last executing test programs: 16.942464189s ago: executing program 1 (id=3079): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x4000000a, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) 16.690796917s ago: executing program 1 (id=3080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c1020000ff88125ce8", 0x17}], 0x1}, 0x4005) 15.230050152s ago: executing program 1 (id=3083): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 14.841733374s ago: executing program 1 (id=3084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) syz_usb_connect$uac2(0x5, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x5, 0x80, 0xd, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0xf1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x8, 0x1a, 0x5}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x8}, @output_terminal={0xc, 0x24, 0x3, 0x6, 0x200, 0x99, 0x2, 0x3, 0x0, 0xfa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4a, 0x69, 0xf7, {0x8, 0x25, 0x1, 0x0, 0xc, 0x8, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x1bf, 0x9, 0x7f, 0x1, {0x8, 0x25, 0x1, 0x1, 0x3f, 0x4, 0xff}}}}}}}}]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.057695259s ago: executing program 1 (id=3098): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="782a289a6e42111aa91ca0647cb652ba12d791e9cf5f1504a6f4d297753696e0445ce7aed6ddd0ed7d4ee69c57fecdcfb31c319b5adc5fe9c08ea8b01dea934a069164ff2eac6c179e192a3f1cf2a9bd65455da87fdc6fcdd81f04dffcbd61", 0x5f}], 0x1) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 12.858786795s ago: executing program 1 (id=3099): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x40, 0xd, 0x6, "d35e4a2ec7d4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x20, 0xe, 0x21, {0x21, 0x23, "9ce8d4ef14fe848c566e0cbab29bf1e648c55a666a136e05615d110aa74cab"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x40, 0x10, 0x64, "fb50a1df99255b96373b732847cae6a1d2e5f7bfb3310adb9fa11082847854a804b2d5d36dd550e8b510d5bcdd152ceda1f293bff62fb7eb38eb7a1969358109dd97b787e777c9cfee1bf00adc0e14c9cc5930e802154b755119ced8f07dedb4efbe11f7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x85, 0x3, "de4f33"}}) 7.841493629s ago: executing program 4 (id=3127): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) 5.88899491s ago: executing program 2 (id=3134): write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00e9ffffff9402"], 0xe8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 5.681576076s ago: executing program 2 (id=3135): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 5.509578341s ago: executing program 2 (id=3136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf", 0x29}], 0x1}, 0x4005) 4.314598558s ago: executing program 3 (id=3138): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x12, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) mkdirat(0xffffffffffffff9c, 0x0, 0x207) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x60) lseek(r1, 0x2, 0x2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x40, 0x30, 0x28, {0x28, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.489421803s ago: executing program 4 (id=3139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00'], 0x40}}, 0x90) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="09010000", @ANYRES16, @ANYBLOB="010029bd7000fcdbdf2512000000da00be00f3038c886c81408515dbbfe61909498c629ece81a79384941f6fb5af59254f63003c3027337adcb6ce69724ccfbae8276ea9dd1ff690c73425d2d84599e412127bc829f3c3032e83f2e42870affe2e2a5e1e2a65bc386f7f12ef5d55cc4c35abf763f136ef4c688b7e977656e83d59c0e094825e1eb3a7ba708b532fa5f23fe05adfc5be5ac3cc2e479076e52502f73b3737668455b857be77dd123c1b69b44aaf37287c9e20b85848efb84d512485bc764bc4256659493e78ca6ee31e4d7b491512e4de1f616298e732a6a60ea7"], 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.408614716s ago: executing program 2 (id=3140): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x2, {0xffff848e, 0xe, 0x4, 0x2, 0x80000000, 0x40}}) 3.105648415s ago: executing program 2 (id=3142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x561, 0x0, 0x200000000014000}]}) 3.105368144s ago: executing program 4 (id=3144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x12, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.647123709s ago: executing program 2 (id=3146): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000000100)="a9", 0x1}, {&(0x7f0000000740)="c316664a0a7a9f5fea5a8cf758449148af3d1bdb2988d29dba3150c58d8e2b187523d757887ce68050033e7e903f83a05f27d8aa8351e6336851ced4e138223e6a3a19182a1a52749a7a64d118f595994de0e85c1748067659a8e43141c2eb3d376bf55eafa648ed09b9c403a459a2ffff1cf6efde837697fdf7c66c94678e7ac3609a5ee9948b7d73265186461414010f43a12154739d058edf2a4313a945be7d1a6bea50bfca533fba2fd5ec74cce37b44d93fe28a350dd811493663625aa4a5301c0b3b62a24df1b75817ab7b43e2c57ae1eb3111bf4b625a3babfbe135b610842bb3ced627f674ee55a3b2b6aacb726aab0bd8ff99cfb2e369c094722e1a7a09458b9c7f7418e6c27eba2ac861a7f5fc5b7bcb200e3f18471774c1ca7a065221d26f40ffb71d598ac379b5a62742e1752d8466dd99f8f47e6a2c58704f6b1d6d12e02bc3f0cee338282af213dc20c18c232c7d43634538224953939d7d5a5d6d22dfad2ded0642340e7f874369defb531c39ebf35e7d44af2ba5590ad685e8a369c16963422580f1a40bdbfd186e70d63314cb2338034160ba496ab9d2870adc79124178ef2e7ee68d9237cc30d488d3bd53ce689ff15020b19ddd1b72a3a9d850b7596298b1dacf7931f4c3a25f9983f9bb47fba455b6d1f6e36ba38e9d177c13c316661581a21008ea932e98212d39b1e5e750158fffc8fdfd35a71dbe74373aec4ee01b10ac6dd4fac67e64f668912f84f8236932999cdd9f4b0c6f340c72b190a8edb2df1a25999fcdb45c7989035ce25cf847a36dbd00b18b6714e8a610159d33519ea64d1382d218d548c927683fb54e6c841524dc7d287e76baa03628d62ea61da24da0c51aa29725e52c9778484c687fcaa73892f99c0db25bdf02d3aaa5b5d273af81832ebbe4dcaa35acc04eec134f96aa764fc58644fe3c83a88aef5e2f1d97d27da532d23fff522068f339915a47ee49d66217ce55230967407d326cf91756a8ab142455f67f1b72c09fc82f3bcff995a8a03c0e99823e65bf34e1e350d379177b08583df880a59de0b89d6836b46ca360cc531c94d9ec163b982302a4b2a455492e9de972028a98034e771d7683edf422f6a3385c20230a27849d6be69b715aeaf2b3891a8eef35aeee5ee3a16838143a55d09481036a6cfdb5b62ab984eebb92c261b26735338652521bee9dcc20508ab6d4164446f0c3d36cf4dc35c3856ad7a296a8f0e01daf9c92a3a14fb55dbb95b73adc6c122b384e6ae8894b1f9d2432fb0caf4235f53d54305710824fca682debaf862c3348c8a2bfa079b0031e7ae39f79b89a211efd0fccb66ca19263d0f4c7f8c670bc59b08e8ad2e6be484d317de5e29f12bf0204bb5cb71e5f58949b58d6b97d5fcc040316296031927ef57a874dac170bb1f1af3cf349ad0688d6ba773552c2f6ca07af7a5acbdee025e2ea8aee5e8be8c4ad75eaf9ebf26b44a3f475facc7b05e5a633715306d07f0f34c8c49b2897fbff80bc8d2140e5678af0282be0d51f2ca92c06b1c1b17449b6e9da24423f64c3192497a5af9a9e7bce14ee848fc0975a84f4a7be8d3f69cfb9ddcdbe5fb09a95a93d585503f1ecff9ff51e06b541e2b4601429214e224c8f019477e02e570790c88bb53baa4d458192c30ae132ac9716571e9c4d6acd8b6221f5187cafbec75c74fd6f31e275efe63419425761c7f82e54c15526e6fa5d8a44e003960f6a90eb55e9f129d6d63a6689f086c47781f0516e9e05d765016cf0d308161e86929d5a0a02b1c46416738129286cc94dd4f115483599392b5178cb9e5a5460aa0891c149eb70a2b4eb2625cf6eb84da2bcb3aef12ceef21d65e409c1ec4e089950c3fb205766d3398341a079a5dd6800a9c11a3a6540f16f0490b8e0a16c30831ecd9fd1470dbf4e2ae829b55a4aa6785fd33db030602fc9b13f501f245d1d22783299e41df7f635aab5edbcadffc362970dbbb8b364ddf26ed78871f9df10ba3f5c71a395c2187f31c4b4c716cecdb1c3d80afa35896af2d506ca6f4e56cc42e514cd49de71ee69596b5882727fce51c6020e4c37d0dc25beabb36c9ff1e4ed09b8d84b035ee8c9874a12e7ff75bbd0ebd7a3168d375b1160215a03ad2281d026c42647abf3352f7684bbbb3c3502cd0cbed1a3d3a57165dec6779fa40c0b43056e1234464465f098f30b2e6f4f1c5870784e1bfa79fa759aaa6e7300ec9d2f41cf72b1f6e74aa93bc53d9e5c4525c117b08f00246d90336a16c095f32c2b1517b5730be9a1333a1c0b188f9a19a283461598a781c2678a2d0a0d0ba0e43805044898eb251a591abc1c84f3149958e99d7d183f188e4bfc062ac52184719becfa930c3c7540851dd7d562789925c0e6d96b069daa4784caf47a7b9ea23b110d1586f12f92db38059050d5de5ed2e58cd93f99c1f19dff2dd32824355030df7feb5bab4ba58cd3cd12be4aa98aa6a726cfbe18ed7525ac0b15174ca65ee0a412d87ba02eccc9e2a856e1b41e0d8f552e673d1c45e3f95e03bad8a6b1d4b9e5c0946932ce130487e654c4fb90e1fb6dd33c33c2d48a", 0x71f}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) splice(r2, 0x0, r0, 0x0, 0x800, 0x0) 2.640393579s ago: executing program 4 (id=3147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x1, 0x1}, @flat=@handle={0x73682a85, 0x2100, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x37}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.464344065s ago: executing program 0 (id=3148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle, @flat=@handle={0x73682a85, 0x2100, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x37}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.454954125s ago: executing program 3 (id=3149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf", 0x29}], 0x1}, 0x4005) 2.365714987s ago: executing program 4 (id=3150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.309461749s ago: executing program 0 (id=3151): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000200)={@val={0xa, 0x88e5}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x30, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, "3be0e6", 0xd, 0x3a, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}}, 0x6a) 1.981590689s ago: executing program 3 (id=3152): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8001, 0xa, 0x87, 0x8, "b01eb45b7b42d1b78db69e4ddcbe602aceee5ab4c53511819a5d8f7a28bf04c5a4ee3470588f8f00cf676d0afca0f2e6f4d82e4208ca4c5f7365d43100", "b31f22c9080873366b499607be231200bc798b00", [0xff, 0x105e8]}) 1.96821755s ago: executing program 0 (id=3153): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x88e5}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x28, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, "3be0e6", 0xd, 0x3a, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}}, 0x6a) 1.907175632s ago: executing program 4 (id=3154): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) 1.63355485s ago: executing program 0 (id=3155): openat$ttynull(0xffffffffffffff9c, 0x0, 0x22000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) 1.63326219s ago: executing program 3 (id=3156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, 0x0, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f0000001e80)={0x2020}, 0x2020) 697.692629ms ago: executing program 3 (id=3157): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 447.984377ms ago: executing program 0 (id=3158): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0xfc, 0x0, 0x0, @remote, @empty}}}}) 89.560947ms ago: executing program 3 (id=3159): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 0s ago: executing program 0 (id=3160): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x67, 0x0, &(0x7f00000002c0)="f98e39ae2ea14d3cc5c2b2a05fffe23cd7e2b5d818fe1aa2beee61feaf174a5fde3f0425cf95e004b035a4006a02a19d50d29dd00f0b4a58b6b386e7536dad9bc946607fe0ce4752e0c283bfcb7ea694093bf67f8a07a75d64ddf517c9d8cd65469407b385c2dc"}) kernel console output (not intermixed with test programs): ice loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 682.193375][T14678] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 682.200535][T14678] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 682.205124][ T3787] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 682.215326][T13737] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 682.232501][T14678] EXT4-fs (loop4): 1 truncate cleaned up [ 682.239933][T14678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 682.531803][T13737] usb 4-1: Using ep0 maxpacket: 32 [ 682.548717][T13737] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 682.701528][T13737] usb 4-1: config 0 has no interface number 0 [ 682.707686][ T3787] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 682.715226][T13737] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 682.715254][T13737] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 682.715275][T13737] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 682.715296][T13737] usb 4-1: config 0 interface 196 has no altsetting 0 [ 682.717450][T13737] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 682.767669][T13737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.782523][T13737] usb 4-1: Product: syz [ 682.788693][T13737] usb 4-1: Manufacturer: syz [ 682.795297][T13737] usb 4-1: SerialNumber: syz [ 682.815997][T13737] usb 4-1: config 0 descriptor?? [ 682.823641][T14676] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 682.952513][ T3787] usb 2-1: Using ep0 maxpacket: 8 [ 682.960480][ T3787] usb 2-1: config 0 has no interfaces? [ 682.978041][ T3787] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 683.015483][ T3787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.044094][ T3787] usb 2-1: config 0 descriptor?? [ 683.048969][T13737] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 683.057700][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 683.058865][T13737] ipheth: probe of 4-1:0.196 failed with error -71 [ 683.120014][T13737] usb 4-1: USB disconnect, device number 84 [ 683.306718][ T4317] usb 2-1: USB disconnect, device number 96 [ 683.500661][ T3787] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 683.692972][ T3787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.724552][ T3787] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 683.736564][T14710] device syzkaller0 entered promiscuous mode [ 683.749093][ T3787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.775016][ T3787] usb 5-1: config 0 descriptor?? [ 684.007975][ T3787] usbhid 5-1:0.0: can't add hid device: -71 [ 684.030745][ T3787] usbhid: probe of 5-1:0.0 failed with error -71 [ 684.068142][ T3787] usb 5-1: USB disconnect, device number 83 [ 684.079298][T14712] device syzkaller0 entered promiscuous mode [ 684.300503][T14726] device syzkaller0 entered promiscuous mode [ 684.574804][ T3787] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 684.772230][ T3787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.800651][ T3787] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 684.830635][ T3787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.852199][ T3787] usb 5-1: config 0 descriptor?? [ 684.861783][T14738] loop1: detected capacity change from 0 to 512 [ 684.882861][T14738] EXT4-fs: Ignoring removed i_version option [ 684.916669][T14738] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 684.950858][T14738] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 684.986971][T14738] EXT4-fs (loop1): orphan cleanup on readonly fs [ 685.021635][T14738] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 685.038539][T14738] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 685.053904][T14738] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 685.064140][T14738] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 685.091198][T14738] EXT4-fs (loop1): 1 truncate cleaned up [ 685.108509][T14738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 685.551733][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.560500][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.690509][ T3787] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 685.691320][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.724093][ T3787] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input53 [ 685.725998][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.905419][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 686.099826][ T4318] usb 5-1: USB disconnect, device number 84 [ 686.099951][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 686.230647][T13737] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 686.442606][T13737] usb 3-1: Using ep0 maxpacket: 32 [ 686.461887][T13737] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 686.470267][T13737] usb 3-1: config 0 has no interface number 0 [ 686.484166][T13737] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 686.497500][T13737] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 686.509727][T13737] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 686.527652][T13737] usb 3-1: config 0 interface 196 has no altsetting 0 [ 686.539812][T13737] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 686.554531][T13737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.577011][T13737] usb 3-1: Product: syz [ 686.581537][T13737] usb 3-1: Manufacturer: syz [ 686.586228][T13737] usb 3-1: SerialNumber: syz [ 686.600856][T13737] usb 3-1: config 0 descriptor?? [ 686.606641][T14747] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 686.841001][T13737] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 686.848508][T13737] ipheth: probe of 3-1:0.196 failed with error -71 [ 686.872450][T13737] usb 3-1: USB disconnect, device number 75 [ 687.360697][ T4318] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 687.583669][ T4318] usb 2-1: Using ep0 maxpacket: 16 [ 687.591320][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.613313][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.627555][ T4318] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 687.637896][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.658095][ T4318] usb 2-1: config 0 descriptor?? [ 688.044393][T14779] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 688.055718][T14779] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 688.077052][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.090347][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.109836][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.126858][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.141645][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.149579][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.156851][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.188263][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.199985][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.213221][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.224698][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.236140][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.243932][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.251231][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.258773][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.266548][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.274144][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.291135][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.298248][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.305513][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.312880][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.319832][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.327664][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.334828][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.342174][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.349130][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.356452][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.363593][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.373882][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.380837][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.388396][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.395341][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.402500][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.409357][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.416302][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.423192][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.430061][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.436967][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.443868][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.450757][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.457614][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.464498][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.471446][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.478315][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.485454][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.493801][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.500924][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.507784][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.514662][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.521580][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.528434][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.535306][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.542207][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.549060][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.555937][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.562831][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.569686][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.576576][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.583502][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.590341][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.597846][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.604748][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.611646][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.618500][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.625373][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.632271][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.639135][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.646047][ T4318] apple 0003:05AC:024B.0031: unknown main item tag 0x0 [ 688.654046][ T4318] apple 0003:05AC:024B.0031: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.1-1/input0 [ 688.676421][ T4318] usb 2-1: USB disconnect, device number 97 [ 688.827443][T14788] fido_id[14788]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 688.879917][T14793] loop0: detected capacity change from 0 to 512 [ 688.902129][T14793] EXT4-fs: Ignoring removed i_version option [ 688.921437][T14793] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 688.930256][T14793] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 688.976294][T14793] EXT4-fs (loop0): orphan cleanup on readonly fs [ 688.989159][T14793] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 689.005398][T14793] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 689.080790][T14793] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 689.136979][T14793] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 689.198717][T14793] EXT4-fs (loop0): 1 truncate cleaned up [ 689.221032][T14793] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 689.397452][T14809] device syzkaller0 entered promiscuous mode [ 689.630727][ T4318] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 689.813772][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 689.822014][ T4318] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 689.850535][ T4318] usb 2-1: config 0 has no interface number 0 [ 689.856907][ T4318] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 689.898043][ T4318] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 689.930642][ T4318] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 689.960868][ T4318] usb 2-1: config 0 interface 196 has no altsetting 0 [ 689.977989][ T4318] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 690.003895][T14815] device syzkaller0 entered promiscuous mode [ 690.010645][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.018648][ T4318] usb 2-1: Product: syz [ 690.040656][ T4318] usb 2-1: Manufacturer: syz [ 690.052137][ T4318] usb 2-1: SerialNumber: syz [ 690.069608][ T4318] usb 2-1: config 0 descriptor?? [ 690.090001][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 690.096246][T14805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 690.341628][ T4318] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 690.349139][ T4318] ipheth: probe of 2-1:0.196 failed with error -71 [ 690.386586][ T4318] usb 2-1: USB disconnect, device number 98 [ 690.509370][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 690.521252][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 690.528987][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 690.541911][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 690.549398][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 690.556790][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 690.582000][ T5759] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 690.757958][ T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.770444][ T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.787043][T14818] chnl_net:caif_netlink_parms(): no params data found [ 690.795678][ T5759] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 690.815693][ T5759] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 690.832612][ T5759] usb 1-1: config 220 has no interface number 2 [ 690.839009][ T5759] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 690.863119][ T5759] usb 1-1: config 220 interface 0 has no altsetting 0 [ 690.870019][ T5759] usb 1-1: config 220 interface 76 has no altsetting 0 [ 690.883205][ T5759] usb 1-1: config 220 interface 1 has no altsetting 0 [ 690.906441][ T5759] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 690.916508][ T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.926976][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.935035][ T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.946043][ T5759] usb 1-1: Product: syz [ 690.951193][ T5759] usb 1-1: Manufacturer: syz [ 690.960858][ T5759] usb 1-1: SerialNumber: syz [ 691.010258][T14818] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.017829][T14818] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.028391][T14818] device bridge_slave_0 entered promiscuous mode [ 691.078892][ T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.090280][ T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.138325][T14818] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.147596][T14818] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.156836][T14818] device bridge_slave_1 entered promiscuous mode [ 691.193873][ T5759] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 691.204802][ T5759] usb 1-1: No valid video chain found. [ 691.207321][ T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.210304][ T5759] usb 1-1: selecting invalid altsetting 0 [ 691.231789][ T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.264393][ T5759] usb 1-1: selecting invalid altsetting 0 [ 691.274695][ T5759] usbtest: probe of 1-1:220.1 failed with error -22 [ 691.292609][ T5759] usb 1-1: USB disconnect, device number 108 [ 691.347695][T14818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.350779][ T4355] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 691.369861][T14818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.449716][T14818] team0: Port device team_slave_0 added [ 691.466170][T14818] team0: Port device team_slave_1 added [ 691.530300][T14818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.537690][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.570538][ T4355] usb 2-1: Using ep0 maxpacket: 16 [ 691.578467][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.595519][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.605468][ T4355] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 691.620991][T14818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.631752][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.650106][T14818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.658254][ T4355] usb 2-1: config 0 descriptor?? [ 691.663418][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.700538][T14818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.721901][ T47] tipc: Left network mode [ 691.772259][T14818] device hsr_slave_0 entered promiscuous mode [ 691.803143][T14818] device hsr_slave_1 entered promiscuous mode [ 691.820214][T14818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 691.838943][T14818] Cannot create hsr debugfs directory [ 692.106615][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.151138][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.158048][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.195562][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.210688][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.227796][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.237906][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.249182][T14851] loop3: detected capacity change from 0 to 512 [ 692.255732][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.263784][T14851] EXT4-fs: Ignoring removed i_version option [ 692.270262][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.277708][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.285561][T14851] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 692.303161][T14851] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 692.322547][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.330425][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.347722][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.360881][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.388607][T14851] EXT4-fs (loop3): orphan cleanup on readonly fs [ 692.419252][T14851] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 692.430780][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.437652][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.460741][T14851] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 692.484119][T14851] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 692.500910][T14851] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 692.522286][T14851] EXT4-fs (loop3): 1 truncate cleaned up [ 692.528282][T14851] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 692.537363][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.580759][T14641] Bluetooth: hci4: command 0x0409 tx timeout [ 