last executing test programs: 45.807811738s ago: executing program 2 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x184, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x150, 0x2, [@TCA_MATCHALL_ACT={0x14c, 0x2, [@m_ife={0x148, 0x1, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xf6, 0x6, 0x4}, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x100}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xd}, @IFE_META_PRIO={0x8, 0x3, @val=0x8f5f}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3d}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8000}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}]}, {0xa0, 0x6, "a7cefcfe3762aec7f70043d02d9c19e498a3a76a257c4eaa650033792c66221d79ce602b08d3d796cb060f4be9b50532581b0d339d4fe7d3e243e9cdd335af43c7593c5582cae3198ed84e3fdf123639250443a1f91078875c0ce5a2794670641a503121e33bfd052e147224c50a68975d3e14b3c1f1bfb87cef1de99c489e48ebf4753cb026476c232222bfe3b9d8fed9d07d7437c76de4044e8575"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}}]}, 0x184}, 0x1, 0x0, 0x0, 0x24040094}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 45.367543922s ago: executing program 2 (id=153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r4) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 45.064470642s ago: executing program 2 (id=155): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x98, &(0x7f0000000080)=ANY=[], 0xff, 0xa4, &(0x7f0000000180)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=") creat(&(0x7f0000000100)='./file1\x00', 0x182) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) rename(&(0x7f0000000400)='./file1\x00', &(0x7f0000000080)='.\x02\x00') creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa5) unlink(&(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 44.896245617s ago: executing program 2 (id=156): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7672732c6e6f6164696e6963622c706172746974696f6e3d303030303030303030300000000000e884f8dcb0bdacbdadd23bb4fb643030b1ceee6e98ebfeed722f6dc71714b37e1849b67488867781361be93f9e02161d4193b3a3079ceb9883ea13183ef2a8e3b8c7d0012dbae860048bec989856a3109802f7ab185e2513a87054d8465e12272a74f6fe85158e94314c3d36000086196c2be4dde70b38ebd19453ff8b77290e5761af8585603cce1844c24705ffffe4483e22c4ffce7a54a9de9cf6c107ced92db9bee41bac66e155ffa667f32227952d336043a278c8e00877effad7ca21bb81b65d4663efeaf98dc64c8b0efb11c2b6a08ad5427f0f3e5699fe5e9aac5d83d14810023502eaad985d2053de76c8233fb3c7e4fdf3d1c42fa3151bba70150b"], 0x1, 0xc31, &(0x7f0000001a40)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 44.638590215s ago: executing program 2 (id=157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1002, 0x28011, r3, 0xffffffffffffc000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 44.285659366s ago: executing program 2 (id=158): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0xa000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xfff3}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 43.965331376s ago: executing program 32 (id=158): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0xa000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xfff3}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.35225433s ago: executing program 4 (id=303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x278, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1b, 0x2a, [@ssid={0x0, 0x15, @random="5e9e39c698f27f02a226b5c2d403bbeaac8c780e84"}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0x13c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6ee92c0b6c1bdf253bf0db9cde"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8b3677976e25bef30edfccbaa2"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf5b054b30c481fee2496af891"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2e5ede1621"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4bd94d15830b85129dbd11699f"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8659b5717467b9a48181a43ec7"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x7f, 0x7fff, 0x8, 0x52}}}, @NL80211_ATTR_KEYS={0xc8, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x10, 0x4, "4eb4b02504adcbc8b624fd36"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "c2813c6fac"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x7, 0x4, "72e012"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9be3d642f6df16136eedec99f4"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "edc1291277"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a2870002f84161ad41c861a3d7"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}]}, 0x278}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 6.70428328s ago: executing program 3 (id=308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000980)=[{&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/212, 0xd4}, {&(0x7f0000000640)=""/162, 0xa2}, {0x0}, {&(0x7f0000000780)=""/191, 0xbf}], 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x55af) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 6.658644892s ago: executing program 4 (id=309): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 6.652093762s ago: executing program 1 (id=310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$sock(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000019c0)="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", 0x5de}], 0x1}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsopen(&(0x7f0000000000)='proc\x00', 0x0) 6.370663551s ago: executing program 4 (id=312): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x40) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="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", 0xffffffffffffff67, 0x4044880, 0x0, 0x0) 5.494351328s ago: executing program 1 (id=315): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x500008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 4.238833537s ago: executing program 1 (id=316): syz_usb_connect$uac2(0x3, 0x9d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500200000040fa04014240000102030109028b00030107600b080b010101ff20050904000000010120000924010600031500070c24030501035d020087"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, &(0x7f0000000400)=[{}], 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, &(0x7f0000000cc0)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000001180)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001100)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32=r2], 0x48) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000a00)={'veth1_to_bond\x00', 0x200}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x40, 0x800000004, 0x71d, 0x405, 0xe, 0x80, 0x11, 0x0, 0x8000000000000000, 0x2, 0x0, 0x3, 0x800, 0x4, 0xffffffffffffffff], 0x0, 0x194d40}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, &(0x7f0000000d40), 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000c40)}) 4.112172922s ago: executing program 3 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x278, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1b, 0x2a, [@ssid={0x0, 0x15, @random="5e9e39c698f27f02a226b5c2d403bbeaac8c780e84"}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0x13c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6ee92c0b6c1bdf253bf0db9cde"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8b3677976e25bef30edfccbaa2"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf5b054b30c481fee2496af891"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2e5ede1621"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4bd94d15830b85129dbd11699f"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8659b5717467b9a48181a43ec7"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x7f, 0x7fff, 0x8, 0x52}}}, @NL80211_ATTR_KEYS={0xc8, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x10, 0x4, "4eb4b02504adcbc8b624fd36"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "c2813c6fac"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x7, 0x4, "72e012"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9be3d642f6df16136eedec99f4"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "edc1291277"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a2870002f84161ad41c861a3d7"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}]}, 0x278}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 3.388291064s ago: executing program 4 (id=318): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.773774594s ago: executing program 1 (id=322): recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40002000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2.717021855s ago: executing program 3 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r3) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.149165573s ago: executing program 3 (id=327): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xc, 0x4000}}, @out_dx={0x6a, 0x28, {0x607a, 0x3, 0x826}}, @nested_vmlaunch={0x12f, 0x18}], 0xa0}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r12, r13, 0x3, 0x0, 0x7, 0x804, {0xac7c, 0x0, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0x400, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r16, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4801, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x2}, {}, {0xa, 0x27}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r17 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r17, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x1, 0x22) r18 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r18, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2.090034575s ago: executing program 1 (id=328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x16c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x138, 0x2, [@TCA_MATCHALL_ACT={0x134, 0x2, [@m_ife={0x130, 0x1, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x100}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xd}, @IFE_META_PRIO={0x8, 0x3, @val=0x8f5f}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3d}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8000}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}]}, {0xa0, 0x6, "a7cefcfe3762aec7f70043d02d9c19e498a3a76a257c4eaa650033792c66221d79ce602b08d3d796cb060f4be9b50532581b0d339d4fe7d3e243e9cdd335af43c7593c5582cae3198ed84e3fdf123639250443a1f91078875c0ce5a2794670641a503121e33bfd052e147224c50a68975d3e14b3c1f1bfb87cef1de99c489e48ebf4753cb026476c232222bfe3b9d8fed9d07d7437c76de4044e8575"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24040094}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.27358708s ago: executing program 0 (id=329): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1.157363444s ago: executing program 0 (id=330): r0 = syz_open_procfs(0x0, 0x0) mq_notify(r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.104113635s ago: executing program 3 (id=331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x27c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1b, 0x2a, [@ssid={0x0, 0x15, @random="5e9e39c698f27f02a226b5c2d403bbeaac8c780e84"}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0x140, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6ee92c0b6c1bdf253bf0db9cde"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8b3677976e25bef30edfccbaa2"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf5b054b30c481fee2496af891"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2e5ede1621"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4bd94d15830b85129dbd11699f"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8659b5717467b9a48181a43ec7"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x7f, 0x7fff, 0x8, 0x52}}}, @NL80211_ATTR_KEYS={0xc8, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x10, 0x4, "4eb4b02504adcbc8b624fd36"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "c2813c6fac"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x7, 0x4, "72e012"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9be3d642f6df16136eedec99f4"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "edc1291277"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a2870002f84161ad41c861a3d7"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}]}, 0x27c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 959.17418ms ago: executing program 0 (id=332): syz_usb_connect$uac2(0x3, 