last executing test programs: 2m2.767267052s ago: executing program 2 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 1m59.571378107s ago: executing program 2 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r3, 0x4b32, 0x0) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000600)='4', 0x1}, {&(0x7f00000001c0)="a46e5cbd4f7fabbb", 0x8}, {&(0x7f0000000340)}], 0x3, 0x800000000000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c911, &(0x7f0000000480)={[{@resgid}, {@mblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@noblock_validity}, {@errors_remount}, {@noinit_itable}, {@sb={'sb', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9a, 0x4f2, &(0x7f0000000f40)="$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") getpriority(0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m58.656776629s ago: executing program 2 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) syz_pidfd_open(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0) 1m52.837056304s ago: executing program 3 (id=289): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300)=0x30) 1m52.671244974s ago: executing program 3 (id=293): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r3, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 1m52.058154702s ago: executing program 2 (id=295): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 1m51.904086333s ago: executing program 4 (id=296): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 1m51.622971781s ago: executing program 4 (id=297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x10c000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m50.367977152s ago: executing program 4 (id=299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000000c0)={0x8400000000000000, 0x2000, 0x9, 0x3, 0x1e}) 1m50.038392272s ago: executing program 4 (id=300): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000100)=""/29, 0x1d, 0x100, 0x0, 0x9, 0x9, 0x4}}, 0x120) readv(r0, &(0x7f0000002600)=[{&(0x7f0000001500)=""/71, 0x47}], 0x1) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f00000003c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="49440fb4005cba20653d2326292c265c2c00e79feca4a2e1053fdd2c84e7a89aa4ee02cbb47695d7ade8fd4362d0e37fbbb365b529e3d4cfa7ec78bc709784cc24ff7cfd3accb1a53fcd27bcb1794fcc15fc6eeae6dd85887fec609d9df9eb63c1eb27e9a7e7c87e551a878c1ff1548dce0557af9986d21054cc6d2e9be1e16b9e2e6e9df5b4b95e1b", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESOCT], 0x21, 0x1508, &(0x7f0000002080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) 1m50.023841239s ago: executing program 3 (id=301): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0xeb46) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2008002) 1m49.54049006s ago: executing program 4 (id=304): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m49.53978859s ago: executing program 3 (id=314): openat$rfkill(0xffffffffffffff9c, 0x0, 0x600540, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x20000000) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00'], 0x10}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 1m49.026028376s ago: executing program 3 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000002c0)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000104, 0x9734}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m47.643929683s ago: executing program 2 (id=306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, 0x0) r5 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 1m47.276056856s ago: executing program 3 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) 1m46.951990307s ago: executing program 0 (id=309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 1m46.728494826s ago: executing program 0 (id=310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m46.432435812s ago: executing program 0 (id=311): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x48, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec27", 0x70}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)}, {0x0}], 0x6}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m46.31454033s ago: executing program 4 (id=312): clock_gettime(0x7, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/13], 0x48) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f0000000280)={@empty, @multicast2, 0xffffffffffffffff, "17b1b5e43900c82269271a08ca3f9eb65bf0f96461f66cb52fe2e16251168a46", 0x1, 0x7f, 0xf4f, 0x2}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) 1m46.116141574s ago: executing program 1 (id=315): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000000)="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", 0x575) 1m45.890510292s ago: executing program 1 (id=317): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000280)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) 1m45.840007573s ago: executing program 0 (id=318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x2, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000820) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdd250401f2800c001300ff070000000000001400010000000000000000000000ffff6401010150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) 1m45.772160671s ago: executing program 1 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b32, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000600)='4', 0x1}, {&(0x7f00000001c0)="a46e5cbd4f7fabbb", 0x8}, {&(0x7f0000000340)}], 0x3, 0x800000000000000) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c911, &(0x7f0000000480)={[{@resgid}, {@mblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@noblock_validity}, {@errors_remount}, {@noinit_itable}, {@sb={'sb', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9a, 0x4f2, &(0x7f0000000f40)="$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") getpriority(0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m44.660948617s ago: executing program 0 (id=320): open_tree(0xffffffffffffff9c, 0x0, 0x81000) socket$inet(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x1a404bc, &(0x7f0000001fc0)=ANY=[@ANYBLOB="ebbd4140", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES16, @ANYBLOB="e1d1b255b4eb5f7ce5cabfaa8a31fcb491915ed1121629c89803e5ee0c991af7d1459747a51bb4aefcb8ab7d721d76eb99ad97e1d70adc338da072ec3b49b23a8da3dd31ccbdfab2467a077078b50ca51139d4713acb42fa9e8f4d08e7c178f538b5dfefb4964e01a0cfa9ed7a636921161338dadfdfd055a5d651d68194e6239be784a880c61ab050a82dbc95daba03a8a48f6f55ed615d6bb4c4ab6df5c1a7c85cddb187bbcce01a5b2d86e17ff68d9a4044a8338d754c9daba97c34f55696b542b457505b868bf8cd3e9a7c03b72acd99dcd68362366226f2a78bcaa8ba0e7d33285a9fbfa4c2a70dd915d4a7959e08a8c592", @ANYRES16], 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x40, 