692.595028][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.604507][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.616879][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.624949][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.638723][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.646723][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.659744][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.707634][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.810647][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.970662][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 692.977580][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.000644][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.007537][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.037496][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.085432][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.108460][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.125619][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.149454][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.168693][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.201047][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.231876][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.260069][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.290679][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.317940][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.348266][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.368841][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.387757][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.416131][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.433474][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.444481][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.474817][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.490631][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.518184][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.535682][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.546492][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.559179][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.566652][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.588156][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.615984][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.631185][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.641618][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.648650][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.656104][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.663367][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.670769][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.677863][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.685082][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.693198][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.700144][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.707605][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.715641][ T4355] apple 0003:05AC:024B.0032: unknown main item tag 0x0 [ 693.735709][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 693.751454][ T4355] apple 0003:05AC:024B.0032: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.1-1/input0 [ 693.766505][ T4355] usb 2-1: USB disconnect, device number 99 [ 693.926008][T14892] device syzkaller0 entered promiscuous mode [ 694.059247][T14901] fido_id[14901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 694.260482][T14914] random: crng reseeded on system resumption [ 694.360658][ T5759] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 694.570700][ T5759] usb 2-1: Using ep0 maxpacket: 32 [ 694.581787][ T5759] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 694.604301][ T5759] usb 2-1: config 0 has no interface number 0 [ 694.613763][ T5759] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 694.628032][ T5759] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 694.641589][ T5759] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 694.660912][T14641] Bluetooth: hci4: command 0x041b tx timeout [ 694.661267][ T5759] usb 2-1: config 0 interface 196 has no altsetting 0 [ 694.676536][ T5759] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 694.685647][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.699727][ T5759] usb 2-1: Product: syz [ 694.704027][ T5759] usb 2-1: Manufacturer: syz [ 694.708695][ T5759] usb 2-1: SerialNumber: syz [ 694.733170][ T5759] usb 2-1: config 0 descriptor?? [ 694.739854][T14909] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 694.965410][ T5759] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 694.975711][ T5759] ipheth: probe of 2-1:0.196 failed with error -71 [ 695.004117][ T5759] usb 2-1: USB disconnect, device number 100 [ 695.871805][ T5759] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 696.078712][ T5759] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 696.094550][ T5759] usb 2-1: config 0 has no interface number 0 [ 696.100934][ T5759] usb 2-1: config 0 interface 41 has no altsetting 0 [ 696.132095][ T5759] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 696.141338][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.149339][ T5759] usb 2-1: Product: syz [ 696.153605][ T5759] usb 2-1: Manufacturer: syz [ 696.158212][ T5759] usb 2-1: SerialNumber: syz [ 696.173414][ T5759] usb 2-1: config 0 descriptor?? [ 696.744306][T14641] Bluetooth: hci4: command 0x040f tx timeout [ 696.871616][ T3787] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 697.007432][ T5759] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 697.009284][T14945] fuse: Bad value for 'fd' [ 697.032335][T14941] device syzkaller0 entered promiscuous mode [ 697.084786][ T3787] usb 1-1: Using ep0 maxpacket: 8 [ 697.094386][ T3787] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 697.124780][ T3787] usb 1-1: config 0 has no interface number 0 [ 697.147849][ T3787] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 697.191533][ T3787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.199947][ T3787] usb 1-1: Product: syz [ 697.225855][ T3787] usb 1-1: Manufacturer: syz [ 697.231267][ T5759] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 697.233179][ T3787] usb 1-1: SerialNumber: syz [ 697.262400][ T5759] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 697.276307][ T3787] usb 1-1: config 0 descriptor?? [ 697.290893][ T5759] CoreChips: probe of 2-1:0.41 failed with error -71 [ 697.328471][ T5759] usb 2-1: USB disconnect, device number 101 [ 697.410409][ T47] device hsr_slave_0 left promiscuous mode [ 697.425420][ T47] device hsr_slave_1 left promiscuous mode [ 697.441433][ T47] batman_adv: batadv0: Interface deactivated: dummy0 [ 697.448154][ T47] batman_adv: batadv0: Removing interface: dummy0 [ 697.466236][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.480642][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.499739][ T3787] usb 1-1: USB disconnect, device number 109 [ 697.523868][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.554218][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.589297][ T47] device bridge_slave_1 left promiscuous mode [ 697.606818][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.681489][ T47] device veth1_macvtap left promiscuous mode [ 697.687679][ T47] device veth0_macvtap left promiscuous mode [ 697.695513][ T47] device veth1_vlan left promiscuous mode [ 697.703981][ T47] device veth0_vlan left promiscuous mode [ 698.010841][ T26] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 698.226209][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 698.234250][ T26] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 698.269053][ T26] usb 4-1: config 0 has no interface number 0 [ 698.278474][ T26] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 698.293749][ T26] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 698.307633][ T26] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 698.321209][ T26] usb 4-1: config 0 interface 196 has no altsetting 0 [ 698.339244][ T26] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 698.357461][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.366908][ T26] usb 4-1: Product: syz [ 698.371984][ T26] usb 4-1: Manufacturer: syz [ 698.376820][ T26] usb 4-1: SerialNumber: syz [ 698.384114][ T26] usb 4-1: config 0 descriptor?? [ 698.399454][T14963] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 698.618865][ T26] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 698.626726][ T26] ipheth: probe of 4-1:0.196 failed with error -71 [ 698.637797][ T26] usb 4-1: USB disconnect, device number 85 [ 698.746401][ T47] team0 (unregistering): Port device team_slave_1 removed [ 698.779157][ T47] team0 (unregistering): Port device team_slave_0 removed [ 698.811642][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.830689][T14641] Bluetooth: hci4: command 0x0419 tx timeout [ 698.850105][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.055622][ T47] bond0 (unregistering): Released all slaves [ 699.266614][T14818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 699.298781][T14818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 699.350092][T14818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 699.376181][T14818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 699.556500][T15002] xt_hashlimit: size too large, truncated to 1048576 [ 699.621549][T14818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.673168][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 699.696215][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 699.736963][T14818] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.775133][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 699.788652][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 699.820362][T13672] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.827517][T13672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.842178][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 699.856278][T15010] device syzkaller0 entered promiscuous mode [ 699.880115][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 699.897657][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 699.917260][T13672] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.924413][T13672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.965310][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 699.992101][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 701.590100][T15044] loop1: detected capacity change from 0 to 512 [ 701.598659][T15044] EXT4-fs: Ignoring removed i_version option [ 701.605174][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 701.640250][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 701.657829][T15044] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 701.681313][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 701.691759][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 701.700148][T15044] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 701.731457][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 701.749306][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 701.759590][T15044] EXT4-fs (loop1): orphan cleanup on readonly fs [ 701.781511][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 701.790249][T15044] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 701.811791][T15044] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 701.826895][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 701.856882][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 701.926462][T14818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 701.938548][T15044] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 701.981943][T15044] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 702.060462][T15044] EXT4-fs (loop1): 1 truncate cleaned up [ 702.080261][T15044] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 702.807593][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 702.860666][ T4355] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 703.066353][ T4355] usb 1-1: Using ep0 maxpacket: 32 [ 703.077803][ T4355] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 703.100952][ T4355] usb 1-1: config 0 has no interface number 0 [ 703.113780][ T4355] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 703.134305][ T4355] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 703.149573][ T4355] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 703.159880][ T4355] usb 1-1: config 0 interface 196 has no altsetting 0 [ 703.169843][ T4355] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 703.190107][ T4355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.207183][ T4355] usb 1-1: Product: syz [ 703.211738][ T4355] usb 1-1: Manufacturer: syz [ 703.221376][ T4355] usb 1-1: SerialNumber: syz [ 703.241321][ T4355] usb 1-1: config 0 descriptor?? [ 703.251344][T15067] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 703.310717][ T3787] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 703.477411][ T4355] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 703.491680][ T4355] ipheth: probe of 1-1:0.196 failed with error -71 [ 703.501100][ T3787] usb 2-1: Using ep0 maxpacket: 16 [ 703.515581][ T3787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.537078][ T4355] usb 1-1: USB disconnect, device number 110 [ 703.550330][ T3787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.566716][ T3787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 703.579901][ T3787] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 703.589476][ T3787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.609725][ T3787] usb 2-1: config 0 descriptor?? [ 704.028483][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.052367][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.317926][ T3787] usbhid 2-1:0.0: can't add hid device: -71 [ 704.340926][ T3787] usbhid: probe of 2-1:0.0 failed with error -71 [ 704.352728][ T3787] usb 2-1: USB disconnect, device number 102 [ 704.490274][T15093] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2939'. [ 705.760079][T15107] device syzkaller0 entered promiscuous mode [ 706.328777][T15136] xt_hashlimit: size too large, truncated to 1048576 [ 706.867078][T15150] random: crng reseeded on system resumption [ 709.519405][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.527137][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 710.090640][ T127] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 710.304234][ T127] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 710.318234][ T127] usb 3-1: config 0 has no interface number 0 [ 710.324489][ T127] usb 3-1: config 0 interface 41 has no altsetting 0 [ 710.364161][ T127] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 710.373340][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.381691][ T127] usb 3-1: Product: syz [ 710.385871][ T127] usb 3-1: Manufacturer: syz [ 710.390482][ T127] usb 3-1: SerialNumber: syz [ 710.421095][ T127] usb 3-1: config 0 descriptor?? [ 710.780333][T15191] kvm: pic: non byte write [ 711.245911][ T127] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 