0x9d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500200000040fa04014240000102030109028b00030107600b080b010101ff20050904000000010120000924010600031500070c24030501035d0200"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, &(0x7f0000000400)=[{}], 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, &(0x7f0000000cc0)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000001180)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001100)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32=r2], 0x48) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000a00)={'veth1_to_bond\x00', 0x200}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x40, 0x800000004, 0x71d, 0x405, 0xe, 0x80, 0x11, 0x0, 0x8000000000000000, 0x2, 0x0, 0x3, 0x800, 0x4, 0xffffffffffffffff], 0x0, 0x194d40}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, &(0x7f0000000d40), 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000c40)}) 910.148632ms ago: executing program 1 (id=333): syz_open_dev$dri(0x0, 0xd21, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r2 = socket(0x6, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0xc080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8002, &(0x7f0000001800)=0x7fffffffffffffff, 0x6, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r3, 0x0, 0x40840) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r4, 0x100002008000) 408.231657ms ago: executing program 3 (id=334): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001500)="24acadd7f04daa", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001740)="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", 0x354}, {0x0}], 0x2}}], 0x3, 0x2090) 357.549779ms ago: executing program 0 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r4) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 256.579052ms ago: executing program 4 (id=336): syz_mount_image$hfs(&(0x7f00000005c0), &(0x7f00000000c0)='./file1\x00', 0x10012, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc5666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db392743800000004002300"/111, @ANYRES8], 0x4, 0x33f, &(0x7f0000000600)="$eJzs3U1r1EAcBvBnks2+2NrGtlLwJNWCp9LWg+KlRYqfwYMUa7uF0rWCVtAiWD2LeBMEj715Fv0KehG/gJ56EE96KR6MzGSSTdKZzW533XTp8wO32WRek0wy/13WgIhOrOtL3/Yu78t/wgPgArgGOACqQAnAWUxWH25t5xbkxksCYU5xKM3qVt2UtQqdQ/PluxKGk+vo/wiCIPiem+pXX9pCxRHJEZzgABUvHJ1quxyrlb63risLppW7A9eNHkgcYXGAAzzCSJHNISKi4un7v6PvEsN6/u44wLSeh8f3/wGVmt8cFNeOYyG+/zvh+0DI/TOqNsl4b2O7UV8LQzgdhYVRoqks4zkRNHd3GeGZ5Q4lplyJWsxUW5za+kajPrOrCniOBS2RbEK9riHqiBLFtNkyy8AcgClDbNqCrbR8Q6oPnuzDvKX9461qNAbAH3/gtbm65c9ttEl8El/EsvDxBmvx/K8UCLlz1JHyM0MlbP+svUTVSz9Mlepls/lnVCXndA348K7Zy1p2v47qv1W4si0mshSRnb/7UTtfle25MIb0xwph7+bsvVO5xoGSUFFDMtd8nOiPMddEtq7auteoz6zea9hO+t4yRnTipbgppvAT77GUmP87MvU07CMzNcqFSqnPjJb9KamUluOYogbw3Y5GJik3Uhe/9rzAHVzFyIPHO5srjUb9fvEL0VA5YvbzPW5PeCLq01GukX8TaVCVCx4AazmefZNx4W8QBMZNJfTjEHiqq1feNru8s7ki9DWvuyrklTOzadGeGMAiAL0muiIcpfanca5Ks8C2sv+WR1utMZ+QUav6MECiqlKbXFTaGim1Q2v2cnI9OX20qxANoObRx+StohtDRZBzBxHGf4l4ZVZddeSL3yL+CfIKT5Q4Z4mAxtTrqfYiuLhY6zxxKFrIibkuXAIuZmp0ENX4LFusr9uJ4/itZOdfZYglfMVtfv5PRERERERERERERERERERERERERDRoOv01wuGfE+QvpGvcP4H/8QYRERERERERERERERERERERERERERERUXcSz/8FXPXEmLLp+b+tntSkuOETYqq9eP6v28bzf8VuB70kIpN/AQAA///nwVrl") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) preadv2(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/270, 0x10e}], 0x1, 0x0, 0x2, 0x15) 157.760275ms ago: executing program 0 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 303.54µs ago: executing program 4 (id=338): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 0s ago: executing program 0 (id=339): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xc, 0x4000}}, @out_dx={0x6a, 0x28, {0x607a, 0x3, 0x826}}, @nested_vmlaunch={0x12f, 0x18}], 0xa0}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r12, r13, 0x3, 0x0, 0x7, 0x804, {0xac7c, 0x0, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0x400, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r16, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4801, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x2}, {}, {0xa, 0x27}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r17 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r17, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x1, 0x22) r18 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r18, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.179' (ED25519) to the list of known hosts. [ 62.739604][ T5761] cgroup: Unknown subsys name 'net' [ 62.873995][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.185113][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.201743][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.210826][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.227926][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.238151][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.245828][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.253285][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.276554][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.286120][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.295830][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.305870][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.314019][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.322597][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.357366][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.377419][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.385175][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.388748][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.392623][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.407519][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.408657][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.423106][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.423458][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.438697][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.472376][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.481396][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.811988][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 66.887061][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 66.941392][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 66.993274][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 67.008365][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.015504][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.023282][ T5772] bridge_slave_0: entered allmulticast mode [ 67.030879][ T5772] bridge_slave_0: entered promiscuous mode [ 67.046162][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.053407][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.060875][ T5772] bridge_slave_1: entered allmulticast mode [ 67.067993][ T5772] bridge_slave_1: entered promiscuous mode [ 67.161992][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.195045][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.213783][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.221413][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.228975][ T5776] bridge_slave_0: entered allmulticast mode [ 67.235627][ T5776] bridge_slave_0: entered promiscuous mode [ 67.251618][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.258834][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.265975][ T5776] bridge_slave_1: entered allmulticast mode [ 67.272880][ T5776] bridge_slave_1: entered promiscuous mode [ 67.306237][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.313535][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.320999][ T5777] bridge_slave_0: entered allmulticast mode [ 67.328052][ T5777] bridge_slave_0: entered promiscuous mode [ 67.335580][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.343020][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.350285][ T5777] bridge_slave_1: entered allmulticast mode [ 67.359860][ T5777] bridge_slave_1: entered promiscuous mode [ 67.375512][ T5772] team0: Port device team_slave_0 added [ 67.384419][ T5772] team0: Port device team_slave_1 added [ 67.390891][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.398138][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.405269][ T5778] bridge_slave_0: entered allmulticast mode [ 67.414369][ T5778] bridge_slave_0: entered promiscuous mode [ 67.422282][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.429509][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.436832][ T5778] bridge_slave_1: entered allmulticast mode [ 67.443859][ T5778] bridge_slave_1: entered promiscuous mode [ 67.478883][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.515932][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.529796][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.551353][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.561328][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.569773][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.596154][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.609478][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.616449][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.642895][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.657039][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.692930][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.729836][ T5776] team0: Port device team_slave_0 added [ 67.738665][ T5777] team0: Port device team_slave_0 added [ 67.778206][ T5776] team0: Port device team_slave_1 added [ 67.785663][ T5777] team0: Port device team_slave_1 added [ 67.798156][ T5772] hsr_slave_0: entered promiscuous mode [ 67.804718][ T5772] hsr_slave_1: entered promiscuous mode [ 67.814214][ T5778] team0: Port device team_slave_0 added [ 67.848813][ T5778] team0: Port device team_slave_1 added [ 67.862805][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.870656][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.896699][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.928756][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.935736][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.962334][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.980906][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.988293][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.014356][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.041985][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.049070][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.075596][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.106219][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.113296][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.139301][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.152363][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.159404][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.185457][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.270858][ T5776] hsr_slave_0: entered promiscuous mode [ 68.277242][ T5776] hsr_slave_1: entered promiscuous mode [ 68.283392][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.291898][ T5776] Cannot create hsr debugfs directory [ 68.317372][ T5778] hsr_slave_0: entered promiscuous mode [ 68.323717][ T5778] hsr_slave_1: entered promiscuous mode [ 68.330395][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.338219][ T5088] Bluetooth: hci0: command tx timeout [ 68.338273][ T5778] Cannot create hsr debugfs directory [ 68.370098][ T5777] hsr_slave_0: entered promiscuous mode [ 68.376323][ T5777] hsr_slave_1: entered promiscuous mode [ 68.382619][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.390215][ T5777] Cannot create hsr debugfs directory [ 68.503236][ T5781] Bluetooth: hci1: command tx timeout [ 68.509463][ T5088] Bluetooth: hci2: command tx timeout [ 68.577442][ T5781] Bluetooth: hci3: command tx timeout [ 