740970][ T1109] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 99.748896][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.761210][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.764776][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.771778][ T4595] device veth0_vlan entered promiscuous mode [ 99.790785][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.799811][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.810740][ T1109] usb 1-1: Product: syz [ 99.814940][ T1109] usb 1-1: Manufacturer: syz [ 99.818782][ T4595] device veth1_vlan entered promiscuous mode [ 99.820872][ T4225] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 99.860907][ T1109] usb 1-1: SerialNumber: syz [ 99.876731][ T1109] usb 1-1: config 0 descriptor?? [ 99.882465][ T4225] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 99.940253][ T4225] usb 5-1: USB disconnect, device number 4 [ 99.948182][ T1109] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 99.977534][ T1109] dvb-usb: bulk message failed: -22 (2/0) [ 100.028380][ T1109] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.064056][ T1109] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 100.076763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.094844][ T1109] usb 1-1: media controller created [ 100.105197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.141471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.169218][ T1109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.182821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.184057][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.216173][ T4595] device veth0_macvtap entered promiscuous mode [ 100.236861][ T4595] device veth1_macvtap entered promiscuous mode [ 100.275879][ T1109] cxusb: set interface failed [ 100.282907][ T1109] dvb-usb: bulk message failed: -22 (1/0) [ 100.358077][ T1109] DVB: Unable to find symbol mt352_attach() [ 100.371233][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.384773][ T1109] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 100.409652][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.463802][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.476186][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.496943][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.580720][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.611608][ T4595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.623082][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.640971][ T1109] rc_core: IR keymap rc-dvico-portable not found [ 100.648101][ T1109] Registered IR keymap rc-empty [ 100.658505][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.692407][ T1109] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 100.694848][ T4853] loop1: detected capacity change from 0 to 512 [ 100.732259][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.736951][ T1109] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 100.766887][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.783535][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.800741][ T1109] dvb-usb: schedule remote query interval to 100 msecs. [ 100.812215][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.822424][ T1109] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 100.840904][ T4595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.855962][ T1109] usb 1-1: USB disconnect, device number 2 [ 100.865476][ T4857] loop4: detected capacity change from 0 to 4096 [ 100.867616][ T4595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.888504][ T4595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.918190][ T4853] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 100.941034][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.975853][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.008444][ T4853] EXT4-fs (loop1): orphan cleanup on readonly fs [ 101.012615][ T1109] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 101.046320][ T4857] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.048399][ T4595] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.061323][ T4853] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.150: Block bitmap for bg 0 marked uninitialized [ 101.067000][ T4595] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.088540][ T4595] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.097389][ T4595] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.184372][ T4853] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 101.304231][ T4853] EXT4-fs (loop1): 1 orphan inode deleted [ 101.387335][ T4853] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.860444][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.873272][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.880955][ T1109] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 101.951909][ T4874] 9pnet_virtio: no channels available for device syz [ 101.997596][ T4874] overlayfs: './file1' not a directory [ 