711.679931][T15202] KVM: debugfs: duplicate directory 15202-5 [ 712.288602][T14818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.310124][T15213] device syzkaller0 entered promiscuous mode [ 712.493120][T15218] xt_hashlimit: size too large, truncated to 1048576 [ 712.559413][T15220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2967'. [ 712.736069][ T127] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 712.759297][ T127] CoreChips: probe of 3-1:0.41 failed with error -71 [ 712.802927][ T127] usb 3-1: USB disconnect, device number 76 [ 712.976255][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 712.992989][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 713.029091][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 713.042810][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 713.063909][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 713.084147][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 713.104841][T14818] device veth0_vlan entered promiscuous mode [ 713.128907][T14818] device veth1_vlan entered promiscuous mode [ 713.174681][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 713.186525][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 713.198519][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 713.214357][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 713.228514][T14818] device veth0_macvtap entered promiscuous mode [ 713.262212][T14818] device veth1_macvtap entered promiscuous mode [ 713.295456][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 713.309306][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 713.345909][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.376608][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.389641][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.400664][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.411479][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.423039][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.443377][T14818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.464827][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 713.482234][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 713.491985][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.503170][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.513957][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.529071][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.539436][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.555634][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.567578][T14818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.581752][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 713.590426][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 713.603351][T14818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.612860][T14818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.622348][T14818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.631536][T14818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.711704][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.719547][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.741682][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 713.761160][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.769012][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.794959][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 714.120710][ T4320] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 714.310758][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 714.318085][ T4320] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.334663][ T4320] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 714.347970][ T4320] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 714.361846][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.370092][ T4320] usb 5-1: Product: syz [ 714.377796][ T4320] usb 5-1: Manufacturer: syz [ 714.385117][ T4320] usb 5-1: SerialNumber: syz [ 714.629113][ T4320] usb 5-1: 0:2 : does not exist [ 714.640005][ T4320] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 714.741120][ T4320] usb 5-1: USB disconnect, device number 85 [ 714.983547][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.119785][T15252] kvm: pic: non byte write [ 715.394836][T15255] netlink: 'syz.4.2973': attribute type 72 has an invalid length. [ 715.415374][T14641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 715.426991][T14641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 715.435245][T14641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 715.444309][T14641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 715.451875][T14641] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 715.459152][T14641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 715.650648][ T5759] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 715.845389][ T5759] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 715.869868][ T5759] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 715.956322][ T5759] usb 3-1: config 0 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 716.023963][T15266] device syzkaller0 entered promiscuous mode [ 716.035863][ T5759] usb 3-1: config 0 interface 0 has no altsetting 0 [ 716.050638][ T5759] usb 3-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 716.080929][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.110893][ T5759] usb 3-1: config 0 descriptor?? [ 716.112835][T15259] chnl_net:caif_netlink_parms(): no params data found [ 716.120749][T15257] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 716.379857][T15275] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 716.558794][ T5759] wacom 0003:056A:0304.0033: unknown main item tag 0x0 [ 716.563527][T15259] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.615738][ T5759] wacom 0003:056A:0304.0033: unknown main item tag 0x0 [ 716.648456][T15259] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.656276][ T5759] wacom 0003:056A:0304.0033: unknown main item tag 0x0 [ 716.697906][ T5759] wacom 0003:056A:0304.0033: unknown main item tag 0x0 [ 716.706298][T15259] device bridge_slave_0 entered promiscuous mode [ 716.735999][ T5759] wacom 0003:056A:0304.0033: unknown main item tag 0x0 [ 716.763118][ T5759] wacom 0003:056A:0304.0033: unknown main item tag 0x0 [ 716.770014][ T5759] wacom 0003:056A:0304.0033: unknown main item tag 0x0 [ 716.817163][ T5759] wacom 0003:056A:0304.0033: hidraw0: USB HID v0.0a Device [HID 056a:0304] on usb-dummy_hcd.2-1/input0 [ 716.887000][ T5759] usb 3-1: USB disconnect, device number 77 [ 717.002113][T15259] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.009252][T15259] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.037676][T15259] device bridge_slave_1 entered promiscuous mode [ 717.138700][T15259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.159088][T15290] fido_id[15290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 717.218275][T15259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.386427][T15259] team0: Port device team_slave_0 added [ 717.413671][T15259] team0: Port device team_slave_1 added [ 717.528997][T15259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.541258][T14641] Bluetooth: hci0: command 0x0409 tx timeout [ 717.550527][T15259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.578939][T15259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.616617][T15259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.647958][T15259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.743606][T15259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.806167][T15308] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2984'. [ 717.882638][T15259] device hsr_slave_0 entered promiscuous mode [ 717.889616][T15259] device hsr_slave_1 entered promiscuous mode [ 717.918285][T15259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.928384][T15259] Cannot create hsr debugfs directory [ 718.040942][ T4762] IPVS: stopping master sync thread 6751 ... [ 719.622063][T14641] Bluetooth: hci0: command 0x041b tx timeout [ 720.566815][T15361] KVM: debugfs: duplicate directory 15361-5 [ 720.958446][ T4762] device hsr_slave_0 left promiscuous mode [ 721.008145][ T4762] device hsr_slave_1 left promiscuous mode [ 721.046845][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.073485][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.118586][ T4762] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 721.177234][ T4762] device bridge_slave_1 left promiscuous mode [ 721.189384][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.300367][T15378] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2995'. [ 721.429864][T15382] Disabled LAPIC found during irq injection [ 721.711110][T14641] Bluetooth: hci0: command 0x040f tx timeout [ 722.115746][ T4762] team0 (unregistering): Port device team_slave_1 removed [ 722.230376][ T4762] team0 (unregistering): Port device team_slave_0 removed [ 722.308374][ T4762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.391514][ T4762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.871563][ T4762] team0 (unregistering): Port device bridge0 removed [ 722.907239][ T4762] bond0 (unregistering): Released all slaves [ 723.329951][T15426] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 723.372234][T15419] device syzkaller0 entered promiscuous mode [ 723.781285][T14641] Bluetooth: hci0: command 0x0419 tx timeout [ 724.037826][T15259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 724.061862][T15454] loop4: detected capacity change from 0 to 512 [ 724.072729][T15259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 724.091131][T15454] EXT4-fs: Ignoring removed i_version option [ 724.110411][T15259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 724.129781][T15454] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 724.162188][T15259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 724.179551][T15454] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 724.257335][T15454] EXT4-fs (loop4): orphan cleanup on readonly fs [ 724.316338][T15454] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 724.341522][T15454] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 724.356496][T15454] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 724.364363][T15454] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 724.381530][T15454] EXT4-fs (loop4): 1 truncate cleaned up [ 724.387203][T15454] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 724.482929][T15463] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3018'. [ 724.502944][T15259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.538800][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 724.557595][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 724.587540][T15259] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.609989][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 724.673096][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 724.691736][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.698884][ T4762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.072702][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 725.103818][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 725.133289][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 725.193714][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.200876][ T4762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.260978][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 725.286230][T14818] EXT4-fs (loop4): unmounting filesystem. [ 725.303212][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 725.338264][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 725.388321][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 725.430509][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 725.448348][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 725.479495][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 725.496280][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 725.512617][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 725.540078][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 725.550824][T15259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 726.293199][T15495] netlink: 'syz.2.3026': attribute type 4 has an invalid length. [ 726.343115][T15498] netlink: 'syz.2.3026': attribute type 4 has an invalid length. [ 726.360873][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 726.405335][T15494] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 726.414889][T15494] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 726.420934][ T27] audit: type=1800 audit(1781414672.807:3): pid=15494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3027" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 726.424571][T15494] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 726.543639][T15494] syz.4.3027 (15494) used greatest stack depth: 17232 bytes left [ 727.017324][T15531] loop3: detected capacity change from 0 to 512 [ 727.056233][T15531] EXT4-fs: Ignoring removed i_version option [ 727.116085][T15531] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 727.135236][T15531] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 727.145343][T15533] random: crng reseeded on system resumption [ 727.198865][T15531] EXT4-fs (loop3): orphan cleanup on readonly fs [ 727.227309][T15531] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 727.268909][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 727.277186][T15531] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 727.309465][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 727.344783][T15259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.387065][T15531] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 727.404365][T15540] binder: 15539:15540 ioctl 4018620d 0 returned -22 [ 727.411719][T15531] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 727.473937][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 727.491242][T15531] EXT4-fs (loop3): 1 truncate cleaned up [ 727.493957][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 727.496927][T15531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 727.531813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 727.541201][T15543] binder: 15539:15543 ioctl c0306201 0 returned -14 [ 727.560462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 727.592580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 727.600195][T15543] binder: 15539:15543 ioctl c0306201 0 returned -14 [ 727.617772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 727.648169][T15259] device veth0_vlan entered promiscuous mode [ 727.676424][T15259] device veth1_vlan entered promiscuous mode [ 727.922593][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 728.017746][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 728.026845][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 728.027519][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 728.035989][T15259] device veth0_macvtap entered