68.712571][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.737994][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.754623][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.766116][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.808478][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.830613][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.842488][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.854263][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.923244][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.934973][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.946439][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.982848][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.071170][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.094617][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.106961][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.116680][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.154732][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.169255][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.231378][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.259977][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.267802][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.287018][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.308025][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.315151][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.326108][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.333243][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.343318][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.350477][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.404667][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.453483][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.483077][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.519840][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.541305][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.548517][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.559612][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.566734][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.600758][ T4108] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.607947][ T4108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.644677][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.651859][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.942935][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.000249][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.100547][ T5777] veth0_vlan: entered promiscuous mode [ 70.123520][ T5777] veth1_vlan: entered promiscuous mode [ 70.154066][ T5772] veth0_vlan: entered promiscuous mode [ 70.196812][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.225552][ T5772] veth1_vlan: entered promiscuous mode [ 70.274280][ T5777] veth0_macvtap: entered promiscuous mode [ 70.285760][ T5777] veth1_macvtap: entered promiscuous mode [ 70.344396][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.355253][ T5776] veth0_vlan: entered promiscuous mode [ 70.375577][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.387826][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.402000][ T5772] veth0_macvtap: entered promiscuous mode [ 70.412184][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.422321][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.433153][ T5781] Bluetooth: hci0: command tx timeout [ 70.440880][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.449894][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.469083][ T5776] veth1_vlan: entered promiscuous mode [ 70.475941][ T5772] veth1_macvtap: entered promiscuous mode [ 70.504572][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.515795][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.528898][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.551587][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.563253][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.575065][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.582940][ T5781] Bluetooth: hci1: command tx timeout [ 70.582988][ T5088] Bluetooth: hci2: command tx timeout [ 70.623429][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.636882][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.646715][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.656275][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.657581][ T5088] Bluetooth: hci3: command tx timeout [ 70.716698][ T5778] veth0_vlan: entered promiscuous mode [ 70.773255][ T5776] veth0_macvtap: entered promiscuous mode [ 70.806410][ T5776] veth1_macvtap: entered promiscuous mode [ 70.815363][ T5778] veth1_vlan: entered promiscuous mode [ 70.859505][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.872158][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.913881][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.924758][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.937213][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.948080][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.959979][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.976971][ T5778] veth0_macvtap: entered promiscuous mode [ 71.013132][ T5778] veth1_macvtap: entered promiscuous mode [ 71.013298][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.028738][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.062793][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.062851][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.082902][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.086679][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.093414][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.112642][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.126239][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.161043][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.170947][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.179977][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.189242][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.201224][ T4108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.220055][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.232840][ T4108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.249679][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.263184][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.273843][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.284866][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.295502][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.313870][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.333315][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.355775][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.366879][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.379278][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.393545][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.406014][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.427974][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.472783][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.483136][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.497699][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.518200][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.623785][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.633937][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.650141][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.660363][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.704764][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.718630][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.748134][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.772716][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.785819][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.823002][ T5845] syz.0.5[5845]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 71.836145][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.845592][ T5845] loop0: detected capacity change from 0 to 512 [ 71.850928][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.928779][ T5845] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5: error while reading EA inode 32 err=-116 [ 71.948894][ T5845] EXT4-fs (loop0): 1 orphan inode deleted [ 71.965062][ T27] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 71.969396][ T5845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.991747][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.999899][ T27] usb 3-1: Product: syz [ 72.004099][ T27] usb 3-1: Manufacturer: syz [ 72.009262][ T27] usb 3-1: SerialNumber: syz [ 72.051068][ T27] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 72.103122][ T5843] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 72.116548][ T5845] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.5: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 72.250738][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.281206][ T5852] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 72.296035][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.461006][ T5839] random: crng reseeded on system resumption [ 72.474044][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.497898][ T5088] Bluetooth: hci0: command tx timeout [ 73.218072][ T5843] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 73.225448][ T5843] ath9k_htc: Failed to initialize the device [ 73.714033][ T5781] Bluetooth: hci2: command tx timeout [ 73.721863][ T5088] Bluetooth: hci1: command tx timeout [ 73.727908][ T5781] Bluetooth: hci3: command tx timeout [ 74.469166][ T5843] usb 3-1: ath9k_htc: USB layer deinitialized [ 74.861092][ T23] usb 3-1: USB disconnect, device number 2 [ 75.340021][ T5889] syzkaller0: entered promiscuous mode [ 75.345671][ T5889] syzkaller0: entered allmulticast mode [ 75.747244][ T5843] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 75.780415][ T5786] Bluetooth: hci3: command tx timeout [ 75.785885][ T5786] Bluetooth: hci1: command tx timeout [ 75.787792][ T5781] Bluetooth: hci2: command tx timeout [ 75.791430][ T5088] Bluetooth: hci0: command tx timeout [ 75.815435][ T5895] loop5: detected capacity change from 0 to 7 [ 75.824754][ T5895] Dev loop5: unable to read RDB block 7 [ 75.833404][ T5895] loop5: AHDI p1 [ 75.837117][ T5895] loop5: partition table partially beyond EOD, truncated [ 75.942937][ T5843] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 75.961620][ T5843] usb 2-1: config 1 interface 0 has no altsetting 0 [ 75.974435][ T5843] usb 2-1: string descriptor 0 read error: -22 [ 75.984699][ T5843] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 75.996659][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.132017][ T5893] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.794681][ T5893] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.240428][ T5911] Zero length message leads to an empty skb [ 78.033059][ T5932] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.042800][ T5932] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.051866][ T5932] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.061229][ T5932] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.063875][ T5843] usbhid 2-1:1.0: can't add hid device: -71 [ 78.098122][ T5843] usbhid: probe of 2-1:1.0 failed with error -71 [ 78.117960][ T5843] usb 2-1: USB disconnect, device number 2 [ 78.177079][ T28] audit: type=1326 audit(1781315999.093:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.0.26" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f5a59ce59 code=0x0 [ 78.213745][ T5938] syzkaller0: entered promiscuous mode [ 78.220195][ T5938] syzkaller0: entered allmulticast mode [ 78.279052][ T5939] kvm: emulating exchange as write [ 78.378760][ T5941] syzkaller0: entered promiscuous mode [ 78.384308][ T5941] syzkaller0: entered allmulticast mode [ 78.396105][ T5941] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 78.482941][ T5943] fuse: Bad value for 'fd' [ 78.557047][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 79.492506][ T5973] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.501499][ T5973] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.510663][ T5973] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.519469][ T5973] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.606267][ T5975] syzkaller0: entered promiscuous mode [ 79.612104][ T5975] syzkaller0: entered allmulticast mode [ 80.097711][ T5812] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 