102.191487][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.207418][ T4667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.278964][ T4667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.357860][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.944169][ T4892] binder: transaction release 10 bad handle 3, ret = -22 [ 103.488514][ T4898] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.516286][ T4909] syz.5.160 uses obsolete (PF_INET,SOCK_PACKET) [ 103.701336][ T4919] loop4: detected capacity change from 0 to 4096 [ 103.810796][ T1109] usb 1-1: unable to read config index 0 descriptor/all [ 103.818285][ T1109] usb 1-1: can't read configurations, error -71 [ 103.912982][ T4919] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.024734][ T4932] tipc: Enabled bearer , priority 0 [ 104.053448][ T4932] device syzkaller0 entered promiscuous mode [ 104.064747][ T4931] tipc: Resetting bearer [ 104.134531][ T4931] tipc: Disabling bearer [ 104.548451][ T1325] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.766209][ T1109] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.841164][ T1325] usb 2-1: Using ep0 maxpacket: 8 [ 105.000846][ T1325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.034306][ T4958] kvm: pic: single mode not supported [ 105.034442][ T4958] kvm: pic: level sensitive irq not supported [ 105.083805][ T13] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 105.140852][ T1109] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 105.191586][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24929, setting to 1024 [ 105.217779][ T1109] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 105.271046][ T1325] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=67.16 [ 105.288339][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.323963][ T1325] usb 2-1: Product: syz [ 105.341763][ T1325] usb 2-1: Manufacturer: syz [ 105.354506][ T1325] usb 2-1: SerialNumber: syz [ 105.416233][ T1109] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 105.443211][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.458675][ T1109] usb 1-1: Product: syz [ 105.471401][ T1109] usb 1-1: Manufacturer: syz [ 105.476035][ T1109] usb 1-1: SerialNumber: syz [ 105.483728][ T1109] usb 1-1: config 0 descriptor?? [ 105.501086][ T4928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.508565][ T4928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.520937][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.560932][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 105.672196][ T1325] legousbtower 2-1:6.0: interrupt endpoints not found [ 105.697850][ T1325] usb 2-1: USB disconnect, device number 4 [ 105.731939][ T4928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.741414][ T4928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.804286][ T13] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 105.826650][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.850181][ T13] usb 3-1: Product: syz [ 105.869328][ T13] usb 3-1: Manufacturer: syz [ 105.885953][ T13] usb 3-1: SerialNumber: syz [ 106.096676][ T5011] binder: 5009:5011 ioctl c0306201 0 returned -14 [ 106.162366][ T5018] binder: 5009:5018 ioctl c0306201 0 returned -14 [ 106.205806][ T1109] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 106.271067][ T13] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 106.290853][ T13] usb 3-1: unit 1 not found! [ 106.295506][ T13] usb 3-1: unit 237 not found! [ 106.343157][ T13] usb 3-1: USB disconnect, device number 2 [ 106.512445][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.615564][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.631846][ T1109] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 106.665493][ T1109] usb 1-1: USB disconnect, device number 4 [ 106.935395][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.984804][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.017943][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.033417][ T21] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.043178][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.099879][ T21] usb 2-1: config 0 descriptor?? [ 107.197714][ T5050] loop5: detected capacity change from 0 to 4096 [ 107.220817][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.284611][ T5050] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.380722][ T4225] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.584931][ T5061] EXT4-fs (loop5): shut down requested (2) [ 107.717418][ T21] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 108.062495][ T21] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 108.220991][ T13] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.239960][ T13] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 108.252581][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.261761][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 108.273506][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 108.310843][ T4225] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 