0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r3, 0x5, 0x0, @val=@tracing={0x0, 0x8000000000000000}}, 0x20) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x4002, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r5}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 1m44.156656415s ago: executing program 1 (id=321): sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x200000b0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000000c0)={0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0xa, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0xffffffffffffffff, 0xd, 0x0, 0xd4e2, 0x6], 0x0, 0x302240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m43.880106674s ago: executing program 1 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 1m43.231179296s ago: executing program 0 (id=323): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000003c0)={0xa, @sliced={0xad, [0x0, 0x1, 0x8001, 0x6, 0x200, 0x9, 0x5, 0x0, 0x7, 0x8, 0x7, 0x3, 0x7fff, 0xa, 0x1, 0x80, 0x6, 0x5, 0x1, 0x7, 0xff, 0x4, 0x8, 0xb, 0x6, 0x3, 0x80, 0x2, 0x7, 0xfff, 0x0, 0x0, 0x4cd1, 0x4, 0xffff, 0xd07b, 0x8000, 0x401, 0x5, 0x6, 0x7, 0x8, 0x7, 0x8, 0x3, 0x6, 0x5, 0x8], 0x7f}}) syz_usb_connect$uac3(0x2, 0x97, &(0x7f00000003c0)=ANY=[@ANYBLOB="120110010000004082054c00400001020301090285000301000003080b0002010130060904000000010130000a240110770a08000000090421000001023000090401"], 0x0) 1m43.156835912s ago: executing program 1 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000600)='4', 0x1}, {&(0x7f00000001c0)="a46e5cbd4f7fabbb", 0x8}, {&(0x7f0000000340)}], 0x3, 0x800000000000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c911, &(0x7f0000000480)={[{@resgid}, {@mblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@noblock_validity}, {@errors_remount}, {@noinit_itable}, {@sb={'sb', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9a, 0x4f2, &(0x7f0000000f40)="$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") getpriority(0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m42.891297203s ago: executing program 2 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x840, 0xd5) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) open$dir(&(0x7f0000000100)='./file0\x00', 0x26201, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x200000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m22.258536347s ago: executing program 32 (id=323): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000003c0)={0xa, @sliced={0xad, [0x0, 0x1, 0x8001, 0x6, 0x200, 0x9, 0x5, 0x0, 0x7, 0x8, 0x7, 0x3, 0x7fff, 0xa, 0x1, 0x80, 0x6, 0x5, 0x1, 0x7, 0xff, 0x4, 0x8, 0xb, 0x6, 0x3, 0x80, 0x2, 0x7, 0xfff, 0x0, 0x0, 0x4cd1, 0x4, 0xffff, 0xd07b, 0x8000, 0x401, 0x5, 0x6, 0x7, 0x8, 0x7, 0x8, 0x3, 0x6, 0x5, 0x8], 0x7f}}) syz_usb_connect$uac3(0x2, 0x97, &(0x7f00000003c0)=ANY=[@ANYBLOB="120110010000004082054c00400001020301090285000301000003080b0002010130060904000000010130000a240110770a08000000090421000001023000090401"], 0x0) 1m22.158338849s ago: executing program 33 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000600)='4', 0x1}, {&(0x7f00000001c0)="a46e5cbd4f7fabbb", 0x8}, {&(0x7f0000000340)}], 0x3, 0x800000000000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c911, &(0x7f0000000480)={[{@resgid}, {@mblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@noblock_validity}, {@errors_remount}, {@noinit_itable}, {@sb={'sb', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9a, 0x4f2, &(0x7f0000000f40)="$eJzs3V1rHNcZAOB3Rlp/ypVMe+Ea6praRXJb70pWbYteuB+U9srQ1r2urUorIbTSCu3KtoRpZfoDCqW0hUKhV7kJ5AcEgn9CCBiS+5CEhJDYyYUvEm/YL3/Iu5KMV1qhfR4YzTlnZvSed5ed3TMzzATQs05HxJmIeFypVM5FxGCjPW1MP6pW1uvrPXxwZ6o6JVGpXPssiUjqbdVVRp75n0frm8ShiPjDbyP+nLwYt7S6Nj9ZKOSXG/VceWEpV1pdOz+3MDmbn80vjo+PXZq4PHFxYrQjeQ5ExJVff/Svv7/2mytv/eTW+9c/GflL0miPeJpHp9VTz9Rei6b+iFjeiWBd0NfIJ9NsaPFeAwCwdzR/5/8gIs7FYPTVfs0BAAAA+0nl5wPxVRJRAQAAAPattHYNbJJmG9cBDESaZrP1a3i/E0fSQrFU/vFMcWVxun6t7FBk0pm5Qn60ca3wUGSSan2sVn5av7ChPh4RxyPin4OHa/XsVLEw3e2DHwAAANAjjm4Y/385WB//AwAAAPvMULc7AAAAAOw4438AAADY/4z/AQAAYF/73dWr1anSfP719M3VlfnizfPT+dJ8dmFlKjtVXF7KzhaLs7V79i1s9f8KxeLST2Nx5XaunC+Vc6XVtesLxZXF8vW55x6BDQAAAOyi49+/914SEes/O1ybqg50u1PAruh/mZU/3Ll+ALuvr9sdALrmpb7/gX0l0+0OAF2XRMT/Nlne9uKdt3emPwAAQOcNf7f1+f9ky2MD6+kudRHYIY7/Qe9y/h96l/P/0Lsy0RcG8tDbki2Wv/r5/0rlpToEAAB03EBtStJsRO04wECkaTYbcaz2WIBMMjNXyI9GxLci4t3BzMFqfay2ZbLlmAEAAAAAAAAAAAAAAAAAAAAAAAAAqKtUkqgAAAAA+1pE+nHSeP7X8ODZgY3HBw4kjwZr84i49d9r/749WS4vj1XbP3/SXv5Po/1CN45gAAAAABs1x+nNcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNLDB3emmtNuxv30lxEx1Cp+fxyqzQ9FJiKOfJFE/zPbJRHR14H463cj4ld/ahE/qXYrhhq9aBX/cKfin2iV/+bx04g42oH40MvuVfc/v2j1+UvjdG2+8fN38Mm2/R2I337/lz7Z//W12f8c22aMk/ffyLWNfzfiZH/r/U8zftIm/pltxr/xx7W1dssq/48Ybvn9kzwXK1deWMqVVtfOzy1MzuZn84vj42OXJi5PXJwYzc3MFfKNvy1j/ON7bz7eLP8jbeIPbZH/2W3m//X92w++XS9mWsUfOdP6/T/RJn7a+O77YaNcXT7cLK/Xy8869fo7pzbLf7pN/lu9/yPbzP/c7//2wTZXBQB2QWl1bX6yUMgv93ThlV6N6s+iPZGFwlaFSmPw1mz5617p2B4sND8Tj7qzYwIAADruxTHwdtzYuQ4BAAAAAAAAAAAAAAAAAABAD+rMPcOa98Te/O56Tev12Qv3QgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KZvAgAA//9F0tDB") getpriority(0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m22.05691145s ago: executing program 34 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x840, 0xd5) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) open$dir(&(0x7f0000000100)='./file0\x00', 0x26201, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x200000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m22.009964361s ago: executing program 35 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) 1m21.9502347s ago: executing program 36 (id=312): clock_gettime(0x7, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/13], 0x48) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f0000000280)={@empty, @multicast2, 0xffffffffffffffff, "17b1b5e43900c82269271a08ca3f9eb65bf0f96461f66cb52fe2e16251168a46", 0x1, 0x7f, 0xf4f, 0x2}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x0) 25.481239694s ago: executing program 7 (id=441): r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x6) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 24.763711013s ago: executing program 7 (id=443): open_tree(0xffffffffffffff9c, 0x0, 0x81000) socket$inet(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x1a404bc, &(0x7f0000001fc0)=ANY=[@ANYBLOB="ebbd4140", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES16, @ANYBLOB="e1d1b255b4eb5f7ce5cabfaa8a31fcb491915ed1121629c89803e5ee0c991af7d1459747a51bb4aefcb8ab7d721d76eb99ad97e1d70adc338da072ec3b49b23a8da3dd31ccbdfab2467a077078b50ca51139d4713acb42fa9e8f4d08e7c178f538b5dfefb4964e01a0cfa9ed7a636921161338dadfdfd055a5d651d68194e6239be784a880c61ab050a82dbc95daba03a8a48f6f55ed615d6bb4c4ab6df5c1a7c85cddb187bbcce01a5b2d86e17ff68d9a4044a8338d754c9daba97c34f55696b542b457505b868bf8cd3e9a7c03b72acd99dcd68362366226f2a78bcaa8ba0e7d33285a9fbfa4c2a70dd915d4a7959e08a8c592", @ANYRES16], 