80.192795][ T5989] fuse: Bad value for 'fd' [ 80.319654][ T5812] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 80.334898][ T5812] usb 1-1: config 1 interface 0 has no altsetting 0 [ 80.337404][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.357020][ T5812] usb 1-1: string descriptor 0 read error: -22 [ 80.363798][ T5812] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 80.373125][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.399398][ T5979] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.468451][ T5993] binder: BINDER_SET_CONTEXT_MGR already set [ 80.475438][ T5993] binder: 5992:5993 ioctl 4018620d 200000004a80 returned -16 [ 80.538708][ T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.553845][ T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.555456][ T5995] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.570617][ T786] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 80.572449][ T5995] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.586930][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.603360][ T5995] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.603986][ T786] usb 3-1: Product: syz [ 80.612343][ T5995] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.629728][ T786] usb 3-1: Manufacturer: syz [ 80.634534][ T786] usb 3-1: SerialNumber: syz [ 80.785368][ T5999] syzkaller0: entered promiscuous mode [ 80.791162][ T5999] syzkaller0: entered allmulticast mode [ 80.912606][ T786] usb 3-1: USB disconnect, device number 3 [ 81.175518][ T6003] loop1: detected capacity change from 0 to 256 [ 81.214033][ T6003] ======================================================= [ 81.214033][ T6003] WARNING: The mand mount option has been deprecated and [ 81.214033][ T6003] and is ignored by this kernel. Remove the mand [ 81.214033][ T6003] option from the mount to silence this warning. [ 81.214033][ T6003] ======================================================= [ 81.248917][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.440498][ T6007] binder: 6006:6007 unknown command 1074553619 [ 81.446783][ T6007] binder: 6006:6007 ioctl c0306201 200000000440 returned -22 [ 81.458282][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 81.470434][ T5812] usbhid 1-1:1.0: can't add hid device: -71 [ 81.482252][ T5812] usbhid: probe of 1-1:1.0 failed with error -71 [ 81.492839][ T5812] usb 1-1: USB disconnect, device number 2 [ 81.785488][ T6016] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.794384][ T6016] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.803390][ T6016] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.812156][ T6016] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.860880][ T8] cfg80211: failed to load regulatory.db [ 81.890654][ T6018] syzkaller0: entered promiscuous mode [ 81.902149][ T6018] syzkaller0: entered allmulticast mode [ 82.009143][ T6021] fuse: Bad value for 'fd' [ 82.647536][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.737427][ T5812] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.851742][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.876070][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.904115][ T23] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 82.918114][ T5812] usb 3-1: device descriptor read/64, error -71 [ 82.923024][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.944739][ T23] usb 1-1: Product: syz [ 82.949409][ T23] usb 1-1: Manufacturer: syz [ 82.954056][ T23] usb 1-1: SerialNumber: syz [ 83.042765][ T6057] syzkaller0: entered promiscuous mode [ 83.048450][ T6057] syzkaller0: entered allmulticast mode [ 83.197243][ T5812] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.254364][ T23] usb 1-1: USB disconnect, device number 3 [ 83.367549][ T5812] usb 3-1: device descriptor read/64, error -71 [ 83.499543][ T5812] usb usb3-port1: attempt power cycle [ 83.597475][ T8] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 83.802799][ T8] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 83.824781][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 83.846299][ T8] usb 4-1: string descriptor 0 read error: -22 [ 83.857733][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 83.877429][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.900943][ T6063] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.927333][ T5812] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 83.968212][ T5812] usb 3-1: device descriptor read/8, error -71 [ 84.206099][ T6091] syzkaller0: entered promiscuous mode [ 84.211676][ T6091] syzkaller0: entered allmulticast mode [ 84.237646][ T5812] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 84.288187][ T5812] usb 3-1: device descriptor read/8, error -71 [ 84.426297][ T5812] usb usb3-port1: unable to enumerate USB device [ 84.685239][ T8] usbhid 4-1:1.0: can't add hid device: -71 [ 84.703157][ T8] usbhid: probe of 4-1:1.0 failed with error -71 [ 84.724736][ T8] usb 4-1: USB disconnect, device number 2 [ 84.944662][ T6103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.970798][ T6103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.448002][ T6120] syzkaller0: entered promiscuous mode [ 85.453595][ T6120] syzkaller0: entered allmulticast mode [ 85.923221][ T6142] loop1: detected capacity change from 0 to 512 [ 85.949029][ T6142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.966895][ T6142] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.015919][ T6142] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 86.063691][ T6142] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 86.129048][ T6142] EXT4-fs (loop1): 1 truncate cleaned up [ 86.136201][ T6142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.505987][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.316491][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.493401][ T6178] syzkaller0: entered promiscuous mode [ 87.499603][ T6178] syzkaller0: entered allmulticast mode [ 87.567258][ T9] usb 1-1: device descriptor read/64, error -71 [ 87.740339][ T5158] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.848269][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.951172][ T5158] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.976437][ T5158] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 87.997418][ T5158] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 88.006969][ T5158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.027314][ T9] usb 1-1: device descriptor read/64, error -71 [ 88.050869][ T5158] usb 4-1: config 0 descriptor?? [ 88.147471][ T9] usb usb1-port1: attempt power cycle [ 88.279384][ T5158] usb 4-1: USB disconnect, device number 3 [ 88.528167][ T6207] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 88.597327][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 88.638488][ T9] usb 1-1: device descriptor read/8, error -71 [ 88.897635][ T5158] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.947260][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 88.990013][ T9] usb 1-1: device descriptor read/8, error -71 [ 89.109221][ T5158] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.121458][ T9] usb usb1-port1: unable to enumerate USB device [ 89.128676][ T5158] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.143166][ T5158] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 89.152878][ T5158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.169369][ T5158] usb 4-1: config 0 descriptor?? [ 89.519048][ T6217] syzkaller0: entered promiscuous mode [ 89.524717][ T6217] syzkaller0: entered allmulticast mode [ 89.769771][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.783433][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.072832][ T5158] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 90.269213][ T5158] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.284054][ T5158] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 90.304900][ T5158] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 90.314472][ T5158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.327231][ T5158] usb 3-1: Product: syz [ 90.331458][ T5158] usb 3-1: Manufacturer: syz [ 90.337059][ T5158] usb 3-1: SerialNumber: syz [ 90.551383][ T9] usb 4-1: USB disconnect, device number 4 [ 90.652183][ T5158] usb 3-1: USB disconnect, device number 8 [ 91.089240][ T6252] syzkaller0: entered promiscuous mode [ 91.103027][ T6252] syzkaller0: entered allmulticast mode [ 91.214047][ T6253] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 91.532244][ T6257] loop5: detected capacity change from 0 to 7 [ 91.556353][ T6257] Dev loop5: unable to read RDB block 7 [ 91.564392][ T6257] loop5: AHDI p1 [ 91.574531][ T6257] loop5: partition table partially beyond EOD, truncated [ 92.061189][ T28] audit: type=1326 audit(1781316012.983:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.2.126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3482f9ce59 code=0x0 [ 92.193263][ T6280] Bluetooth: MGMT ver 1.22 [ 92.431658][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.485752][ T6287] fuse: Unknown parameter 'group_id00000000000000000000' [ 92.639099][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.649466][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.658609][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 92.669942][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.681189][ T9] usb 2-1: config 0 descriptor?? [ 92.757277][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.882423][ T6289] syzkaller0: entered promiscuous mode [ 92.889438][ T6289] syzkaller0: entered allmulticast mode [ 92.896488][ T9] usb 2-1: USB disconnect, device number 3 [ 92.951350][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.961715][ T27] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 92.973729][ T27] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 92.985437][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.996785][ T27] usb 4-1: Product: syz [ 93.005553][ T27] usb 4-1: Manufacturer: syz [ 93.010362][ T27] usb 4-1: SerialNumber: syz [ 93.112082][ T6291] loop5: detected capacity change from 0 to 7 [ 93.122912][ T6291] Dev loop5: unable to read RDB block 7 [ 93.133669][ T6291] loop5: unable to read partition table [ 93.139850][ T6291] loop5: partition table beyond EOD, truncated [ 93.146203][ T6291] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.241066][ T27] usb 4-1: USB disconnect, device number 5 [ 93.417528][ T786] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.655127][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.682060][ T786] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.700980][ T786] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 93.721382][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.743886][ T786] usb 2-1: config 0 descriptor?? [ 93.893160][ T6311] bridge_slave_0: left allmulticast mode [ 93.905565][ T6311] bridge_slave_0: left promiscuous mode [ 93.926968][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.957962][ T6311] bridge_slave_1: left allmulticast mode [ 93.966081][ T6311] bridge_slave_1: left promiscuous mode [ 93.973043][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.989027][ T6311] bond0: (slave bond_slave_0): Releasing backup interface [ 94.013958][ T6311] bond0: (slave bond_slave_1): Releasing backup interface [ 94.078674][ T6311] team0: Port device team_slave_0 removed [ 94.099015][ T6311] team0: Port device team_slave_1 removed [ 94.109810][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.118025][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.185330][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.207272][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.549576][ T6316] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 94.782017][ T28] audit: type=1326 audit(1781316015.703:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3482f9ce59 code=0x0 [ 94.925823][ T6325] syzkaller0: entered promiscuous mode [ 94.931429][ T6325] syzkaller0: entered allmulticast mode [ 95.182663][ T786] usb 2-1: USB disconnect, device number 4 [ 95.279661][ T6329] syzkaller0: entered promiscuous mode [ 95.285636][ T6329] syzkaller0: entered allmulticast mode [ 95.340083][ T6329] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 