promiscuous mode [ 728.039883][T15259] device veth1_macvtap entered promiscuous mode [ 728.205001][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.215521][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.226523][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.237909][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.253752][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 728.284546][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.329042][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.352104][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.370460][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.393064][T15259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.411342][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 728.452286][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 728.482040][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 728.498226][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 728.509889][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.520829][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.546808][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.613548][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.634725][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.653555][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.664088][T15259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.676100][T15259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.716567][T15259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.749444][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 728.766747][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 728.815841][T15259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.846925][T15259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.868148][T15259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.887072][T15259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.188782][T15597] loop4: detected capacity change from 0 to 512 [ 729.214255][T15597] EXT4-fs: Ignoring removed i_version option [ 729.229854][T15597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 729.267171][T15597] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 729.314308][T15597] EXT4-fs (loop4): orphan cleanup on readonly fs [ 729.333538][T13674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.350948][T13674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.362730][T15597] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 729.432643][T15597] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 729.458116][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 729.534954][T15597] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 729.578104][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.578954][T15597] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 729.594696][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.618420][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 729.624290][T15597] EXT4-fs (loop4): 1 truncate cleaned up [ 729.660161][T15597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 729.777668][T15616] input: syz1 as /devices/virtual/input/input58 [ 729.937930][ T26] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 730.101301][ T4320] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 730.136473][ T26] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 730.136500][ T26] usb 3-1: config 0 has no interface number 0 [ 730.136532][ T26] usb 3-1: config 0 interface 41 has no altsetting 0 [ 730.138515][ T26] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 730.258275][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.293676][ T26] usb 3-1: Product: syz [ 730.297875][ T26] usb 3-1: Manufacturer: syz [ 730.302792][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 730.311948][ T4320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.335062][ T26] usb 3-1: SerialNumber: syz [ 730.345175][ T4320] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 730.368511][ T26] usb 3-1: config 0 descriptor?? [ 730.384205][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.432145][ T4320] usb 1-1: config 0 descriptor?? [ 730.476409][T14818] EXT4-fs (loop4): unmounting filesystem. [ 730.683151][ T4275] device syz_tun left promiscuous mode [ 730.688712][ T4275] bridge0: port 3(syz_tun) entered disabled state [ 730.865580][ T4320] steelseries_srws1 0003:1038:1410.0034: ignoring exceeding usage max [ 730.868590][ T4707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.882758][ T4320] steelseries_srws1 0003:1038:1410.0034: unknown main item tag 0xd [ 730.903186][ T4320] steelseries_srws1 0003:1038:1410.0034: unknown main item tag 0x2 [ 730.920736][ T4320] steelseries_srws1 0003:1038:1410.0034: item fetching failed at offset 39/40 [ 730.963996][T14641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 730.979225][ T4320] steelseries_srws1 0003:1038:1410.0034: parse failed [ 730.986867][T14641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 730.995698][ T4320] steelseries_srws1: probe of 0003:1038:1410.0034 failed with error -22 [ 731.004185][T14641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 731.016094][T14641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 731.023884][T14641] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 731.032508][T14641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 731.077857][ T4707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.080711][ T5759] usb 1-1: USB disconnect, device number 111 [ 731.215209][ T26] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 731.262962][ T4707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.460793][ T4707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.794571][T15639] chnl_net:caif_netlink_parms(): no params data found [ 732.040792][ T127] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 732.053114][T15639] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.060415][T15639] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.068987][T15639] device bridge_slave_0 entered promiscuous mode [ 732.078521][T15639] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.085991][T15639] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.094488][T15639] device bridge_slave_1 entered promiscuous mode [ 732.119140][ T4707] tipc: Left network mode [ 732.142656][T15639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.172873][T15639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.230823][ T127] usb 1-1: Using ep0 maxpacket: 16 [ 732.244725][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.275683][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.294256][T15639] team0: Port device team_slave_0 added [ 732.313192][ T127] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 732.314330][T15639] team0: Port device team_slave_1 added [ 732.340734][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.360700][ T3787] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 732.388960][ T127] usb 1-1: config 0 descriptor?? [ 732.420463][T15639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.425806][T15685] input: syz1 as /devices/virtual/input/input59 [ 732.442557][T15639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.488883][T15639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.506826][ T26] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 732.519908][ T26] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 732.532735][ T26] CoreChips: probe of 3-1:0.41 failed with error -71 [ 732.548895][ T26] usb 3-1: USB disconnect, device number 78 [ 732.560788][ T3787] usb 2-1: Using ep0 maxpacket: 32 [ 732.568728][ T3787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.580486][T15639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.587588][ T3787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.589675][T15639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.597883][ T3787] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 732.636876][T15639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.640525][ T3787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.670477][ T3787] usb 2-1: config 0 descriptor?? [ 732.678848][ T3787] hub 2-1:0.0: USB hub found [ 732.718123][T15639] device hsr_slave_0 entered promiscuous mode [ 732.725211][T15639] device hsr_slave_1 entered promiscuous mode [ 732.733276][T15639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.742267][T15639] Cannot create hsr debugfs directory [ 732.850204][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.859104][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.867442][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.875343][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.893940][ T3787] hub 2-1:0.0: 1 port detected [ 732.910651][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.918574][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.933845][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.945929][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.955425][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.967477][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.976961][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.988974][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 732.998717][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.015438][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.025316][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.039136][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.060725][T14641] Bluetooth: hci2: command 0x0409 tx timeout [ 733.068662][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.095189][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.125364][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.149642][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.173122][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.190356][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.199941][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.216157][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.225798][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.247448][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.258185][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.268990][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.276158][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.283636][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.290741][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.297682][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.305297][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.319055][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.330931][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.339952][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.348518][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.356486][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.369573][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.376720][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.389864][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.397005][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.407092][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.414148][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.421278][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.428137][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.435053][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.441958][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.449495][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.456461][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.463418][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.470255][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.477139][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.484070][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.490996][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.497860][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.504922][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.511924][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.518865][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.525871][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.532917][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.539774][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.548155][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.555102][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.568228][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.575832][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.596310][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.608878][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.616185][ T127] apple 0003:05AC:024B.0035: unknown main item tag 0x0 [ 733.625811][ T127] apple 0003:05AC:024B.0035: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 733.653584][ T127] usb 1-1: USB disconnect, device number 112 [ 733.730049][ T4321] hub 2-1:0.0: activate --> -90 [ 733.905524][T15704] fido_id[15704]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 733.921926][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3074'. [ 734.089004][T13737] usb 2-1: USB disconnect, device number 103 [ 734.718401][ T4707] device hsr_slave_0 left promiscuous mode [ 734.751926][ T4707] device hsr_slave_1 left promiscuous mode [ 734.775804][ T4707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.796335][ T4707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.819092][ T4707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.834511][ T4707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.844623][ T4707] device bridge_slave_1 left promiscuous mode [ 734.877602][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.936797][ T4707] device veth1_macvtap left promiscuous mode [ 734.946527][ T4707] device veth0_macvtap left promiscuous mode [ 734.966617][ T4707] device veth1_vlan left promiscuous mode [ 734.980008][ T4707] device veth0_vlan left promiscuous mode [ 735.150736][T14641] Bluetooth: hci2: command 0x041b tx timeout [ 735.906361][ T4707] team0 (unregistering): Port device team_slave_1 removed [ 735.961313][ T4707] team0 (unregistering): Port device team_slave_0 removed [ 735.999727][ T4707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.040153][ T4707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.278364][ T4707] team0 (unregistering): Port device bridge0 removed [ 736.298486][ T4707] bond0 (unregistering): Released all slaves [ 736.527129][T15639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 736.548587][T15639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 736.585547][T15639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 736.623473][T15639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 736.864150][T15639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.921732][T13676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 