253, using maximum allowed: 30 [ 108.328273][ T4225] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.347134][ T4225] usb 3-1: config 1 interface 0 has no altsetting 0 [ 108.373367][ T5071] ------------[ cut here ]------------ [ 108.379326][ T5071] WARNING: CPU: 0 PID: 5071 at arch/x86/kvm/vmx/vmx.c:1714 vmx_queue_exception+0x2b9/0x470 [ 108.389898][ T5071] Modules linked in: [ 108.394495][ T5071] CPU: 1 PID: 5071 Comm: syz.5.189 Not tainted syzkaller #0 [ 108.401818][ T13] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.401844][ T13] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.401861][ T13] usb 5-1: Product: syz [ 108.401873][ T13] usb 5-1: Manufacturer: syz [ 108.428968][ T1325] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.436752][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.441746][ T13] cdc_wdm 5-1:1.0: skipping garbage [ 108.446968][ T5071] RIP: 0010:vmx_queue_exception+0x2b9/0x470 [ 108.458085][ T5071] Code: 01 00 00 e8 a9 7e 58 00 eb 0c e8 a2 7e 58 00 eb 05 e8 9b 7e 58 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 87 7e 58 00 <0f> 0b e9 a7 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 6e fd ff ff e8 9e [ 108.458417][ T13] cdc_wdm 5-1:1.0: skipping garbage [ 108.479572][ T5071] RSP: 0018:ffffc900034cf590 EFLAGS: 00010283 [ 108.489692][ T5071] RAX: ffffffff8120a289 RBX: ffff888077d20000 RCX: 0000000000080000 [ 108.497242][ T13] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 108.498441][ T5071] RDX: ffffc90015f67000 RSI: 000000000000048b RDI: 000000000000048c [ 108.509499][ T13] cdc_wdm 5-1:1.0: Unknown control protocol [ 108.512278][ T5071] RBP: 0000000000000000 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 108.539970][ T5071] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff888077d226fc [ 108.548279][ T5071] R13: dffffc0000000000 R14: 0000000000000008 R15: 0000000080000808 [ 108.560138][ T4185] usb 2-1: USB disconnect, device number 5 [ 108.567627][ T5071] FS: 00007f04920ee6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 108.590840][ T5071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.597599][ T5071] CR2: 000000110c2ce7d2 CR3: 000000005d666000 CR4: 00000000003526e0 [ 108.605910][ T4225] usb 3-1: string descriptor 0 read error: -22 [ 108.612304][ T5071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.612465][ T4225] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.40 [ 108.620615][ T5071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.635803][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.638124][ T5071] Call Trace: [ 108.651366][ T5071] [ 108.654310][ T5071] ? kvm_inject_exception+0x15f/0x320 [ 108.659787][ T5071] vcpu_enter_guest+0x849/0x7010 [ 108.664933][ T5071] ? __lock_acquire+0x7d10/0x7d10 [ 108.669987][ T5071] ? local_bh_enable+0x20/0x20 [ 108.675101][ T5071] ? is_bpf_text_address+0x254/0x270 [ 108.678597][ T13] usb 5-1: USB disconnect, device number 5 [ 108.680405][ T5071] ? __kernel_text_address+0x9a/0x100 [ 108.695015][ T5071] ? mark_lock+0x94/0x320 [ 108.699978][ T5071] ? __lock_acquire+0x13bc/0x7d10 [ 108.713953][ T5071] ? kfree+0xef/0x2a0 [ 108.718081][ T5071] ? mark_lock+0x94/0x320 [ 108.722736][ T5071] ? __lock_acquire+0x12e8/0x7d10 [ 108.727792][ T5071] ? kasan_set_track+0x62/0x70 [ 108.733131][ T5071] ? kasan_set_track+0x4b/0x70 [ 108.737909][ T5071] ? security_file_ioctl+0x6c/0xa0 [ 108.743484][ T5071] ? verify_lock_unused+0x140/0x140 [ 108.749006][ T5071] ? mark_lock+0x94/0x320 [ 108.755120][ T5071] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 108.761617][ T5071] ? __vmx_interrupt_blocked+0x164/0x1e0 [ 108.767368][ T5071] ? vmx_check_nested_events+0x158a/0x2390 [ 108.773291][ T5071] ? __local_bh_enable_ip+0x136/0x1c0 [ 108.778694][ T5071] ? read_lock_is_recursive+0x10/0x10 [ 108.784798][ T5071] ? handle_vmfunc+0xfb0/0xfb0 [ 108.789565][ T5071] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40 [ 108.795842][ T5071] kvm_vcpu_ioctl+0x8f7/0xc10 [ 108.800544][ T5071] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 108.806481][ T5071] ? bpf_lsm_file_ioctl+0x5/0x10 [ 108.813162][ T5071] ? security_file_ioctl+0x7c/0xa0 [ 108.818290][ T5071] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 108.824168][ T1325] usb 1-1: config 1 has an invalid interface number: 8 but max is 0 [ 108.832228][ T5071] __se_sys_ioctl+0xfa/0x170 [ 108.837025][ T1325] usb 1-1: config 1 has no interface number 0 [ 108.843171][ T1325] usb 1-1: config 1 interface 8 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.854197][ T5071] do_syscall_64+0x4c/0xa0 [ 108.858636][ T5071] ? clear_bhb_loop+0x30/0x80 [ 108.863399][ T5071] ? clear_bhb_loop+0x30/0x80 [ 108.868077][ T5071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.874084][ T1325] usb 1-1: config 1 interface 8 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.883945][ T5071] RIP: 0033:0x7f0493e94799 [ 108.888352][ T5071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.910041][ T1325] usb 1-1: config 1 interface 8 has no