95.390607][ T6332] fuse: Bad value for 'user_id' [ 95.702914][ T6336] loop2: detected capacity change from 0 to 256 [ 95.752098][ T6336] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 95.817247][ T5834] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 95.971889][ T6340] loop5: detected capacity change from 0 to 7 [ 95.979886][ T6340] Dev loop5: unable to read RDB block 7 [ 95.985715][ T6340] loop5: unable to read partition table [ 95.997113][ T6340] loop5: partition table beyond EOD, truncated [ 96.026623][ T6340] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 96.059179][ T5834] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 96.072888][ T5834] usb 2-1: config 1 interface 0 has no altsetting 0 [ 96.109871][ T5834] usb 2-1: string descriptor 0 read error: -22 [ 96.116777][ T5834] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 96.142384][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.149719][ T6342] loop3: detected capacity change from 0 to 512 [ 96.179908][ T6334] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.230703][ T6344] syzkaller0: entered promiscuous mode [ 96.256548][ T6344] syzkaller0: entered allmulticast mode [ 96.303185][ T6342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.608335][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 96.614604][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.637775][ T6355] syzkaller0: entered promiscuous mode [ 96.643291][ T6355] syzkaller0: entered allmulticast mode [ 96.665508][ T6355] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 96.767232][ T9] usb 1-1: device descriptor read/64, error -71 [ 96.819774][ T28] audit: type=1326 audit(1781316017.733:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.3.154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ef619ce59 code=0x0 [ 96.919104][ T6361] loop2: detected capacity change from 0 to 64 [ 96.931053][ T6361] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 97.047616][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 97.090318][ T6363] loop2: detected capacity change from 0 to 2048 [ 97.115227][ T6363] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.173439][ T6363] overlayfs: upper fs needs to support d_type. [ 97.184528][ T6363] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 97.195165][ T5834] usbhid 2-1:1.0: can't add hid device: -71 [ 97.202582][ T6363] overlayfs: failed to set xattr on upper [ 97.207581][ T9] usb 1-1: device descriptor read/64, error -71 [ 97.210894][ T5834] usbhid: probe of 2-1:1.0 failed with error -71 [ 97.226543][ T6363] overlayfs: ...falling back to redirect_dir=nofollow. [ 97.241485][ T6363] overlayfs: ...falling back to index=off. [ 97.251413][ T5834] usb 2-1: USB disconnect, device number 5 [ 97.257693][ T6363] overlayfs: ...falling back to uuid=null. [ 97.295267][ T5777] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 97.305716][ T5777] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 97.330872][ T9] usb usb1-port1: attempt power cycle [ 97.661233][ T3477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.681303][ T3477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.748672][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 97.803770][ T9] usb 1-1: device descriptor read/8, error -71 [ 97.832851][ T3477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.877287][ T3477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.012102][ T3477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.026663][ T6367] loop5: detected capacity change from 0 to 7 [ 98.034441][ T3477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.045481][ T6367] Dev loop5: unable to read RDB block 7 [ 98.051824][ T6367] loop5: unable to read partition table [ 98.061119][ T6367] loop5: partition table beyond EOD, truncated [ 98.068025][ T6367] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 98.097353][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 98.127978][ T9] usb 1-1: device descriptor read/8, error -71 [ 98.164923][ T3477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.197018][ T3477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.236985][ T6368] syzkaller0: entered promiscuous mode [ 98.257466][ T9] usb usb1-port1: unable to enumerate USB device [ 98.269437][ T6368] syzkaller0: entered allmulticast mode [ 98.433791][ T5088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.444116][ T5088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.455548][ T5088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.457812][ T6374] syzkaller0: entered promiscuous mode [ 98.473119][ T6374] syzkaller0: entered allmulticast mode [ 98.481358][ T6377] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 98.482735][ T5088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.502408][ T5088] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.511179][ T5088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.761657][ T6382] Bluetooth: MGMT ver 1.22 [ 99.022528][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.030517][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.175920][ T6386] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 99.639854][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.015631][ T6379] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.025048][ T6379] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.035140][ T6379] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.044713][ T6379] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.164934][ T6379] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.174056][ T6379] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.182996][ T6379] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.191877][ T6379] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.272211][ T6379] syz.3.164 (6379) used greatest stack depth: 20040 bytes left [ 100.577777][ T5088] Bluetooth: hci2: command tx timeout [ 100.601224][ T23] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 100.668789][ T28] audit: type=1326 audit(1781316021.583:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f5a59ce59 code=0x0 [ 100.812978][ T23] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 100.849880][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 100.890815][ T6407] loop5: detected capacity change from 0 to 7 [ 100.900452][ T23] usb 4-1: string descriptor 0 read error: -22 [ 100.906772][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 100.935450][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.948003][ T6407] Dev loop5: unable to read RDB block 7 [ 100.964826][ T6407] loop5: unable to read partition table [ 100.971433][ T6391] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.993152][ T6407] loop5: partition table beyond EOD, truncated [ 101.028402][ T6407] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.045157][ T6375] chnl_net:caif_netlink_parms(): no params data found [ 101.368322][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.388697][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.395958][ T6375] bridge_slave_0: entered allmulticast mode [ 101.404977][ T6375] bridge_slave_0: entered promiscuous mode [ 101.415358][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.424000][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.431501][ T6375] bridge_slave_1: entered allmulticast mode [ 101.439640][ T6375] bridge_slave_1: entered promiscuous mode [ 101.541226][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.567916][ T6423] syzkaller0: entered promiscuous mode [ 101.573454][ T6423] syzkaller0: entered allmulticast mode [ 101.633772][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.873695][ T6427] syzkaller0: entered promiscuous mode [ 101.879406][ T6427] syzkaller0: entered allmulticast mode [ 101.887416][ T6428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 101.899286][ T23] usbhid 4-1:1.0: can't add hid device: -71 [ 101.905331][ T23] usbhid: probe of 4-1:1.0 failed with error -71 [ 101.928922][ T23] usb 4-1: USB disconnect, device number 6 [ 102.103896][ T6375] team0: Port device team_slave_0 added [ 102.160611][ T6375] team0: Port device team_slave_1 added [ 102.287701][ T786] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.298020][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.306062][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.345938][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.375383][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.389960][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.432216][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.497325][ T786] usb 2-1: device descriptor read/64, error -71 [ 102.657609][ T5786] Bluetooth: hci2: command tx timeout [ 102.696776][ T6375] hsr_slave_0: entered promiscuous mode [ 102.703792][ T6375] hsr_slave_1: entered promiscuous mode [ 102.710990][ T6375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.720542][ T6375] Cannot create hsr debugfs directory [ 102.735759][ T3477] hsr_slave_0: left promiscuous mode [ 102.744338][ T3477] hsr_slave_1: left promiscuous mode [ 102.755847][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.764424][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.774770][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.784688][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.792160][ T786] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.802653][ T3477] bridge_slave_1: left allmulticast mode [ 102.809295][ T3477] bridge_slave_1: left promiscuous mode [ 102.816860][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.830596][ T3477] bridge_slave_0: left allmulticast mode [ 102.836399][ T3477] bridge_slave_0: left promiscuous mode [ 102.842742][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.883908][ T3477] veth1_vlan: left promiscuous mode [ 102.893463][ T3477] veth0_vlan: left promiscuous mode [ 102.957312][ T786] usb 2-1: device descriptor read/64, error -71 [ 103.084514][ T786] usb usb2-port1: attempt power cycle [ 103.527230][ T786] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.617275][ T786] usb 2-1: device descriptor read/8, error -71 [ 103.689529][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 103.772683][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 103.826725][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.891664][ T786] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 103.901294][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.928724][ T786] usb 2-1: device descriptor read/8, error -71 [ 104.052669][ T786] usb usb2-port1: unable to enumerate USB device [ 104.137437][ T5812] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 104.297523][ T5812] usb 4-1: device descriptor read/64, error -71 [ 104.403400][ T3477] bond0 (unregistering): Released all slaves [ 104.567348][ T5812] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 104.577057][ T28] audit: type=1326 audit(1781316025.493:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.0.179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f5a59ce59 code=0x0 [ 104.718208][ T5812] usb 4-1: device descriptor read/64, error -71 [ 104.747255][ T5786] Bluetooth: hci2: command tx timeout [ 104.850351][ T5812] usb usb4-port1: attempt power cycle [ 104.956130][ T6375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.970813][ T6375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.994650][ T6375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.019304][ T6375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.206374][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.217569][ T6479] syzkaller0: entered promiscuous mode [ 105.227359][ T6479] syzkaller0: entered allmulticast mode [ 105.297911][ T5812] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 105.338337][ T5812] usb 4-1: device descriptor read/8, error -71 [ 105.404494][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.429972][ T4498] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.437208][ T4498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.477025][ T4498] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.484278][ T4498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.569376][ T6375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.637566][ T5812] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 105.677928][ T5812] usb 4-1: device descriptor read/8, error -71 [ 105.800700][ T5812] usb usb4-port1: unable to enumerate USB device [ 105.895226][ T6375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.906402][ T5158] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 106.077313][ T23] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 106.091047][ T5158] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.119578][ T5158] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 106.133086][ T5158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 106.143027][ T5158] usb 2-1: Product: syz [ 106.150801][ T5158] usb 2-1: Manufacturer: syz [ 106.155607][ T5158] usb 2-1: SerialNumber: syz [ 106.282406][ T23] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 106.302797][ T23] usb 1-1: config 1 interface 0 has no altsetting 0 [ 106.306839][ T6375] veth0_vlan: entered promiscuous mode [ 106.324064][ T23] usb 1-1: string descriptor 0 read error: -22 [ 106.334042][ T6375] veth1_vlan: entered promiscuous mode [ 106.335567][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 106.357227][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.387691][ T6498] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 106.396527][ T6375] veth0_macvtap: entered promiscuous mode [ 106.416529][ T6375] veth1_macvtap: entered promiscuous mode [ 106.449252][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.460548][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.473351][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.506265][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.517393][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.533313][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.549950][ T6375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.559164][ T6375] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.571257][ T6375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.583622][ T6375] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.734758][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.756884][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.803652][ T4498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.812219][ T4498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.827451][ T5786] Bluetooth: hci2: command tx timeout [ 107.016316][ T6530] fuse: Bad value for 'user_id' [ 107.367248][ T23] usbhid 1-1:1.0: can't add hid device: -71 [ 107.377100][ T23] usbhid: probe of 1-1:1.0 failed with error -71 [ 107.400326][ T23] usb 1-1: USB disconnect, device number 12 [ 107.997763][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 108.239795][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.254221][ T6559] syzkaller0: entered promiscuous mode [ 108.277558][ T23] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 108.286745][ T6559] syzkaller0: entered allmulticast mode [ 108.319001][ T23] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 108.331582][ T6559] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 108.352643][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.386820][ T23] usb 4-1: Product: syz [ 108.411045][ T23] usb 4-1: Manufacturer: syz [ 108.415705][ T23] usb 4-1: SerialNumber: syz [ 108.623496][ T786] usb 2-1: USB disconnect, device number 10 [ 108.747625][ T23] usb 4-1: USB disconnect, device number 11 [ 108.817896][ T28] audit: type=1326 audit(1781316029.733:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.1.189" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1bdb9ce59 code=0x0 [ 108.895663][ T6572] syzkaller0: entered promiscuous mode [ 108.912617][ T6572] syzkaller0: entered allmulticast mode [ 109.615986][ T6591] loop5: detected capacity change from 0 to 7 [ 109.642330][ T6591] Dev loop5: unable to read RDB block 7 [ 109.652004][ T6591] loop5: unable to read partition table [ 109.677641][ T6591] loop5: partition table beyond EOD, truncated [ 109.713200][ T6591] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.781383][ T6594] loop3: detected capacity change from 0 to 512 [ 109.917079][ T6600] fuse: Bad value for 'user_id' [ 109.928581][ T6594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.065972][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.088529][ T6608] tipc: Enabling of bearer rejected, failed to enable media [ 110.113978][ T6608] syzkaller0: entered promiscuous mode [ 110.125456][ T6608] syzkaller0: entered allmulticast mode [ 110.150721][ T6608] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 110.228534][ T5842] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 110.421687][ T5842] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 110.433001][ T5842] usb 1-1: config 1 interface 0 has no altsetting 0 [ 110.443756][ T5842] usb 1-1: string descriptor 0 read error: -22 [ 110.450533][ T5158] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 110.458734][ T5842] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 110.469067][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.481392][ T6605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.668208][ T5158] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.698504][ T5158] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.735946][ T5158] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 110.755943][ T5158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 110.787014][ T5158] usb 4-1: Product: syz [ 110.791943][ T5158] usb 4-1: Manufacturer: syz [ 110.796628][ T5158] usb 4-1: SerialNumber: syz [ 110.818936][ T6628] syzkaller0: entered promiscuous mode [ 110.824467][ T6628] syzkaller0: entered allmulticast mode [ 111.267377][ T786] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 111.416546][ T5842] usbhid 1-1:1.0: can't add hid device: -71 [ 111.425778][ T5842] usbhid: probe of 1-1:1.0 failed with error -71 [ 111.438392][ T5842] usb 1-1: USB disconnect, device number 13 [ 111.489214][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.509081][ T786] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 111.531360][ T786] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 111.553663][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.571566][ T786] usb 2-1: Product: syz [ 111.575784][ T786] usb 2-1: Manufacturer: syz [ 111.589988][ T786] usb 2-1: SerialNumber: syz [ 111.840058][ T786] usb 2-1: USB disconnect, device number 11 [ 112.327593][ T5842] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 112.485277][ T28] audit: type=1326 audit(1781316033.403:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.4.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f9879ce59 code=0x0 [ 112.548829][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 112.564212][ T5842] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 112.575907][ T5842] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.588301][ T5842] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.596543][ T5842] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.605708][ T5842] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 112.618996][ T5842] usb 1-1: config 0 has no interface number 0 [ 112.639294][ T5842] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 112.651141][ T5842] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 112.667097][ T5842] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.681456][ T5842] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.691098][ T6655] loop1: detected capacity change from 0 to 2048 [ 112.694590][ T5842] usb 1-1: config 0 interface 125 has no altsetting 0 [ 112.712056][ T5842] usb 1-1: config 0 interface 125 has no altsetting 2 [ 112.722277][ T6655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.726506][ T5842] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 112.772837][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.782071][ T5842] usb 1-1: Product: syz [ 112.786275][ T5842] usb 1-1: Manufacturer: syz [ 112.790949][ T5842] usb 1-1: SerialNumber: syz [ 112.811916][ T5842] usb 1-1: config 0 descriptor?? [ 112.820471][ T5842] usb 1-1: selecting invalid altsetting 2 [ 113.198808][ T786] usb 4-1: USB disconnect, device number 12 [ 113.280984][ T6661] tipc: Enabling of bearer rejected, failed to enable media [ 113.290655][ T6661] syzkaller0: entered promiscuous mode [ 113.296262][ T6661] syzkaller0: entered allmulticast mode [ 113.312323][ T6661] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 113.449586][ T6663] syzkaller0: entered promiscuous mode [ 113.455112][ T6663] syzkaller0: entered allmulticast mode [ 113.860682][ T5842] get_1284_register timeout [ 113.865482][ C0] usb 1-1: async_complete: urb error -104 [ 113.871440][ C0] usb 1-1: async_complete: urb error -104 [ 113.877286][ C0] usb 1-1: async_complete: urb error -104 [ 113.954403][ T6674] binder: 6672:6674 unknown command 1074553619 [ 113.960893][ T5158] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 113.979383][ T6674] binder: 6672:6674 ioctl c0306201 200000000440 returned -22 [ 114.001897][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 114.162044][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.180011][ T5158] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 114.196788][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.204961][ T5158] usb 4-1: config 1 interface 0 has no altsetting 0 [ 114.247349][ T786] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 114.271412][ T5158] usb 4-1: string descriptor 0 read error: -22 [ 114.278699][ T5158] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 114.296881][ T5158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.335047][ T6667] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 114.472296][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.484796][ T786] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 114.502788][ T786] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 114.514183][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.524626][ T786] usb 2-1: Product: syz [ 114.530919][ T786] usb 2-1: Manufacturer: syz [ 114.535934][ T786] usb 2-1: SerialNumber: syz [ 114.892031][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.902454][ T786] usb 2-1: USB disconnect, device number 12 [ 114.949441][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.270758][ T28] audit: type=1326 audit(1781316036.193:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.4.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f9879ce59 code=0x0 [ 115.381681][ T5158] usbhid 4-1:1.0: can't add hid device: -71 [ 115.396375][ T5158] usbhid: probe of 4-1:1.0 failed with error -71 [ 115.409744][ T5158] usb 4-1: USB disconnect, device number 13 [ 115.564972][ T6689] tipc: Enabling of bearer rejected, failed to enable media [ 115.575169][ T6689] syzkaller0: entered promiscuous mode [ 115.581044][ T6689] syzkaller0: entered allmulticast mode [ 115.593143][ T6689] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 116.119218][ T5834] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 116.533577][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 116.551539][ T5834] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 116.576212][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 116.616159][ T5834] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 116.646814][ T5834] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 116.683685][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.688053][ T6703] syzkaller0: entered promiscuous mode [ 116.717734][ T6703] syzkaller0: entered allmulticast mode [ 116.724367][ T5834] usb 2-1: config 0 descriptor?? [ 116.841996][ T6710] binder: 6709:6710 unknown command 1074553619 [ 116.848553][ T6710] binder: 6709:6710 ioctl c0306201 200000000440 returned -22 [ 116.859697][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 116.971347][ T5834] hdpvr 2-1:0.0: unexpected answer of status request, len -32 [ 116.979503][ T5834] hdpvr 2-1:0.0: device init failed [ 116.984769][ T5834] hdpvr: probe of 2-1:0.0 failed with error -12 [ 116.994212][ T5834] usb 2-1: USB disconnect, device number 13 [ 117.227279][ T5158] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 117.434057][ T5158] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.444266][ T5158] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.462594][ T5158] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.511308][ T5158] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 117.526690][ T5158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.535074][ T5158] usb 4-1: Product: syz [ 117.552680][ T5158] usb 4-1: Manufacturer: syz [ 117.582441][ T5158] usb 4-1: SerialNumber: syz [ 117.837916][ T6725] tipc: Enabling of bearer rejected, failed to enable media [ 117.860247][ T6725] syzkaller0: entered promiscuous mode [ 117.865945][ T6725] syzkaller0: entered allmulticast mode [ 117.881755][ T6725] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 117.907368][ T5158] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 118.023776][ T5158] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 118.046726][ T5158] usb 4-1: USB disconnect, device number 14 [ 118.073055][ T5834] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.076521][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.309212][ T5834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.330033][ T5834] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.370538][ T5834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 118.393594][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 118.420988][ T5834] usb 5-1: Product: syz [ 118.425429][ T5834] usb 5-1: Manufacturer: syz [ 118.442733][ T5834] usb 5-1: SerialNumber: syz [ 118.477699][ T28] audit: type=1326 audit(1781316039.393:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.0.