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x40, 0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r3, 0x5, 0x0, @val=@tracing={0x0, 0x8000000000000000}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x4002, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r5}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 24.006254814s ago: executing program 7 (id=445): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(0x0, &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000e7ffffff"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2, 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) 19.059975019s ago: executing program 7 (id=459): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084504, &(0x7f0000ffcffc)) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, 0x0) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 15.360060592s ago: executing program 7 (id=464): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 12.113037247s ago: executing program 7 (id=474): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r4, @ANYRES64=r3, @ANYRES8, @ANYRES16=r3, @ANYRES64=r3, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$eJzs3AuUjlXbOPB97b1vxjTpaZLDsK993TxpsE2S5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDR5pUmSkJCw/0vv+356v97v6/3W2/+z1jfXb629Zl9zP9f1XPdcs+a572eteb7rOapei/q1mxGR+LfAX7+kCCFihBDDhBDXCSECIUSl+Erxl48XUJDy7z0J+3M9nH61O2BXE88/b+P55208/7yN55+38fzzNp5/3sbzz9t4/ozlZdvnFLueV95d/P5/Xsav//+H5Jaf/NXG8jf2+h+k8PzzNp5/3sbzz9t4/nkbzz9v4/n/31frvznG88/beP6M5WVX+/1nXld3Xe3fP8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjecM5f4UWQvx9f7X7YowxxhhjjDHG2J/H57/aHTDGGGOMMcYYY+z/PxBSKKFFIPKJ/CJGFBCx4hoRJ64VBcV1IiKuF/HiBlFI3CgKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhJlBY3i0RRRpQV5YQT5UWSuEVUELeKiuI2UUncLiqLO0QVUVVUE9XFnaKGuEvUFLVEbXG3qCPqinqivrhHNBD3iobiPtFI3C8aiwdEE/GgaCoeEs3Ew6K5eES0EI+KluIx0Uq0Fm1EW9Hut/l98/+L+S+JvuJl0U/0FyligBgoXhGDxGAxRAwVw8SrYrh4TYwQr4tUMVKMEm+I0eJNMUa8JcaKcWK8eFtMEBPFJDFZTBFTRZp4R0wT74rp4j0xQ8wUs8RskS7miLnifTFPzBcLxAdiofhQLBKLxRKxVGSIj0SmWCayxMdiufhEZIsVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLT8UOsVPsErvFHrFX7BOfif3ic3FAfCFyxJf/w/yz/ym/FwgQIEGCBg35IB/EQAzEQizEQRwUhIIQgQjEQzwUgkJQGApDUSgKCZAAJaAEICAQEJSEkhCFKJSG0pAIiVAWyoIDB0mQBBXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCyZAMXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB1SYSSMgjfgDXgTxsAZGAvjYDyMhxpyIkyCyUByKqRBGkyDaTAdpsMMmAkzYTakwxyYC3NhHsyH+fABLIQP4UNYDIthKWRABmTCMsiCLFgOZyEbVsBKWAWrYQ2shnWwHtbBRtgEG2ELbIFtsA0+hU9hJ+yE3bAb9sJe+Aw+g8/hc0iFHMiBg3AQDsEhOAyHIRdy4QgcgaNwFI7BMTgOx+EEnIRTcBJOw2k4A2fhHJyD83AeLsALCd8031tmQ6qQl2mpZT6ZT8bIGBkrY2WcjJMFZUEZkREZL+NlIVlIFpaFZVFZVCbIBFlClpAoUZIMZUlZUkZlVJaWpWWiTJRlZVnppJNJMklWkBVkRVlRVpK3y8ryDllFVpUdXXVZXdaQnVxNWUvWlrVlHVlX1pP1ZX3ZQDaQDWVD2Ug2ko1lY9lEPiibygEwBB6WlyfTQo6ElnIUtJKtZRvZVr4Jj8v2cgx0kB1lJ/mkHAdjoYts75LlM7KrnATd5HNyMjwve8ip0FO+KHvJ3rKPfEn2lR1cP9lfzoABcqCcDYPkYDlEDpXzoK68PLF68nWZKkfKUfINuRTelGPkW3KsHCfHy7flBDlRTpKT5RQ5VabJd+Q0+a6cLt+TM+RMOUvOlulyjpwr35fz5Hy5QH4gF8oP5SK5WC6RS2WG/EhmymUyS34sl8tPZLZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/FTukDvlLrlb7pF75T75mdwvP5cH5BcyR34pD8q/yEPyK3lYfi1z5TfyiPxWHpXfyWPye3lc/iBPyJPylPxRnpY/yTPyrDwnf5bn5S/ygrwoL0kvhQIllVJaBSqfyq9iVAEVq65RcepaVVBdpyLqehWvblCF1I2qsCqiiqpiKkEVVyWUUaisIhWqkqqUiqqbVGl1s0pUZVRZVU45VV4lqVtUBXWrqqhuU5XU7aqyukNVUVVVNVVd3alqqLtUTVVL1VZ3qzqqrqqn6qt7VAN1r2qo7lON1P2qsXpANVEPqqbqIdVMPayaq0dUC/WoaqkeU61Ua9VGtVXt1OOqvXpCdVAdVSf1pOqsnlJd1NMqWT2juqpnVTf1nOqunlc91Auqp3pR9VK9VR91UV1SXvVT/VWKGqAGqlfUIDVYDVFD1TD1qhquXlMj1OsqVY1Uo9QbarR6U41Rb6mxapwar95WE9RENUlNVlPUVJWm3lHT1LtqunpPzVAz1Sw1W6WrOWrI3yot+Bfy3/0n+SN+ffZtarv6VO1QO9UutVvtUXvVPrVP7Vf71QF1QOWoHHVQHVSH1CF1WB1WuSpXHVFH1FF1VB1Tx9RxdVydUCfVz+pHdVr9pM6os+qs+lmdV+fVhb/9DIQGLbXSWgc6n86vY3QBHauv0XH6Wl1QX6cj+nodr2/QhfSNurAuoovqYjpBF9cltNGorSYd6pK6lI7qm3RpfbNO1GV0WV1OO11eJ+lb/u38P+qvnW6n2+v2uoPuoDvpTrqz7qy76C46WSfrrrqr7qa76e66u+6he+ieuqfupXvpPrqP7qv76n66n07RKXqgfkUP0oP1ED1UD9Ov6uF6uB6hR+hUnapH6VF6tB6tx+gxeqweq8fr8XqCnqAn6Ul6ip6i03Sanqan6el6up6hZ+hZepZO1+l6rp6r5+l5eoFeoBfqhXqRXqSX6CU6Q2foTJ2ps3SWXq6X62y9Qq/Qq/QqvUav0ev0Or1Bb9Cb9Ca9RW/R2Xq73q536B16l96l9+g9ep/ep/fr/fqAPqBzdI4+qA/qQ/qQPqwP61ydq4/oI/qoPqqP6WP6uD6uT+gT+pQ+pU/r0/qMPqPP6XP6vD6vL+gL+pK+dPmyL5CBDHSgg3xBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEYAIMbEBBGJQMSgXR4KagdHBzkBiUCcoG5QIXlA+SgluCCsGtQcXgtqBScHtQObgjqBJUDaoF1YM7gxrBXUHNoFZQO7g7qBPUDeoF9YN7ggbBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/an1vT9T5AnXz/Q3KWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm1Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNmnnHTDPvmunmPTPDzDSzzGyTbuaYueZ9M8/MNwvMB2ah+dAsMovNErPUZJiPTKZZZrLMx2a5+cRkmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmtptPzQ6z0+wyu80es9fsM5+Z/eZzc8B8YXLMl+ag+Ys5ZL4yh83XJtd8Y46Yb81R8505Zr43x80P5oQ5aU6ZH81p85M5Y86ac+Znc978Yi6Yi+aS8Zcv7i+/vKNGjfkwH8ZgDMZiLMZhHBbEghjBCMZjPBbCQlgYC2NRLIoJmIAlsAReRkhYEktiFKNYGktjIiZiWSyLDh0mYRJWwApYEStiJayElbEyVsEqWA2r4Z14J96Fd2EtrIV3491YF+tifayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2xJbYClthG2yD7bAdtsf22AE7YCfshJ2xM3bBLpiMydgVu2I37IbdsTv2wB7YE3tiL+yFfbAP9sW+2A/7YQqm4EAciINwEA7BITgMh+FwHI4jcASmYiqOwlE4GkfjGByDY3Ecjse3cQJOxEk4GafgVEzDNJyG03A6TscZOANn4SxMx3Sci3NxHs7DBbgAF+JCXISLcAkuwQzMwEzMxCzMwuW4HLMxG1fiSlyNq3EtrsX1uB434kbcjJtxK27F7bgdd+AO3IW7cA/uwX24D/fjfjyABzAHc/AgHsRDeAgP42HMxVw8gkfwKB7FY3gMj+NxPIEn8BSewtN4Gs/gGTyH5/A8/oIX8CJeQo8xVopYe42Ns9fagvY6G2ML2N/GRW0xm2CL2xLW2MK2yD/EaK1NtGVsWVvOOlveJtlbfhdXsVVtNVvd3mlr2Ltszd/FDey9tqG9zzay99v69p5/iBvbB2wT+6htah+zzWxr29y2tS3so7alfcy2sq1tG9vWdrZP2S72aZtsn7Fd7bO/izPtMrvebrAb7Sa7335uz9mf7VH7nT1vf7H9bH87zL5qh9vX7Aj7uk21I38Xj7dv2wl2op1kJ9spdurv4ll2tk23c+xc+76dZ+f/Ls6wH9mFNssusovtErv01/hyT1n2Y7vcfmKz7Qq70q6yq+0au9au+49eV9ktdqvdZvfZz+wOu9PusrvtHrv31/jyeRywX9gc+6U9Yr+1h+xX9rA9ZnPtN7/Gl8/vmP3eHrc/2BP2pD1lf7Sn7U/2jD376/lfPvcf7UV7yXorCEiSIk0B5aP8FEMFKJauoTi6lgrSdRSh6ymebqBCdCMVpiJUlIpRAhWnEmQIyRJRSCWpFEXpJipNN1MilaGyVI4clackuoUq0K1UkW6jSnQ7VaY7qApVpWpUne6kGnQX1aRaVJvupjpUl+pRfbqHGtC91JDuo0Z0PzWmB6gJPUhN6SFqRg9Tc3qEWtCj1JIeo1bUmtpQW2pHj1N7eoI6UEfqRE9SZ3qKutDTlEzPUFd6lrrRc9Sdnqce9AL1pBepF/WmPvQS9aWXqR/1pxQaQAPpFRpEg2kIDaVh9CoNp9doBL1OqTSSRtEbNJrepDH0Fo2lcTSe3qYJNJEm0WSaQlMpjd6hafQuTaf3aAbNpFk0m9JpDs2l92kezacF9AEtpA9pES2mJbSUMugjyqRllEUf03L6hLJpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG2+lT2kE7aRftpj20l/bRZ7SfPqcD9AXl0Jd0kP5Ch+grOkxfUy59Q0foWzpK39Ex+p6O0w90gk7SKfqRTtNPdIbO0jn6mc7TL3SBLtIl8iRCCGWoQh0GYb4wfxgTFghjw2vCuPDasGB4XRgJrw/jwxvCQuGNYeGwSFg0LBYmhMXDEqEJMbQhhWFYMiwVRsObwtLhzWFiWCYsG5YLXVg+TApvCSuEt4YVw9vCSuHtYeXwjrBKWDV89P7q4Z1hjfCusGZYK6wd3h3WCeuG9cL64T1hg/DesGF4X9govD+sGD4QNgkfDJuGD4XNwofD5uEjYYvw0bBl+FjYKmwdtgnbhu3Cx8P24RNhh7Bj2Cl8MuwcPhV2CZ8Ok8Nnwq7hs394PCUcEA4MXwlfCb2/Ty2JLo1mRD+KZkaXRbOiH0eXRz+JZkdXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W9r59fOHDSKadd4PK5/C7GFXCx7hoX5651Bd11LuKud/HuBlfI3egKuyKuqCvmElxxV8IZh846cqEr6Uq5qLvJlXY3u0RXxpV15Zxz5V2Sa+vauXauvXvCdXAdXSf3pHvSPeWeck+7p90zrqt71nVzz7nu7nnXw73gXnAvul6ut+vjXnJ93cuun+vvUlyKG+gGukFukBvihrhhbpgb7oa7EW6ES3WpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Npblpbpqb7qa7GW6Gm+VmuXSX7ua6uW6em+cWuAVuYeJCt8gtckvcEpfhMlymy3RZLsstd8tdtst2K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfL7XJ73B63z+1z+91+d8AdcDkuxx10B90hd8gddl+7XPeNO+K+dUfdd+6Y+94ddz+4E+6kO+V+dKfdT+6MO+vOuZ/defeLu+AuukvOu7TIO5FpkXcj0yPvRWZEZkZmRWZH0iNzInMj70fmReZHFkQ+iCyMfBhZFFkcWRJZGsmIfBTJjCyLZEU+jiyPfBLJjqyIrIysiqyOrIl4X3xH6Ev6Uj7qb/Kl/c0+0ZfxZX0573x5n+Rv8RX8rb6iv81X8rf7yv4OX8VX9dX8Y76Vb+3b+La+nX/ct/dP+A6+o+/kn/Sd/VO+i3/aJ/tnfFf/rO/mn/Pd/fO+h3/B9/Qv+l6+t+/jX/J9/cu+n+/vU/wAP9C/4gf5wX6IH+qH+Vf9cP+aH+Ff96l+pB/l3/Cj/Zt+jH/Lj/Xj/Hj/tp/gJ/pJfrKf4qf6NP+On+bf9dP9e36Gn+ln+dk+3c/xc/37fp6f7xf4D/xC/6Ff5Bf7JX6pz/Af+Uy/zGf5j/1y/4nP9iv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/ef+h1+p9/ld/s9fq/f5z/z+/3n/oD/wuf4L/1B/xd/yH/lD/uvfa7/xh/x3/qj/jt/zH/vj/sf/Al/0p/yP/rT/id/xp/15/zP/rz/xV/wF/0l/p81xhhjjLF/ifqD4wP+yffk39ZlA4UQ1+4slvufa24u/Nf9YJnQOSKEeKZ/z4f/vurUSdn698dmKxGUWiyEiFzJzyeuxCtEJ/GUSBYdRYV/2t9g2fs8/b5+Sspv6kdvFyL2Nzkx4kp8pf6t/0X9x58cn1k5PBf/39RfLERiqSs5BcSV+Er9iv9F/SLt/6D/Al+lCdHhNzlx4kp8pX6SeEI8K5L/4ZGMMcYYY4wxxthfDZbVuv/R/fPl+/MEfSUnv7gS/9H9OWOMMcYYY4wxxq6+53v3efrx5OSO3XnDG97w5j82V/svE2OMMcYYY+zPduWi/2p3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5V3/Gx8ndrXPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/l8AAAD//zG6PD0=") newfstatat(0xffffffffffffff9c, &(0x7f0000001900)='./file1/file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getresgid(&(0x7f00000019c0), &(0x7f0000001a00)=0x0, &(0x7f0000001a40)) setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000001a80)={{}, {}, [{0x2, 0x2}, {0x2, 0x1}, {0x2, 0x2}, {}, {0x2, 0x5, 0xffffffffffffffff}, {0x2, 0x5, r4}], {}, [{0x8, 0x4, r5}, {0x8, 0x0, r6}]}, 0x64, 0x2) 11.80004201s ago: executing program 5 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x84}, 0x4000300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00"], 0x14b0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000240)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@md0, 0x0, &(0x7f0000000300)='./file0\x00') sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000000), 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c) getsockopt$sock_buf(r6, 0x1, 0x19, 0x0, &(0x7f0000003080)) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752}) socket$inet6_udplite(0xa, 0x2, 0x88) 10.26854343s ago: executing program 5 (id=481): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250101f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 10.199995217s ago: executing program 5 (id=482): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r5 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 10.199504907s ago: executing program 6 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b32, 0x0) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000600)='4', 0x1}, {&(0x7f00000001c0)="a46e5cbd4f7fabbb", 0x8}, {&(0x7f0000000340)}], 0x3, 0x800000000000000) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c911, &(0x7f0000000480)={[{@resgid}, {@mblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@noblock_validity}, {@errors_remount}, {@noinit_itable}, {@sb={'sb', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9a, 0x4f2, &(0x7f0000000f40)="$eJzs3V1rHNcZAOB3Rlp/ypVMe+Ea6praRXJb70pWbYteuB+U9srQ1r2urUorIbTSCu3KtoRpZfoDCqW0hUKhV7kJ5AcEgn9CCBiS+5CEhJDYyYUvEm/YL3/Iu5KMV1qhfR4YzTlnZvSed5ed3TMzzATQs05HxJmIeFypVM5FxGCjPW1MP6pW1uvrPXxwZ6o6JVGpXPssiUjqbdVVRp75n0frm8ShiPjDbyP+nLwYt7S6Nj9ZKOSXG/VceWEpV1pdOz+3MDmbn80vjo+PXZq4PHFxYrQjeQ5ExJVff/Svv7/2mytv/eTW+9c/GflL0miPeJpHp9VTz9Rei6b+iFjeiWBd0NfIJ9NsaPFeAwCwdzR/5/8gIs7FYPTVfs0BAAAA+0nl5wPxVRJRAQAAAPattHYNbJJmG9cBDESaZrP1a3i/E0fSQrFU/vFMcWVxun6t7FBk0pm5Qn60ca3wUGSSan2sVn5av7ChPh4RxyPin4OHa/XsVLEw3e2DHwAAANAjjm4Y/385WB//AwAAAPvMULc7AAAAAOw4438AAADY/4z/AQAAYF/73dWr1anSfP719M3VlfnizfPT+dJ8dmFlKjtVXF7KzhaLs7V79i1s9f8KxeLST2Nx5XaunC+Vc6XVtesLxZXF8vW55x6BDQAAAOyi49+/914SEes/O1ybqg50u1PAruh/mZU/3Ll+ALuvr9sdALrmpb7/gX0l0+0OAF2XRMT/Nlne9uKdt3emPwAAQOcNf7f1+f9ky2MD6+kudRHYIY7/Qe9y/h96l/P/0Lsy0RcG8tDbki2Wv/r5/0rlpToEAAB03EBtStJsRO04wECkaTYbcaz2WIBMMjNXyI9GxLci4t3BzMFqfay2ZbLlmAEAAAAAAAAAAAAAAAAAAAAAAAAAqKtUkqgAAAAA+1pE+nHSeP7X8ODZgY3HBw4kjwZr84i49d9r/749WS4vj1XbP3/SXv5Po/1CN45gAAAAABs1x+nNcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNLDB3emmtNuxv30lxEx1Cp+fxyqzQ9FJiKOfJFE/zPbJRHR14H463cj4ld/ahE/qXYrhhq9aBX/cKfin2iV/+bx04g42oH40MvuVfc/v2j1+UvjdG2+8fN38Mm2/R2I337/lz7Z//W12f8c22aMk/ffyLWNfzfiZH/r/U8zftIm/pltxr/xx7W1dssq/48Ybvn9kzwXK1deWMqVVtfOzy1MzuZn84vj42OXJi5PXJwYzc3MFfKNvy1j/ON7bz7eLP8jbeIPbZH/2W3m//X92w++XS9mWsUfOdP6/T/RJn7a+O77YaNcXT7cLK/Xy8869fo7pzbLf7pN/lu9/yPbzP/c7//2wTZXBQB2QWl1bX6yUMgv93ThlV6N6s+iPZGFwlaFSmPw1mz5617p2B4sND8Tj7qzYwIAADruxTHwdtzYuQ4BAAAAAAAAAAAAAAAAAABAD+rMPcOa98Te/O56Tev12Qv3QgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KZvAgAA//9F0tDB") getpriority(0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 8.891986707s ago: executing program 6 (id=486): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3005, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 7.664166173s ago: executing program 6 (id=488): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe0002005}) 7.663405253s ago: executing program 6 (id=489): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001b80)='pimreg1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) 5.598355745s ago: executing program 8 (id=494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1000000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0, 0x38}, &(0x7f0000000000)=0x40) 5.560657888s ago: executing program 9 (id=495): landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 5.202877242s ago: executing program 8 (id=496): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b32, 0x0) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000600)='4', 0x1}, {&(0x7f00000001c0)="a46e5cbd4f7fabbb", 0x8}, {&(0x7f0000000340)}], 0x3, 0x800000000000000) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c911, &(0x7f0000000480)={[{@resgid}, {@mblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@noblock_validity}, {@errors_remount}, {@noinit_itable}, {@sb={'sb', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9a, 