736.945429][T13676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 736.972529][T15639] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.004650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 737.029932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 737.051938][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.059067][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.101762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 737.112209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 737.157580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 737.167104][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.174245][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.203019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 737.216445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 737.224525][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 737.254471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 737.290806][ T4321] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 737.294661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 737.337185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 737.360259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 737.406108][T15639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 737.420168][T15639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 737.474807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 737.482282][ T4321] usb 2-1: Using ep0 maxpacket: 8 [ 737.488885][ T4321] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7 [ 737.501661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 737.510102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 737.544102][ T4321] usb 2-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 737.561588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 737.569546][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.578397][T15796] input input60: cannot allocate more than FF_MAX_EFFECTS effects [ 737.599138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 737.609116][ T4321] usb 2-1: Product: syz [ 737.617223][ T4321] usb 2-1: Manufacturer: syz [ 737.627047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 737.634671][ T4321] usb 2-1: SerialNumber: syz [ 737.852931][T15805] device syzkaller0 entered promiscuous mode [ 737.866689][ T4321] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 737.894383][ T4321] usb 2-1: unit 2 not found! [ 737.959882][ T4321] usb 2-1: USB disconnect, device number 104 [ 738.049713][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3094'. [ 738.236276][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.434776][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 738.447529][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 738.495124][T15639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.574045][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 738.582523][ T4321] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 738.592745][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 738.616135][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 738.625784][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 738.658963][T15639] device veth0_vlan entered promiscuous mode [ 738.697080][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 738.714761][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 738.746262][T15639] device veth1_vlan entered promiscuous mode [ 738.772702][ T4321] usb 3-1: Using ep0 maxpacket: 16 [ 738.787923][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.798626][T15639] device veth0_macvtap entered promiscuous mode [ 738.818505][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.826785][T15639] device veth1_macvtap entered promiscuous mode [ 738.852612][ T4321] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 738.861999][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 738.875172][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 738.898902][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.909025][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 738.933123][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 738.941559][ T4321] usb 3-1: config 0 descriptor?? [ 738.962699][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 739.011453][T15639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.040626][T15639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.050462][T15639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.080618][T15639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.095727][T15639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.115642][T15639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.160638][T15639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.195459][T15639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.229628][T15639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.243107][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 739.257184][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 739.266720][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 739.284980][T15639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.301041][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 739.307769][T15639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.318060][T15639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.329380][T15639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.339321][T15639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.353770][T15639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.357360][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.363959][T15639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.371191][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.386943][T15639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.389066][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.400481][T15639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.405219][ T4355] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 739.424219][T15639] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.433290][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.435985][T15639] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.440300][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.453699][T15639] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.459039][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.471018][T15639] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.472322][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.489006][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 739.489393][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.498857][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 739.504160][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.519140][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.526132][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.534384][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.541879][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.548907][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.556076][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.563318][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.570195][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.589319][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.596578][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.601809][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.604105][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.620716][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.628628][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.631657][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 739.637963][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.653064][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.660238][ T4355] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 739.668897][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.676090][ T4355] usb 2-1: config 0 has no interface number 0 [ 739.677687][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.682513][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.697321][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.698863][ T4355] usb 2-1: config 0 interface 41 has no altsetting 0 [ 739.706017][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 739.712293][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.731595][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.738673][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.750170][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.757928][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.765420][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.772733][ T4355] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 739.782237][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.789792][ T4355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.798890][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.806118][ T4355] usb 2-1: Product: syz [ 739.810374][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.817582][ T4355] usb 2-1: Manufacturer: syz [ 739.822474][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.829467][ T4355] usb 2-1: SerialNumber: syz [ 739.836338][ T4355] usb 2-1: config 0 descriptor?? [ 739.841636][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.848709][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.855972][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.882702][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.891219][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.899131][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.906394][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.913997][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.921200][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.928135][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.935399][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.957252][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.964387][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.971659][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.978566][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.990363][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 739.998550][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.005645][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.012754][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.019646][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.027110][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.034353][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.045977][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.053152][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.060055][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.068456][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.075413][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.082407][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.089269][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.116427][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.123384][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.148110][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.155689][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.166718][ T4321] apple 0003:05AC:024B.0036: unknown main item tag 0x0 [ 740.177551][ T4321] apple 0003:05AC:024B.0036: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.2-1/input0 [ 740.200428][ T4321] usb 3-1: USB disconnect, device number 79 [ 740.306616][T15854] fido_id[15854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 740.569416][T15859] device syzkaller0 entered promiscuous mode [ 740.581490][ T4321] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 740.680462][ T4355] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 740.744677][T15861] kvm: pic: single mode not supported [ 740.744756][T15861] kvm: pic: single mode not supported [ 740.750492][T15861] kvm: pic: single mode not supported [ 740.756411][T15861] kvm: pic: single mode not supported [ 740.762078][T15861] kvm: pic: single mode not supported [ 740.767576][T15861] kvm: pic: single mode not supported [ 740.773132][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 740.783753][T15861] kvm: pic: single mode not supported [ 740.783839][T15861] kvm: pic: single mode not supported [ 740.791620][ T4321] usb 3-1: no configurations [ 740.796259][T15861] kvm: pic: single mode not supported [ 740.797261][ T4321] usb 3-1: can't read configurations, error -22 [ 740.813624][T15861] kvm: pic: single mode not supported [ 740.815365][T15861] kvm: pic: level sensitive irq not supported [ 740.821903][T15861] kvm: pic: level sensitive irq not supported [ 740.828291][T15861] kvm: pic: level sensitive irq not supported [ 740.835408][T15861] kvm: pic: level sensitive irq not supported [ 740.842409][T15861] kvm: pic: level sensitive irq not supported [ 740.980738][ T4321] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 741.175452][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 741.181402][ T4321] usb 3-1: no configurations [ 741.186018][ T4321] usb 3-1: can't read configurations, error -22 [ 741.206452][ T4321] usb usb3-port1: attempt power cycle [ 741.620957][ T4321] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 741.641271][ T4320] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 741.661188][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 741.666726][ T4321] usb 3-1: no configurations [ 741.671635][ T4321] usb 3-1: can't read configurations, error -22 [ 741.800710][ T26] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 741.820734][ T4321] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 741.830817][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 741.843128][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.858549][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.869258][ T4320] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 741.870849][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 741.878612][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.900023][ T4320] usb 4-1: config 0 descriptor?? [ 741.903490][ T4321] usb 3-1: no configurations [ 741.910253][ T4321] usb 3-1: can't read configurations, error -22 [ 741.917002][ T4321] usb usb3-port1: unable to enumerate USB device [ 741.935231][T15886] device syzkaller0 entered promiscuous mode [ 741.965926][ T4355] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 741.977170][ T4355] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 741.988915][ T4355] CoreChips: probe of 2-1:0.41 failed with error -71 [ 742.000076][ T4355] usb 2-1: USB disconnect, device number 105 [ 742.010969][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 742.017847][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 742.034998][ T26] usb 1-1: config 127 has an