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f5a59ce59 code=0x0 [ 118.573442][ T6741] binder: 6740:6741 unknown command 1074553619 [ 118.580077][ T6741] binder: 6740:6741 ioctl c0306201 200000000440 returned -22 [ 118.592613][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 118.666724][ T6743] syzkaller0: entered promiscuous mode [ 118.672394][ T6743] syzkaller0: entered allmulticast mode [ 118.787477][ T786] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 118.859040][ T23] IPVS: starting estimator thread 0... [ 118.909213][ T6748] fuse: Bad value for 'group_id' [ 118.947468][ T6746] IPVS: using max 25 ests per chain, 60000 per kthread [ 118.968782][ T786] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 118.980446][ T786] usb 2-1: config 1 interface 0 has no altsetting 0 [ 118.991793][ T786] usb 2-1: string descriptor 0 read error: -22 [ 118.998406][ T786] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 119.007746][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.018507][ T6738] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 119.403591][ T6753] loop0: detected capacity change from 0 to 4096 [ 119.449172][ T6753] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 119.502343][ T6753] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 119.815218][ T6755] tipc: Enabling of bearer rejected, failed to enable media [ 119.850286][ T6755] syzkaller0: entered promiscuous mode [ 119.862261][ T6755] syzkaller0: entered allmulticast mode [ 119.888310][ T786] usbhid 2-1:1.0: can't add hid device: -71 [ 119.894328][ T786] usbhid: probe of 2-1:1.0 failed with error -71 [ 119.901351][ T6755] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 119.919118][ T786] usb 2-1: USB disconnect, device number 14 [ 120.264857][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.287465][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.513631][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.577773][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.879459][ T786] usb 5-1: USB disconnect, device number 2 [ 120.893230][ T6779] syzkaller0: entered promiscuous mode [ 120.923417][ T6779] syzkaller0: entered allmulticast mode [ 121.316606][ T28] audit: type=1326 audit(1781316042.233:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.243" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f5a59ce59 code=0x0 [ 121.359838][ T6789] loop3: detected capacity change from 0 to 4096 [ 121.377312][ T786] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.564052][ T6798] fuse: Bad value for 'group_id' [ 121.580004][ T786] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.597014][ T786] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.619768][ T786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.634820][ T786] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 121.644321][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.655855][ T786] usb 5-1: Product: syz [ 121.669634][ T786] usb 5-1: Manufacturer: syz [ 121.680083][ T786] usb 5-1: SerialNumber: syz [ 121.832292][ T6807] process 'syz.3.246' launched './file1' with NULL argv: empty string added [ 121.955649][ T786] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 122.011067][ T786] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 122.026963][ T786] usb 5-1: USB disconnect, device number 3 [ 122.072987][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.514622][ T6825] syzkaller0: entered promiscuous mode [ 122.605709][ T6825] syzkaller0: entered allmulticast mode [ 122.847764][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 122.887319][ T5158] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.080250][ T8] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 123.098699][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.116401][ T5158] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.129966][ T5158] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 123.140748][ T5158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.153135][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 123.163849][ T5158] usb 5-1: config 0 descriptor?? [ 123.169225][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 123.192662][ T5158] pwc: Askey VC010 type 2 USB webcam detected. [ 123.199131][ T8] usb 2-1: Product: syz [ 123.203354][ T8] usb 2-1: Manufacturer: syz [ 123.210409][ T8] usb 2-1: SerialNumber: syz [ 123.401443][ T5158] pwc: send_video_command error -71 [ 123.418440][ T5158] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 123.454237][ T5158] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 123.496554][ T5158] usb 5-1: USB disconnect, device number 4 [ 123.987325][ T5158] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.202604][ T5158] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.217240][ T5158] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 124.227833][ T5158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.249106][ T5158] usb 5-1: config 0 descriptor?? [ 124.258904][ T5158] pwc: Askey VC010 type 2 USB webcam detected. [ 124.658566][ T5158] pwc: recv_control_msg error -32 req 02 val 2b00 [ 124.676772][ T5158] pwc: recv_control_msg error -32 req 02 val 2700 [ 124.690728][ T5158] pwc: recv_control_msg error -32 req 02 val 2c00 [ 124.702808][ T5158] pwc: recv_control_msg error -32 req 04 val 1000 [ 124.718186][ T5158] pwc: recv_control_msg error -32 req 04 val 1300 [ 124.736398][ T5158] pwc: recv_control_msg error -32 req 04 val 1400 [ 124.744564][ T5158] pwc: recv_control_msg error -32 req 02 val 2000 [ 124.753400][ T5158] pwc: recv_control_msg error -32 req 02 val 2100 [ 124.761224][ T5158] pwc: recv_control_msg error -32 req 04 val 1500 [ 124.771294][ T5158] pwc: recv_control_msg error -32 req 02 val 2500 [ 124.779950][ T5158] pwc: recv_control_msg error -32 req 02 val 2400 [ 124.792170][ T5158] pwc: recv_control_msg error -32 req 02 val 2600 [ 124.799690][ T5158] pwc: recv_control_msg error -32 req 02 val 2900 [ 124.807000][ T5158] pwc: recv_control_msg error -32 req 02 val 2800 [ 125.024093][ T5158] pwc: recv_control_msg error -71 req 04 val 1200 [ 125.161151][ T5158] pwc: Registered as video103. [ 125.173312][ T5158] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 125.225611][ T5158] usb 5-1: USB disconnect, device number 5 [ 125.617805][ T5834] usb 2-1: USB disconnect, device number 15 [ 125.893240][ T28] audit: type=1326 audit(1781316046.813:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.0.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f5a59ce59 code=0x0 [ 125.955860][ T6875] loop3: detected capacity change from 0 to 256 [ 125.997649][ T6880] fuse: Bad value for 'group_id' [ 126.459651][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.653001][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 126.677599][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.698472][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.721747][ T23] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 126.747288][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.755350][ T23] usb 5-1: Product: syz [ 126.767263][ T23] usb 5-1: Manufacturer: syz [ 126.771929][ T23] usb 5-1: SerialNumber: syz [ 127.098651][ T6918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.262'. [ 127.108911][ T6918] x_tables: ip_tables: udp match: only valid for protocol 17 [ 127.125787][ T23] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 127.136665][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 127.200852][ T23] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 127.237833][ T23] usb 5-1: USB disconnect, device number 6 [ 127.496976][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 127.594144][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.647401][ T786] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 127.876624][ T6936] syzkaller0: entered promiscuous mode [ 127.884191][ T6936] syzkaller0: entered allmulticast mode [ 127.889276][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.908490][ T786] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.942528][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.980330][ T786] usb 4-1: config 0 descriptor?? [ 128.002318][ T786] pwc: Askey VC010 type 2 USB webcam detected. [ 128.205523][ T786] pwc: send_video_command error -71 [ 128.226589][ T786] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 128.245958][ T786] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 128.274980][ T786] usb 4-1: USB disconnect, device number 15 [ 128.457495][ T5834] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 128.601334][ T6950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.624845][ T6950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.668228][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 128.688710][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.720157][ T5834] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 128.738300][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 128.746624][ T5834] usb 2-1: Product: syz [ 128.754336][ T5834] usb 2-1: Manufacturer: syz [ 128.759308][ T786] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 128.787303][ T5834] usb 2-1: SerialNumber: syz [ 128.818477][ T28] audit: type=1326 audit(1781316049.733:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.269" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f5a59ce59 code=0x0 [ 128.953238][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.966500][ T786] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 128.976769][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.996902][ T786] usb 4-1: config 0 descriptor?? [ 129.022841][ T786] pwc: Askey VC010 type 2 USB webcam detected. [ 129.247335][ T6976] random: crng reseeded on system resumption [ 129.422637][ T786] pwc: recv_control_msg error -32 req 02 val 2b00 [ 129.433956][ T786] pwc: recv_control_msg error -32 req 02 val 2700 [ 129.447338][ T786] pwc: recv_control_msg error -32 req 02 val 2c00 [ 129.460384][ T786] pwc: recv_control_msg error -32 req 04 val 1000 [ 129.478079][ T786] pwc: recv_control_msg error -32 req 04 val 1300 [ 129.485155][ T786] pwc: recv_control_msg error -32 req 04 val 1400 [ 129.492667][ T786] pwc: recv_control_msg error -32 req 02 val 2000 [ 129.500451][ T786] pwc: recv_control_msg error -32 req 02 val 2100 [ 129.507704][ T786] pwc: recv_control_msg error -32 req 04 val 1500 [ 129.514935][ T786] pwc: recv_control_msg error -32 req 02 val 2500 [ 129.528463][ T786] pwc: recv_control_msg error -32 req 02 val 2400 [ 129.535702][ T786] pwc: recv_control_msg error -32 req 02 val 2600 [ 129.547961][ T786] pwc: recv_control_msg error -32 req 02 val 2900 [ 