0x4f2, &(0x7f0000000f40)="$eJzs3V1rHNcZAOB3Rlp/ypVMe+Ea6praRXJb70pWbYteuB+U9srQ1r2urUorIbTSCu3KtoRpZfoDCqW0hUKhV7kJ5AcEgn9CCBiS+5CEhJDYyYUvEm/YL3/Iu5KMV1qhfR4YzTlnZvSed5ed3TMzzATQs05HxJmIeFypVM5FxGCjPW1MP6pW1uvrPXxwZ6o6JVGpXPssiUjqbdVVRp75n0frm8ShiPjDbyP+nLwYt7S6Nj9ZKOSXG/VceWEpV1pdOz+3MDmbn80vjo+PXZq4PHFxYrQjeQ5ExJVff/Svv7/2mytv/eTW+9c/GflL0miPeJpHp9VTz9Rei6b+iFjeiWBd0NfIJ9NsaPFeAwCwdzR/5/8gIs7FYPTVfs0BAAAA+0nl5wPxVRJRAQAAAPattHYNbJJmG9cBDESaZrP1a3i/E0fSQrFU/vFMcWVxun6t7FBk0pm5Qn60ca3wUGSSan2sVn5av7ChPh4RxyPin4OHa/XsVLEw3e2DHwAAANAjjm4Y/385WB//AwAAAPvMULc7AAAAAOw4438AAADY/4z/AQAAYF/73dWr1anSfP719M3VlfnizfPT+dJ8dmFlKjtVXF7KzhaLs7V79i1s9f8KxeLST2Nx5XaunC+Vc6XVtesLxZXF8vW55x6BDQAAAOyi49+/914SEes/O1ybqg50u1PAruh/mZU/3Ll+ALuvr9sdALrmpb7/gX0l0+0OAF2XRMT/Nlne9uKdt3emPwAAQOcNf7f1+f9ky2MD6+kudRHYIY7/Qe9y/h96l/P/0Lsy0RcG8tDbki2Wv/r5/0rlpToEAAB03EBtStJsRO04wECkaTYbcaz2WIBMMjNXyI9GxLci4t3BzMFqfay2ZbLlmAEAAAAAAAAAAAAAAAAAAAAAAAAAqKtUkqgAAAAA+1pE+nHSeP7X8ODZgY3HBw4kjwZr84i49d9r/749WS4vj1XbP3/SXv5Po/1CN45gAAAAABs1x+nNcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNLDB3emmtNuxv30lxEx1Cp+fxyqzQ9FJiKOfJFE/zPbJRHR14H463cj4ld/ahE/qXYrhhq9aBX/cKfin2iV/+bx04g42oH40MvuVfc/v2j1+UvjdG2+8fN38Mm2/R2I337/lz7Z//W12f8c22aMk/ffyLWNfzfiZH/r/U8zftIm/pltxr/xx7W1dssq/48Ybvn9kzwXK1deWMqVVtfOzy1MzuZn84vj42OXJi5PXJwYzc3MFfKNvy1j/ON7bz7eLP8jbeIPbZH/2W3m//X92w++XS9mWsUfOdP6/T/RJn7a+O77YaNcXT7cLK/Xy8869fo7pzbLf7pN/lu9/yPbzP/c7//2wTZXBQB2QWl1bX6yUMgv93ThlV6N6s+iPZGFwlaFSmPw1mz5617p2B4sND8Tj7qzYwIAADruxTHwdtzYuQ4BAAAAAAAAAAAAAAAAAABAD+rMPcOa98Te/O56Tev12Qv3QgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KZvAgAA//9F0tDB") getpriority(0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 5.124172208s ago: executing program 9 (id=497): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e1d, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6e2}, 0x1c) 5.068078388s ago: executing program 9 (id=498): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0xcc, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x161a, 0x51}}}}, [@NL80211_ATTR_FRAME={0xaa, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_b, @from_mac=@broadcast, {0x0, 0x226}, @value=@ver_80211n={0x0, 0x100, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0x29, {0x37, 0x70, {0xde, 0x1, "89afeda33f8365b08a87cbdabfe86176", "94c6f8b98fc791ff98bdbf904d1d7fcbcb8276055badd46a823c2e1ed1e78dd5", "c16595490462bc8a1e67a3ef24693ef731ec405b552af55321261c7e507282ff", [{0x2, 0x1c, "7d0e4b41d890b3a1451e4e3859b6ffb8d8d0990c58683c8ebab9f5c2"}]}}, {0x65, 0x12}}}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x41c1}, 0x4008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 5.012438087s ago: executing program 5 (id=499): syz_open_dev$sndctrl(0x0, 0x8, 0x191000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.2086032s ago: executing program 9 (id=500): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xff}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 4.105767352s ago: executing program 8 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 3.980082918s ago: executing program 9 (id=502): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.797718525s ago: executing program 5 (id=503): open_tree(0xffffffffffffff9c, 0x0, 0x81000) socket$inet(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x1a404bc, &(0x7f0000001fc0)=ANY=[@ANYBLOB="ebbd4140", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES16, @ANYBLOB="e1d1b255b4eb5f7ce5cabfaa8a31fcb491915ed1121629c89803e5ee0c991af7d1459747a51bb4aefcb8ab7d721d76eb99ad97e1d70adc338da072ec3b49b23a8da3dd31ccbdfab2467a077078b50ca51139d4713acb42fa9e8f4d08e7c178f538b5dfefb4964e01a0cfa9ed7a636921161338dadfdfd055a5d651d68194e6239be784a880c61ab050a82dbc95daba03a8a48f6f55ed615d6bb4c4ab6df5c1a7c85cddb187bbcce01a5b2d86e17ff68d9a4044a8338d754c9daba97c34f55696b542b457505b868bf8cd3e9a7c03b72acd99dcd68362366226f2a78bcaa8ba0e7d33285a9fbfa4c2a70dd915d4a7959e08a8c592", @ANYRES16], 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x40, 0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r3, 0x5, 0x0, @val=@tracing={0x0, 0x8000000000000000}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x4002, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r5}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 2.78718193s ago: executing program 5 (id=504): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) write$proc_mixer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\"'], 0x33) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r9, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000009c0)=0x80000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}]}}}}}}, 0x0) 2.572276091s ago: executing program 6 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) pipe2$9p(&(0x7f0000000080), 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',\x00']) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200103, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) connect$inet(r3, 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000003"]) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x2004c860, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0x3}, 0x14) 2.378005335s ago: executing program 6 (id=506): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet6(r2, 0x0, 0x0) fsopen(0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1.724714566s ago: executing program 8 (id=507): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="8238", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000040)="46553628eb010000000000000000e37e91656d8c7215", 0x16, 0x3b00, 0x0, 0x0) 1.548003443s ago: executing program 8 (id=508): eventfd2(0xbfb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80080, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 342.781163ms ago: executing program 9 (id=509): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r5 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 0s ago: executing program 8 (id=510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) kernel console output (not intermixed with test programs): ped to illegal pblock 4 (length 1) [ 98.909072][ T4268] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.984050][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #340!!! [ 99.091176][ T4801] EXT4-fs (loop1): Remounting filesystem read-only [ 99.296789][ T4268] usb 1-1: Using ep0 maxpacket: 8 [ 99.416909][ T4268] usb 1-1: config 129 has an invalid interface number: 191 but max is 0 [ 99.446019][ T4268] usb 1-1: config 129 has no interface number 0 [ 99.465637][ T4268] usb 1-1: config 129 interface 