invalid interface number: 189 but max is 0 [ 742.046862][ T26] usb 1-1: config 127 has no interface number 0 [ 742.053569][ T26] usb 1-1: config 127 interface 189 has no altsetting 0 [ 742.072675][ T26] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=7c.4e [ 742.086867][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.095290][ T26] usb 1-1: Product: syz [ 742.099493][ T26] usb 1-1: Manufacturer: syz [ 742.109594][ T26] usb 1-1: SerialNumber: syz [ 742.112391][T15888] ======================================================= [ 742.112391][T15888] WARNING: The mand mount option has been deprecated and [ 742.112391][T15888] and is ignored by this kernel. Remove the mand [ 742.112391][T15888] option from the mount to silence this warning. [ 742.112391][T15888] ======================================================= [ 742.160747][T15888] overlayfs: unrecognized mount option "verity=on" or missing value [ 742.319931][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.327370][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.334613][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.341697][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.349028][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.356659][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.364895][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.372381][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.379397][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.388906][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.396967][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.420797][ T26] usb 1-1: USB disconnect, device number 113 [ 742.433038][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.440426][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.448046][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.456620][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.464485][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.502245][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.509156][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.524957][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.532620][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.539697][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.564476][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.582191][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.589077][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.617312][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.653726][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.673967][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.690234][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.708985][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.719158][ T8545] udevd[8545]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:127.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 742.737507][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.754992][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.782849][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.793933][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.804684][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.814381][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.824997][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.834699][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.844985][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.856128][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.867272][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.880443][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.887671][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.901548][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.908793][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.963607][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.978746][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 742.996832][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.007386][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.024428][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.036814][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.046248][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.054379][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.091080][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.111771][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.132346][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.161333][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.168598][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.191941][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.199261][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.219911][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.239718][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.248553][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.270048][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.278516][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.289917][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.313569][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 743.325518][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 743.331462][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.341302][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 743.342347][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.360160][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 743.361104][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.374657][ T4320] apple 0003:05AC:024B.0037: unknown main item tag 0x0 [ 743.383166][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 743.390774][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 743.396127][ T4320] apple 0003:05AC:024B.0037: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.3-1/input0 [ 743.433070][ T4320] usb 4-1: USB disconnect, device number 86 [ 743.455253][T13672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.468052][T13672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.609522][T13672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.630460][T13672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.633470][T15912] fido_id[15912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 743.726291][T13672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.738026][T13672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.751251][T15917] device syzkaller0 entered promiscuous mode [ 743.906000][T13672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.916545][T13672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.230679][T13672] tipc: Disabling bearer [ 744.238337][T13672] tipc: Left network mode [ 744.256527][T15906] chnl_net:caif_netlink_parms(): no params data found [ 744.280788][ T26] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 744.488812][ T26] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 744.500855][ T26] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.511612][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 744.518282][ T26] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 744.527784][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.542710][ T26] usb 3-1: config 0 descriptor?? [ 744.588886][T15906] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.597139][T15906] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.606131][T15906] device bridge_slave_0 entered promiscuous mode [ 744.636067][T15906] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.643414][T15906] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.651866][T15906] device bridge_slave_1 entered promiscuous mode [ 744.709045][T15906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.723596][T15906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.762385][T15906] team0: Port device team_slave_0 added [ 744.784812][T15906] team0: Port device team_slave_1 added [ 744.817110][T15906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.841075][T15906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.890717][T15906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.964066][ T26] hid-steam 0003:28DE:1102.0038: item fetching failed at offset 2/5 [ 744.980452][ T26] hid-steam 0003:28DE:1102.0038: steam_probe:parse of hid interface failed [ 744.999601][ T26] hid-steam: probe of 0003:28DE:1102.0038 failed with error -22 [ 745.046991][T15906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.063346][T15906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.093930][T15906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.175899][ T4320] usb 3-1: USB disconnect, device number 84 [ 745.216821][T15906] device hsr_slave_0 entered promiscuous mode [ 745.233821][T15906] device hsr_slave_1 entered promiscuous mode [ 745.245491][T15906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.257928][T15906] Cannot create hsr debugfs directory [ 745.467372][T14641] Bluetooth: hci1: command 0x0409 tx timeout [ 745.858955][T13672] device hsr_slave_0 left promiscuous mode [ 745.889493][T13672] device hsr_slave_1 left promiscuous mode [ 745.900697][ T22] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 745.910166][T13672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.931453][T13672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.942945][T13672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.951033][T13672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.962422][T13672] device bridge_slave_1 left promiscuous mode [ 745.968644][T13672] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.032356][T13672] device veth1_macvtap left promiscuous mode [ 746.038755][T13672] device veth0_macvtap left promiscuous mode [ 746.065970][T13672] device veth1_vlan left promiscuous mode [ 746.072181][T13672] device veth0_vlan left promiscuous mode [ 746.100737][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 746.107568][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.134752][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.180641][ T22] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 746.199923][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.241012][ T22] usb 4-1: config 0 descriptor?? [ 746.654364][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.670668][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.677570][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.703293][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.710194][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.763956][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.781093][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.787993][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.814059][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.822866][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.829804][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.840104][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.870653][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.877605][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.900623][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.907561][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.915177][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.934504][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.944437][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.952586][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.959539][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.966899][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.973917][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.981098][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 746.988183][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.994567][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.002547][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.009420][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.016384][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.023351][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.030208][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.037122][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.044033][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.051005][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.057883][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.065697][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.072636][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.079495][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.086419][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.093344][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.100199][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.107073][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.113970][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.121226][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.128087][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.135101][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.142253][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.149117][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.155999][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.162872][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.170128][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.177036][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.183927][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.190843][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.197715][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.204695][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.211650][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.218537][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.225450][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.232358][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.239213][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.246096][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.252993][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.259850][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.266751][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.274006][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.280939][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.287795][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.294729][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.301638][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.308492][ T22] apple 0003:05AC:024B.0039: unknown main item tag 0x0 [ 747.317147][ T22] apple 0003:05AC:024B.0039: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.3-1/input0 [ 747.332185][ T22] usb 4-1: USB disconnect, device number 87 [ 747.427159][T16000] fido_id[16000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 747.538829][T13672] team0 (unregistering): Port device virt_wifi0 