129.555022][ T786] pwc: recv_control_msg error -32 req 02 val 2800 [ 129.778228][ T786] pwc: recv_control_msg error -71 req 04 val 1200 [ 129.788856][ T786] pwc: Registered as video103. [ 129.802040][ T786] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 129.843761][ T786] usb 4-1: USB disconnect, device number 16 [ 130.343293][ T6995] loop3: detected capacity change from 0 to 64 [ 130.355383][ T6995] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 130.474106][ T6997] syzkaller0: entered promiscuous mode [ 130.480818][ T6997] syzkaller0: entered allmulticast mode [ 130.839881][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.864349][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.258217][ T5842] usb 2-1: USB disconnect, device number 16 [ 131.353140][ T28] audit: type=1326 audit(1781316052.263:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.4.279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f9879ce59 code=0x0 [ 131.617623][ T7017] loop1: detected capacity change from 0 to 64 [ 131.661484][ T7017] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 131.877675][ T7022] syzkaller0: entered promiscuous mode [ 131.887366][ T7022] syzkaller0: entered allmulticast mode [ 132.241009][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.289'. [ 132.472124][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.482804][ T5834] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 132.495022][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.669467][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 132.685332][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.704598][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 132.715482][ T5834] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 132.732802][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 132.767919][ T5834] usb 2-1: Product: syz [ 132.789209][ T5834] usb 2-1: Manufacturer: syz [ 132.813047][ T5834] usb 2-1: SerialNumber: syz [ 133.000307][ T7050] loop3: detected capacity change from 0 to 64 [ 133.042927][ T7050] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 133.064164][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.077856][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.319481][ T7058] syzkaller0: entered promiscuous mode [ 133.326969][ T7058] syzkaller0: entered allmulticast mode [ 133.504924][ T28] audit: type=1326 audit(1781316054.423:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.0.297" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f5a59ce59 code=0x0 [ 134.007298][ T5834] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 134.200637][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.212373][ T5834] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.232903][ T5834] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.247807][ T5834] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 134.266185][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.275048][ T5834] usb 4-1: Product: syz [ 134.282731][ T5834] usb 4-1: Manufacturer: syz [ 134.287797][ T5834] usb 4-1: SerialNumber: syz [ 134.391826][ T7073] loop4: detected capacity change from 0 to 4096 [ 134.411470][ T7073] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 134.572399][ T5834] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 134.642451][ T7078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.650096][ T5834] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 134.673986][ T7080] loop0: detected capacity change from 0 to 64 [ 134.680916][ T7078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.684532][ T5834] usb 4-1: USB disconnect, device number 17 [ 134.707302][ T7080] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 134.751319][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.083609][ T7085] syzkaller0: entered promiscuous mode [ 135.089592][ T7085] syzkaller0: entered allmulticast mode [ 135.253564][ T23] usb 2-1: USB disconnect, device number 17 [ 135.437397][ T28] audit: type=1326 audit(1781316056.353:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.1.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1bdb9ce59 code=0x0 [ 135.655087][ T7100] loop0: detected capacity change from 0 to 64 [ 135.681497][ T7100] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 136.143460][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.150960][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.887957][ T7123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.913791][ T7123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.932135][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.962104][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.997315][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 138.200487][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.213341][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.236559][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.263041][ T8] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 138.277199][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.293515][ T8] usb 2-1: Product: syz [ 138.305502][ T8] usb 2-1: Manufacturer: syz [ 138.312020][ T7101] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.317222][ T8] usb 2-1: SerialNumber: syz [ 138.324052][ T7101] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.336222][ T7101] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.352257][ T7101] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.600783][ T8] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 138.657934][ T8] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 138.677567][ T8] usb 2-1: USB disconnect, device number 18 [ 138.711101][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.866684][ T7129] syzkaller0: entered promiscuous mode [ 138.872547][ T7129] syzkaller0: entered allmulticast mode [ 138.887411][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 139.080688][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.091056][ T27] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.122376][ T27] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 139.132968][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 139.163901][ T27] usb 5-1: Product: syz [ 139.177358][ T27] usb 5-1: Manufacturer: syz [ 139.182026][ T27] usb 5-1: SerialNumber: syz [ 139.327339][ T7137] syzkaller0: entered promiscuous mode [ 139.333270][ T7137] syzkaller0: entered allmulticast mode [ 139.368029][ T7137] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 140.525615][ T28] audit: type=1326 audit(1781316061.413:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5a59ce59 code=0x7ffc0000 [ 140.561120][ T28] audit: type=1326 audit(1781316061.413:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5a59ce59 code=0x7ffc0000 [ 140.598508][ T7155] syzkaller0: entered promiscuous mode [ 140.604327][ T7155] syzkaller0: entered allmulticast mode [ 140.923308][ T7163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.330'. [ 140.929962][ T7165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.946838][ T7165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.003041][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.017616][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.606430][ T7176] syzkaller0: entered promiscuous mode [ 141.612728][ T7176] syzkaller0: entered allmulticast mode [ 141.623318][ T7176] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 141.655554][ T786] usb 5-1: USB disconnect, device number 7 [ 141.724187][ T7178] loop4: detected capacity change from 0 to 64 [ 141.810908][ T28] audit: type=1800 audit(1781316062.733:20): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.336" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 141.885708][ T1145] ------------[ cut here ]------------ [ 141.891788][ T1145] kernel BUG at fs/hfs/inode.c:449! [ 141.935217][ T1145] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 141.941357][ T1145] CPU: 0 PID: 1145 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 141.948914][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.958989][ T1145] Workqueue: writeback wb_workfn (flush-7:4) [ 141.965016][ T1145] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 141.970568][ T1145] Code: c7 c1 00 73 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 73 31 97 e8 f0 f2 83 ff e9 62 fe ff ff e8 e6 b2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 141.990179][ T1145] RSP: 0018:ffffc90004caf340 EFLAGS: 00010293 [ 141.996240][ T1145] RAX: ffffffff825b78aa RBX: ffff88802e7c81a8 RCX: ffff8880240abc00 [ 142.004208][ T1145] RDX: 0000000000000000 RSI: ffffffff8d33a040 RDI: 0000000000000000 [ 142.012176][ T1145] RBP: ffffc90004caf4d0 R08: ffff8880240abc00 R09: 0000000000000003 [ 142.020145][ T1145] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 142.028113][ T1145] R13: 1ffff92000995e6c R14: ffff88802e7c8158 R15: 0000000000000000 [ 142.036084][ T1145] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 142.045013][ T1145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.051606][ T1145] CR2: 000000110c43a7df CR3: 0000000063708000 CR4: 00000000003506f0 [ 142.059592][ T1145] Call Trace: [ 142.062883][ T1145] [ 142.065809][ T1145] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 142.071188][ T1145] ? __rwlock_init+0x150/0x150 [ 142.075953][ T1145] __writeback_single_inode+0x705/0xec0 [ 142.081501][ T1145] writeback_sb_inodes+0x7cd/0xf50 [ 142.086625][ T1145] ? queue_io+0x550/0x550 [ 142.090968][ T1145] ? rcu_is_watching+0x15/0xb0 [ 142.095733][ T1145] wb_writeback+0x46a/0xbf0 [ 142.100243][ T1145] ? queue_io+0x3d1/0x550 [ 142.104583][ T1145] ? percpu_ref_tryget+0x250/0x250 [ 142.109697][ T1145] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 142.115682][ T1145] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.120889][ T1145] wb_workfn+0x400/0xe60 [ 142.125133][ T1145] ? inode_wait_for_writeback+0x230/0x230 [ 142.130852][ T1145] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 142.136829][ T1145] ? read_lock_is_recursive+0x20/0x20 [ 142.142202][ T1145] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.147403][ T1145] ? process_scheduled_works+0x96f/0x15d0 [ 142.153118][ T1145] ? process_scheduled_works+0x96f/0x15d0 [ 142.158835][ T1145] process_scheduled_works+0xa5d/0x15d0 [ 142.164388][ T1145] ? worker_attach_to_pool+0x380/0x380 [ 142.169844][ T1145] ? assign_work+0x3d2/0x5d0 [ 142.174435][ T1145] worker_thread+0xa55/0xfc0 [ 142.179028][ T1145] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 142.184920][ T1145] ? _raw_spin_unlock+0x40/0x40 [ 142.189770][ T1145] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 142.195670][ T1145] kthread+0x2fa/0x390 [ 142.199736][ T1145] ? pr_cont_work+0x560/0x560 [ 142.204417][ T1145] ? kthread_blkcg+0xd0/0xd0 [ 142.209009][ T1145] ret_from_fork+0x48/0x80 [ 142.213426][ T1145] ? kthread_blkcg+0xd0/0xd0 [ 142.218018][ T1145] ret_from_fork_asm+0x11/0x20 [ 142.222784][ T1145] [ 142.225797][ T1145] Modules linked in: [ 142.229841][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.245966][ T1145] ---[ end trace 0000000000000000 ]--- [ 142.257262][ T1145] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 142.264798][ T1145] Code: c7 c1 00 73 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 73 31 97 e8 f0 f2 83 ff e9 62 fe ff ff e8 e6 b2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 142.285477][ T1145] RSP: 0018:ffffc90004caf340 EFLAGS: 00010293 [ 142.291963][ T1145] RAX: ffffffff825b78aa RBX: ffff88802e7c81a8 RCX: ffff8880240abc00 [ 142.310827][ T1145] RDX: 0000000000000000 RSI: ffffffff8d33a040 RDI: 0000000000000000 [ 142.321015][ T1145] RBP: ffffc90004caf4d0 R08: ffff8880240abc00 R09: 0000000000000003 [ 142.365015][ T1145] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 142.376011][ T1145] R13: 1ffff92000995e6c R14: ffff88802e7c8158 R15: 0000000000000000 [ 142.384403][ T1145] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 142.394668][ T1145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.401579][ T1145] CR2: 00007f6ef63ec4b8 CR3: 000000002c705000 CR4: 00000000003526e0 [ 142.409647][ T1145] Kernel panic - not syncing: Fatal exception [ 142.415968][ T1145] Kernel Offset: disabled [ 142.420290][ T1145] Rebooting in 86400 seconds..