191 altsetting 8 has an invalid endpoint with address 0x42, skipping [ 99.496929][ T4268] usb 1-1: config 129 interface 191 has no altsetting 0 [ 99.669315][ T4268] usb 1-1: Dual-Role OTG device on HNP port [ 99.687027][ T4268] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=cf.4e [ 99.709094][ T4828] loop2: detected capacity change from 0 to 512 [ 99.735951][ T4268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.809579][ T4828] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 99.817117][ T4828] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.890231][ T4268] usb 1-1: Product: syz [ 99.896601][ T4828] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.905234][ T4268] usb 1-1: Manufacturer: syz [ 99.910210][ T4268] usb 1-1: SerialNumber: syz [ 99.949909][ T4828] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 99.976263][ T4828] EXT4-fs (loop2): Remounting filesystem read-only [ 99.984991][ T4828] Quota error (device loop2): write_blk: dquota write failed [ 99.994155][ T4828] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 100.004764][ T4828] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.148: Failed to acquire dquot type 0 [ 100.021784][ T4828] EXT4-fs (loop2): Remounting filesystem read-only [ 100.028603][ T4828] EXT4-fs (loop2): 1 truncate cleaned up [ 100.038702][ T4828] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 100.347739][ T4268] ftdi_sio 1-1:129.191: FTDI USB Serial Device converter detected [ 100.401727][ T4268] usb 1-1: Detected FT-X [ 100.557287][ T4268] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 100.606973][ T4268] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 100.636869][ T4268] ftdi_sio 1-1:129.191: GPIO initialisation failed: -71 [ 100.663733][ T4268] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.693682][ T4268] usb 1-1: USB disconnect, device number 4 [ 100.722608][ T4268] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 100.756114][ T4268] ftdi_sio 1-1:129.191: device disconnected [ 101.148354][ T4831] loop4: detected capacity change from 0 to 40427 [ 101.234619][ T4831] F2FS-fs (loop4): invalid crc value [ 101.338871][ T4831] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.485382][ T4831] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.564958][ T4831] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 101.696697][ T4831] CPU: 0 PID: 4831 Comm: syz.4.149 Not tainted syzkaller #0 [ 101.704041][ T4831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.714316][ T4831] Call Trace: [ 101.717612][ T4831] [ 101.720574][ T4831] dump_stack_lvl+0x188/0x250 [ 101.725357][ T4831] ? show_regs_print_info+0x20/0x20 [ 101.731009][ T4831] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 101.736849][ T4831] ? unlock_page+0x17c/0x1f0 [ 101.741551][ T4831] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 101.746959][ T4831] f2fs_get_read_data_page+0x2c4/0x580 [ 101.752452][ T4831] ? f2fs_get_block+0x2a0/0x2a0 [ 101.757337][ T4831] ? __lock_acquire+0x7d10/0x7d10 [ 101.762562][ T4831] f2fs_find_data_page+0x1c2/0x5d0 [ 101.767677][ T4831] f2fs_readdir+0x4b3/0xda0 [ 101.772181][ T4831] ? f2fs_fill_dentries+0xd10/0xd10 [ 101.777373][ T4831] ? mutex_lock_io_nested+0x60/0x60 [ 101.782686][ T4831] ? end_current_label_crit_section+0x14b/0x170 [ 101.788932][ T4831] ? iterate_dir+0x10d/0x560 [ 101.793522][ T4831] ? down_read_killable+0x1ce/0x340 [ 101.798724][ T4831] ? fsnotify_perm+0x254/0x560 [ 101.803710][ T4831] iterate_dir+0x218/0x560 [ 101.808145][ T4831] ? f2fs_fill_dentries+0xd10/0xd10 [ 101.813371][ T4831] __se_sys_getdents64+0xf2/0x270 [ 101.818413][ T4831] ? __x64_sys_getdents64+0x80/0x80 [ 101.823627][ T4831] ? filldir+0x720/0x720 [ 101.827864][ T4831] ? vtime_user_exit+0x2c8/0x3e0 [ 101.832997][ T4831] ? lockdep_hardirqs_on+0x94/0x140 [ 101.838376][ T4831] do_syscall_64+0x4c/0xa0 [ 101.842788][ T4831] ? clear_bhb_loop+0x30/0x80 [ 101.847565][ T4831] ? clear_bhb_loop+0x30/0x80 [ 101.852255][ T4831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.858436][ T4831] RIP: 0033:0x7fb66b3aa799 [ 101.862860][ T4831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.883302][ T4831] RSP: 002b:00007fb669604028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 101.891914][ T4831] RAX: ffffffffffffffda RBX: 00007fb66b623fa0 RCX: 00007fb66b3aa799 [ 101.900184][ T4831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 101.908180][ T4831] RBP: 00007fb66b440c99 R08: 0000000000000000 R09: 0000000000000000 [ 101.916162][ T4831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.924281][ T4831] R13: 00007fb66b624038 R14: 00007fb66b623fa0 R15: 00007ffe849a1748 [ 101.932374][ T4831] [ 102.006660][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 102.015882][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 102.025300][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 102.034328][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 102.043293][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 102.052291][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 102.061367][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 102.070363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 103.618340][ T4868] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.514620][ T4896] syz.2.165 (4896) used greatest stack depth: 17656 bytes left [ 104.681125][ T4899] loop2: detected capacity change from 0 to 256 [ 104.749169][ T4899] exfat: Bad value for 'umask' [ 104.769185][ T4904] loop1: detected capacity change from 0 to 512 [ 104.775464][ T4901] device syzkaller0 entered promiscuous mode [ 105.318012][ T4909] loop3: detected capacity change from 0 to 512 [ 106.744245][ T4909] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 106.751769][ T4909] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.864559][ T4909] EXT4-fs (loop3): orphan cleanup on readonly fs [ 106.880102][ T4909] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 106.899302][ T4909] EXT4-fs (loop3): Remounting filesystem read-only [ 106.907063][ T4909] Quota error (device loop3): write_blk: dquota write failed [ 106.914729][ T4909] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 106.925002][ T4909] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.175: Failed to acquire dquot type 0 [ 106.945861][ T4909] EXT4-fs (loop3): Remounting filesystem read-only [ 106.957222][ T4909] EXT4-fs (loop3): 1 truncate cleaned up [ 107.013625][ T4909] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 107.099617][ T4904] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 107.129537][ T4904] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.234642][ T4904] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.176: bg 0: block 416: padding at end of block bitmap is not set [ 107.255456][ T4904] EXT4-fs (loop1): Remounting filesystem read-only [ 107.267229][ T4904] Quota error (device loop1): write_blk: dquota write failed [ 107.298229][ T4904] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 107.332131][ T4904] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 107.364980][ T4920] netlink: 'syz.3.178': attribute type 4 has an invalid length. [ 107.373300][ T4918] Quota error (device loop1): write_blk: dquota write failed [ 107.421378][ T4904] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.176: Failed to acquire dquot type 1 [ 107.480594][ T4918] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 107.507338][ T4174] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.526138][ T4918] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 107.536730][ T4922] netlink: 'syz.3.178': attribute type 4 has an invalid length. [ 107.572367][ T4918] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.176: Failed to acquire dquot type 1 [ 107.596494][ T4918] EXT4-fs (loop1): Remounting filesystem read-only [ 107.602932][ T4904] EXT4-fs (loop1): Remounting filesystem read-only [ 109.186779][ T4174] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 109.194981][ T4174] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 109.239006][ T4174] usb 3-1: config 0 has no interface number 0 [ 109.297469][ T4920] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.306818][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.587259][ T4174] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 109.600352][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.611298][ T4174] usb 3-1: Product: syz [ 109.615764][ T4174] usb 3-1: Manufacturer: syz [ 109.624651][ T4174] usb 3-1: SerialNumber: syz [ 109.679760][ T4174] usb 3-1: config 0 descriptor?? [ 109.987202][ T4174] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 110.015414][ T4174] usb 3-1: No valid video chain found. [ 110.043231][ T4174] usb 3-1: USB disconnect, device number 6 [ 110.357994][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.436851][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.796726][ T4695] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.066960][ T4695] usb 3-1: Using ep0 maxpacket: 16 [ 111.078841][ T4920] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.092310][ T4920] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.104044][ T4920] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.113334][ T4920] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.198619][ T4695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.239067][ T4957] loop0: detected capacity change from 0 to 512 [ 111.289022][ T4695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.335787][ T4695] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.349412][ T4957] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 111.356853][ T4957] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.422021][ T4695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.452154][ T4957] EXT4-fs (loop0): orphan cleanup on readonly fs [ 111.466330][ T4957] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 111.495634][ T4957] EXT4-fs (loop0): Remounting filesystem read-only [ 111.503000][ T4957] Quota error (device loop0): write_blk: dquota write failed [ 111.511094][ T4957] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 111.521289][ T4957] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.189: Failed to acquire dquot type 0 [ 111.539955][ T4957] EXT4-fs (loop0): Remounting filesystem read-only [ 111.549007][ T4957] EXT4-fs (loop0): 1 truncate cleaned up [ 111.625392][ T4695] usb 3-1: config 0 descriptor?? [ 111.643902][ T4957] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 112.125394][ T4960] loop0: detected capacity change from 0 to 256 [ 112.148566][ T4695] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 112.190810][ T4695] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 112.201850][ T4960] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 112.225047][ T4695] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 112.234213][ T4695] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 112.256199][ T4695] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 112.316020][ T4695] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 112.366576][ T4695] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 112.538594][ T4695] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 112.545959][ T4695] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 112.553842][ T4695] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 112.576740][ T4695] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input8 [ 112.701038][ T4695] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 112.740343][ T4968] loop4: detected capacity change from 0 to 32768 [ 112.820356][ T4968] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.193 (4968) [ 113.016973][ T4968] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 113.016973][ T4691] usb 3-1: USB disconnect, device number 7 [ 113.031681][ T4968] BTRFS info (device loop4): enabling disk space caching [ 113.038795][ T4968] BTRFS info (device loop4): force clearing of disk cache [ 113.046364][ T4968] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.055801][ T4968] BTRFS info (device loop4): use zstd compression, level 3 [ 113.063088][ T4968] BTRFS info (device loop4): disk space caching is enabled [ 113.070574][ T4968] BTRFS info (device loop4): has skinny extents [ 114.246754][ T4968] BTRFS info (device loop4): enabling ssd optimizations [ 114.256383][ T4968] BTRFS info (device loop4): clearing free space tree [ 114.263336][ T4968] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.273192][ T4968] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.914399][ T5020] loop2: detected capacity change from 0 to 512 [ 115.996231][ T5020] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 116.003642][ T5020] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.142868][ T5020] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.153971][ T5020] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 116.178011][ T5020] EXT4-fs (loop2): Remounting filesystem read-only [ 116.185554][ T5020] Quota error (device loop2): write_blk: dquota write failed [ 116.193115][ T5020] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 116.203028][ T5020] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.201: Failed to acquire dquot type 0 [ 116.217869][ T5020] EXT4-fs (loop2): Remounting filesystem