removed [ 747.554743][T14641] Bluetooth: hci1: command 0x041b tx timeout [ 747.720920][T13672] team0 (unregistering): Port device team_slave_1 removed [ 747.755512][T13672] team0 (unregistering): Port device team_slave_0 removed [ 747.789830][T13672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.826909][T13672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.861940][ T22] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 748.053838][T13672] bond0 (unregistering): Released all slaves [ 748.062444][ T22] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 748.073664][ T22] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 748.084738][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 748.091787][ T22] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 748.100990][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.116208][ T22] usb 4-1: config 0 descriptor?? [ 748.121890][T16002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 748.539155][ T22] uclogic 0003:2179:0053.003A: interface is invalid, ignoring [ 748.741017][ T3787] usb 4-1: USB disconnect, device number 88 [ 748.756648][T15906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 748.832685][T15906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 748.849433][T15906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 748.874823][T15906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 749.097512][T15906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.119573][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 749.130143][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 749.147941][T15906] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.175854][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 749.190474][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 749.212339][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.219461][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.253118][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 749.263466][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 749.281326][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 749.289985][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.297134][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.353815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 749.415594][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 749.441483][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 749.459819][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 749.488292][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 749.499102][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 749.520173][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 749.536539][T16038] device syzkaller0 entered promiscuous mode [ 749.567904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 749.576636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 749.588119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 749.596879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 749.630982][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 749.649731][T15906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 749.882754][T16053] loop6: detected capacity change from 0 to 8 [ 749.972995][T16053] loop6: detected capacity change from 8 to 0 [ 750.223819][ T22] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 750.289756][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 750.298696][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 750.313961][T15906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.349104][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 750.364507][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 750.393350][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 750.405760][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 750.417777][ T22] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 750.435616][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 750.450025][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.458786][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 750.485029][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.510581][T15906] device veth0_vlan entered promiscuous mode [ 750.520654][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 750.549768][T15906] device veth1_vlan entered promiscuous mode [ 750.597477][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 750.619279][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 750.619568][ T22] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 750.649917][ T22] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 750.650019][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 750.675146][ T22] usb 5-1: Manufacturer: syz [ 750.705908][ T22] usb 5-1: config 0 descriptor?? [ 750.714191][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 750.741396][T15906] device veth0_macvtap entered promiscuous mode [ 750.779163][T15906] device veth1_macvtap entered promiscuous mode [ 750.856144][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.887620][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.917604][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.957267][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.028273][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.057082][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.084684][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.129520][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.158795][T15906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.169999][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 751.193271][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 751.211929][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 751.222324][ T22] appleir 0003:05AC:8243.003B: unknown main item tag 0x0 [ 751.229874][ T22] appleir 0003:05AC:8243.003B: No inputs registered, leaving [ 751.242939][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 751.253676][ T22] appleir 0003:05AC:8243.003B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 751.269880][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.294557][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.340767][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.360055][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.375579][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.400233][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.421229][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.439770][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.467064][T15906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.508088][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 751.511757][ T4318] usb 5-1: USB disconnect, device number 86 [ 751.523620][T13672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 751.537761][T15906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.557013][T15906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.569568][T15906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.607946][T15906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.700762][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 751.795130][T16095] page:ffffea0001c64b00 refcount:4 mapcount:1 mapping:ffff888029461008 index:0x0 pfn:0x7192c [ 751.805958][T16095] memcg:ffff88807ae5c000 [ 751.810217][T16095] aops:shmem_aops ino:110 [ 751.814647][T16095] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 751.824480][T16095] raw: 00fff60000080015 ffff88807ae5a248 ffffea0001209088 ffff888029461008 [ 751.833070][T16095] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88807ae5c000 [ 751.841659][T16095] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 751.848952][T16095] page_owner tracks the page as allocated [ 751.855355][T16095] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 16096, tgid 16095 (syz.3.3159), ts 751785628436, free_ts 751766698140 [ 751.873254][T16095] post_alloc_hook+0x173/0x1a0 [ 751.878117][T16095] get_page_from_freelist+0x1a1e/0x1ab0 [ 751.883680][T16095] __alloc_pages+0x1ec/0x4f0 [ 751.888288][T16095] __folio_alloc+0xe/0x30 [ 751.892636][T16095] vma_alloc_folio+0x4a3/0x900 [ 751.897480][T16095] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 751.903265][T16095] shmem_get_folio_gfp+0x1361/0x3400 [ 751.908559][T16095] shmem_read_mapping_page_gfp+0x99/0x2b0 [ 751.914294][T16095] udmabuf_create+0x99b/0xfc0 [ 751.919050][T16095] udmabuf_ioctl+0x1f3/0x300 [ 751.923672][T16095] __se_sys_ioctl+0xfa/0x170 [ 751.928303][T16095] do_syscall_64+0x4c/0xa0 [ 751.932749][T16095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.938745][T16095] page last free stack trace: [ 751.943424][T16095] free_unref_page_prepare+0x8b4/0x9a0 [ 751.948900][T16095] free_unref_page_list+0xbb/0x8e0 [ 751.951402][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.954013][T16095] release_pages+0x1fa6/0x2220 [ 751.966846][T16095] tlb_flush_mmu+0x105/0x220 [ 751.971511][T16095] tlb_finish_mmu+0xf5/0x220 [ 751.972446][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.976104][T16095] exit_mmap+0x384/0x960 [ 751.976128][T16095] __mmput+0x118/0x3c0 [ 751.991708][T16095] exit_mm+0x25a/0x360 [ 751.995794][T16095] do_exit+0x905/0x2480 [ 751.999968][T16095] do_group_exit+0x217/0x2d0 [ 752.004573][T16095] __x64_sys_exit_group+0x3b/0x40 [ 752.007324][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.009601][T16095] do_syscall_64+0x4c/0xa0 [ 752.009621][T16095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.027829][T16095] ------------[ cut here ]------------ [ 752.033291][T16095] kernel BUG at mm/filemap.c:153! [ 752.038345][T16095] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 752.044424][T16095] CPU: 0 PID: 16095 Comm: syz.3.3159 Not tainted syzkaller #0 [ 752.048426][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.051910][T16095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 752.051921][T16095] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 752.052007][T16095] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 0a f9 27 00 e9 0c fe ff ff e8 80 f1 d6 ff 48 89 df 48 c7 c6 40 00 95 8a e8 f1 0c 12 00 <0f> 0b e8 6a f1 d6 ff 48 89 df 48 c7 c6 a0 05 95 8a e8 db 0c 12 00 [ 752.095157][T16095] RSP: 0018:ffffc90003e37618 EFLAGS: 00010046 [ 752.101218][T16095] RAX: 00c96cd8c35b3800 RBX: ffffea0001c64b00 RCX: 00c96cd8c35b3800 [ 752.109178][T16095] RDX: 0000000000000002 RSI: ffffffff8a8c2c20 RDI: ffffffff8adf2060 [ 752.117134][T16095] RBP: ffffc90003e37778 R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 752.125090][T16095] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: dffffc0000000000 [ 752.133049][T16095] R13: dffffc0000000000 R14: ffff888029461008 R15: 1ffff920007c6ed4 [ 752.141009][T16095] FS: 000055556de08500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 752.149923][T16095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.156506][T16095] CR2: 00007f4a2b54b330 CR3: 0000000027d6b000 CR4: 00000000003506f0 [ 752.164473][T16095] Call Trace: [ 752.167753][T16095] [ 752.170675][T16095] __filemap_remove_folio+0xbc/0x8a0 [ 752.175955][T16095] ? __rwlock_init+0x140/0x140 [ 752.180774][T16095] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 752.187790][T16095] ? _raw_spin_lock_irq+0xb7/0xf0 [ 752.192806][T16095] ? _raw_spin_lock_irqsave+0x100/0x100 [ 752.198341][T16095] filemap_remove_folio+0xed/0x2c0 [ 752.203443][T16095] truncate_inode_folio+0x59/0x70 [ 752.208461][T16095] shmem_undo_range+0x533/0x20c0 [ 752.213391][T16095] ? shmem_truncate_range+0xb0/0xb0 [ 752.218585][T16095] ? do_raw_spin_lock+0x128/0x2f0 [ 752.223597][T16095] ? __rwlock_init+0x140/0x140 [ 752.228345][T16095] shmem_evict_inode+0x25b/0xa80 [ 752.233273][T16095] ? inode_wait_for_writeback+0x1df/0x220 [ 752.239070][T16095] ? shmem_free_in_core_inode+0xb0/0xb0 [ 752.244610][T16095] ? do_raw_spin_lock+0x128/0x2f0 [ 752.249619][T16095] ? bit_waitqueue+0x30/0x30 [ 752.254220][T16095] ? do_raw_spin_unlock+0x11d/0x230 [ 752.259401][T16095] ? shmem_free_in_core_inode+0xb0/0xb0 [ 752.264934][T16095] evict+0x4c9/0x8d0 [ 752.268833][T16095] ? proc_nr_inodes+0x2f0/0x2f0 [ 752.273671][T16095] ? do_raw_spin_unlock+0x11d/0x230 [ 752.278852][T16095] ? _raw_spin_unlock+0x24/0x40 [ 752.283690][T16095] ? iput+0x768/0x980 [ 752.287662][T16095] __dentry_kill+0x431/0x650 [ 752.292243][T16095] dentry_kill+0xb8/0x290 [ 752.296561][T16095] ? dput+0x37/0x1d0 [ 752.300449][T16095] dput+0xfa/0x1d0 [ 752.304160][T16095] __fput+0x5e0/0x920 [ 752.308180][T16095] task_work_run+0x1d0/0x260 [ 752.312810][T16095] ? task_work_cancel+0x220/0x220 [ 752.317821][T16095] ? exit_to_user_mode_loop+0x3b/0x110 [ 752.323317][T16095] exit_to_user_mode_loop+0xe6/0x110 [ 752.328595][T16095] exit_to_user_mode_prepare+0xee/0x180 [ 752.334130][T16095] syscall_exit_to_user_mode+0x16/0x40 [ 752.339587][T16095] do_syscall_64+0x58/0xa0 [ 752.343990][T16095] ? clear_bhb_loop+0x60/0xb0 [ 752.348656][T16095] ? clear_bhb_loop+0x60/0xb0 [ 752.353325][T16095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.359209][T16095] RIP: 0033:0x7f8c52b9ce59 [ 752.363621][T16095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.383224][T16095] RSP: 002b:00007fff2b60ac58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 752.391636][T16095] RAX: 0000000000000000 RBX: 00007fff2b60ad40 RCX: 00007f8c52b9ce59 [ 752.399610][T16095] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 752.407571][T16095] RBP: 00000000000b7875 R08: 0000000000000001 R09: 0000000000000000 [ 752.415532][T16095] R10: 0000001b2c820000 R11: 0000000000000246 R12: 00007fff2b60ad80 [ 752.423500][T16095] R13: 00007f8c52e15fac R14: 00000000000b78ca R15: 00007f8c52e15fa0 [ 752.431467][T16095] [ 752.434482][T16095] Modules linked in: [ 752.438377][T16095] ---[ end trace 0000000000000000 ]--- [ 752.443815][T16095] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 752.450049][T16095] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 0a f9 27 00 e9 0c fe ff ff e8 80 f1 d6 ff 48 89 df 48 c7 c6 40 00 95 8a e8 f1 0c 12 00 <0f> 0b e8 6a f1 d6 ff 48 89 df 48 c7 c6 a0 05 95 8a e8 db 0c 12 00 [ 752.469644][T16095] RSP: 0018:ffffc90003e37618 EFLAGS: 00010046 [ 752.475705][T16095] RAX: 00c96cd8c35b3800 RBX: ffffea0001c64b00 RCX: 00c96cd8c35b3800 [ 752.483664][T16095] RDX: 0000000000000002 RSI: ffffffff8a8c2c20 RDI: ffffffff8adf2060 [ 752.491621][T16095] RBP: ffffc90003e37778 R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 752.499577][T16095] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: dffffc0000000000 [ 752.507537][T16095] R13: dffffc0000000000 R14: ffff888029461008 R15: 1ffff920007c6ed4 [ 752.515495][T16095] FS: 000055556de08500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 752.524411][T16095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.530993][T16095] CR2: 00007f4a2b54b330 CR3: 0000000027d6b000 CR4: 00000000003506f0 [ 752.538969][T16095] Kernel panic - not syncing: Fatal exception [ 752.545256][T16095] Kernel Offset: disabled [ 752.549569][T16095] Rebooting in 86400 seconds..