altsetting 0 [ 108.916907][ T5071] RSP: 002b:00007f04920ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.926609][ T5071] RAX: ffffffffffffffda RBX: 00007f049410dfa0 RCX: 00007f0493e94799 [ 108.934819][ T5071] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 108.943061][ T5071] RBP: 00007f0493f2ac99 R08: 0000000000000000 R09: 0000000000000000 [ 108.951441][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.959423][ T5071] R13: 00007f049410e038 R14: 00007f049410dfa0 R15: 00007fff32d211a8 [ 108.967745][ T5071] [ 108.971266][ T5071] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.978547][ T5071] CPU: 1 PID: 5071 Comm: syz.5.189 Not tainted syzkaller #0 [ 108.985811][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.995958][ T5071] Call Trace: [ 108.999220][ T5071] [ 109.002150][ T5071] dump_stack_lvl+0x188/0x250 [ 109.006828][ T5071] ? show_regs_print_info+0x20/0x20 [ 109.012011][ T5071] ? load_image+0x400/0x400 [ 109.016514][ T5071] panic+0x2e5/0x810 [ 109.020523][ T5071] ? bpf_jit_dump+0xd0/0xd0 [ 109.025033][ T5071] ? vmx_queue_exception+0x2b9/0x470 [ 109.030330][ T5071] __warn+0x248/0x2b0 [ 109.034308][ T5071] ? vmx_queue_exception+0x2b9/0x470 [ 109.039584][ T5071] report_bug+0x1b7/0x2e0 [ 109.043916][ T5071] handle_bug+0x3a/0x70 [ 109.048088][ T5071] exc_invalid_op+0x16/0x40 [ 109.052583][ T5071] asm_exc_invalid_op+0x16/0x20 [ 109.057426][ T5071] RIP: 0010:vmx_queue_exception+0x2b9/0x470 [ 109.063316][ T5071] Code: 01 00 00 e8 a9 7e 58 00 eb 0c e8 a2 7e 58 00 eb 05 e8 9b 7e 58 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 87 7e 58 00 <0f> 0b e9 a7 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 6e fd ff ff e8 9e [ 109.082935][ T5071] RSP: 0018:ffffc900034cf590 EFLAGS: 00010283 [ 109.089014][ T5071] RAX: ffffffff8120a289 RBX: ffff888077d20000 RCX: 0000000000080000 [ 109.097003][ T5071] RDX: ffffc90015f67000 RSI: 000000000000048b RDI: 000000000000048c [ 109.104985][ T5071] RBP: 0000000000000000 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 109.112993][ T5071] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff888077d226fc [ 109.120957][ T5071] R13: dffffc0000000000 R14: 0000000000000008 R15: 0000000080000808 [ 109.128946][ T5071] ? vmx_queue_exception+0x2b9/0x470 [ 109.134232][ T5071] ? kvm_inject_exception+0x15f/0x320 [ 109.139612][ T5071] vcpu_enter_guest+0x849/0x7010 [ 109.144549][ T5071] ? __lock_acquire+0x7d10/0x7d10 [ 109.149585][ T5071] ? local_bh_enable+0x20/0x20 [ 109.154338][ T5071] ? is_bpf_text_address+0x254/0x270 [ 109.159607][ T5071] ? __kernel_text_address+0x9a/0x100 [ 109.165067][ T5071] ? mark_lock+0x94/0x320 [ 109.169410][ T5071] ? __lock_acquire+0x13bc/0x7d10 [ 109.174446][ T5071] ? kfree+0xef/0x2a0 [ 109.178435][ T5071] ? mark_lock+0x94/0x320 [ 109.182756][ T5071] ? __lock_acquire+0x12e8/0x7d10 [ 109.187796][ T5071] ? kasan_set_track+0x62/0x70 [ 109.192549][ T5071] ? kasan_set_track+0x4b/0x70 [ 109.197315][ T5071] ? security_file_ioctl+0x6c/0xa0 [ 109.202431][ T5071] ? verify_lock_unused+0x140/0x140 [ 109.207650][ T5071] ? mark_lock+0x94/0x320 [ 109.211990][ T5071] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 109.217982][ T5071] ? __vmx_interrupt_blocked+0x164/0x1e0 [ 109.223610][ T5071] ? vmx_check_nested_events+0x158a/0x2390 [ 109.229429][ T5071] ? __local_bh_enable_ip+0x136/0x1c0 [ 109.234785][ T5071] ? read_lock_is_recursive+0x10/0x10 [ 109.240145][ T5071] ? handle_vmfunc+0xfb0/0xfb0 [ 109.244901][ T5071] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40 [ 109.250445][ T5071] kvm_vcpu_ioctl+0x8f7/0xc10 [ 109.255115][ T5071] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 109.260755][ T5071] ? bpf_lsm_file_ioctl+0x5/0x10 [ 109.262547][ T4225] ryos 0003:1E7D:31CE.0002: unexpected long global item [ 109.265700][ T5071] ? security_file_ioctl+0x7c/0xa0 [ 109.277742][ T5071] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 109.278697][ T4225] ryos 0003:1E7D:31CE.0002: parse failed [ 109.283392][ T5071] __se_sys_ioctl+0xfa/0x170 [ 109.283419][ T5071] do_syscall_64+0x4c/0xa0 [ 109.283437][ T5071] ? clear_bhb_loop+0x30/0x80 [ 109.283454][ T5071] ? clear_bhb_loop+0x30/0x80 [ 109.283472][ T5071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.283491][ T5071] RIP: 0033:0x7f0493e94799 [ 109.283510][ T5071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.283524][ T5071] RSP: 002b:00007f04920ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.283545][ T5071] RAX: ffffffffffffffda RBX: 00007f049410dfa0 RCX: 00007f0493e94799 [ 109.298738][ T4225] ryos: probe of 0003:1E7D:31CE.0002 failed with error -22 [ 109.302783][ T5071] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 109.302800][ T5071] RBP: 00007f0493f2ac99 R08: 0000000000000000 R09: 0000000000000000 [ 109.302810][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.302820][ T5071] R13: 00007f049410e038 R14: 00007f049410dfa0 R15: 00007fff32d211a8 [ 109.302847][ T5071] [ 109.303327][ T5071] Kernel Offset: disabled [ 109.400789][ T5071] Rebooting in 86400 seconds..