read-only [ 116.224674][ T5020] EXT4-fs (loop2): 1 truncate cleaned up [ 116.292541][ T5020] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 118.194819][ T5044] loop4: detected capacity change from 0 to 256 [ 118.266943][ T5019] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 118.555850][ T5044] FAT-fs (loop4): Directory bread(block 64) failed [ 118.586882][ T5044] FAT-fs (loop4): Directory bread(block 65) failed [ 118.593748][ T5044] FAT-fs (loop4): Directory bread(block 66) failed [ 118.788266][ T5044] FAT-fs (loop4): Directory bread(block 67) failed [ 118.876509][ T5044] FAT-fs (loop4): Directory bread(block 68) failed [ 119.024403][ T5044] FAT-fs (loop4): Directory bread(block 69) failed [ 119.132716][ T5044] FAT-fs (loop4): Directory bread(block 70) failed [ 119.139464][ T5044] FAT-fs (loop4): Directory bread(block 71) failed [ 119.146149][ T5044] FAT-fs (loop4): Directory bread(block 72) failed [ 119.153226][ T5044] FAT-fs (loop4): Directory bread(block 73) failed [ 119.296780][ T5019] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 119.317319][ T5019] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.360525][ T5019] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.416660][ T5019] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 119.547186][ T5019] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.564954][ T5019] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 119.586923][ T5019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.607640][ T5019] usb 3-1: config 0 descriptor?? [ 119.826731][ T4233] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.132097][ T5019] hid-alps 0003:044E:120C.0004: unbalanced collection at end of report description [ 120.165900][ T5019] hid-alps 0003:044E:120C.0004: parse failed [ 120.197270][ T5019] hid-alps: probe of 0003:044E:120C.0004 failed with error -22 [ 120.256955][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.357771][ T5019] usb 3-1: USB disconnect, device number 8 [ 120.359669][ T4233] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.444643][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.513452][ T4233] usb 5-1: config 0 descriptor?? [ 120.856777][ T4233] usbhid 5-1:0.0: can't add hid device: -71 [ 120.862869][ T4233] usbhid: probe of 5-1:0.0 failed with error -71 [ 120.880209][ T4233] usb 5-1: USB disconnect, device number 3 [ 121.164381][ T5068] loop2: detected capacity change from 0 to 512 [ 121.221312][ T5068] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 121.229280][ T5068] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.454761][ T5068] EXT4-fs (loop2): orphan cleanup on readonly fs [ 121.466919][ T5068] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 121.489957][ T5068] EXT4-fs (loop2): Remounting filesystem read-only [ 121.497425][ T5068] Quota error (device loop2): write_blk: dquota write failed [ 121.505174][ T5068] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 121.515468][ T5068] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.213: Failed to acquire dquot type 0 [ 121.531158][ T5068] EXT4-fs (loop2): Remounting filesystem read-only [ 121.538723][ T5068] EXT4-fs (loop2): 1 truncate cleaned up [ 121.551097][ T4233] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.564990][ T5068] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 122.136513][ T5076] loop0: detected capacity change from 0 to 256 [ 122.340299][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.420724][ T4233] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.701919][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.028774][ T4233] usb 5-1: config 0 descriptor?? [ 123.066781][ T4233] usb 5-1: can't set config #0, error -71 [ 123.087114][ T4233] usb 5-1: USB disconnect, device number 4 [ 123.103609][ T5086] capability: warning: `syz.4.220' uses deprecated v2 capabilities in a way that may be insecure [ 124.840862][ T5102] loop1: detected capacity change from 0 to 128 [ 125.104442][ T5102] FAT-fs (loop1): Directory bread(block 414) failed [ 125.134162][ T5102] FAT-fs (loop1): Directory bread(block 415) failed [ 125.537803][ T5102] FAT-fs (loop1): Directory bread(block 416) failed [ 125.544480][ T5102] FAT-fs (loop1): Directory bread(block 417) failed [ 125.553839][ T5102] FAT-fs (loop1): Directory bread(block 418) failed [ 125.561599][ T5102] FAT-fs (loop1): Directory bread(block 419) failed [ 125.599521][ T5115] loop2: detected capacity change from 0 to 128 [ 125.666108][ T5102] FAT-fs (loop1): Directory bread(block 420) failed [ 125.739227][ T5122] loop3: detected capacity change from 0 to 512 [ 125.882887][ T5122] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 125.890328][ T5122] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.053797][ T5115] EXT4-fs (loop2): Test dummy encryption mode enabled [ 126.278013][ T5102] FAT-fs (loop1): Directory bread(block 421) failed [ 128.616912][ T5122] EXT4-fs: failed to create workqueue [ 128.622524][ T5122] EXT4-fs (loop3): mount failed [ 128.654113][ T5115] EXT4-fs: error -4 creating inode table initialization thread [ 128.667026][ T5115] EXT4-fs (loop2): mount failed [ 128.982666][ T5128] loop0: detected capacity change from 0 to 2048 [ 130.466347][ T5128] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.557061][ T5128] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.733214][ T5167] loop0: detected capacity change from 0 to 512 [ 131.956358][ T5164] loop2: detected capacity change from 0 to 40427 [ 132.045122][ T5167] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 132.052521][ T5167] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.091849][ T5164] F2FS-fs (loop2): invalid crc value [ 132.199934][ T5164] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.568395][ T5167] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.682272][ T5167] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 132.700333][ T5167] EXT4-fs (loop0): Remounting filesystem read-only [ 132.707199][ T5167] Quota error (device loop0): write_blk: dquota write failed [ 132.715827][ T5167] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 132.725919][ T5167] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.245: Failed to acquire dquot type 0 [ 132.738432][ T5167] EXT4-fs (loop0): Remounting filesystem read-only [ 132.746369][ T5167] EXT4-fs (loop0): 1 truncate cleaned up [ 132.766459][ T5167] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 132.968985][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.977081][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.063215][ T5164] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.130405][ T5164] F2FS-fs (loop2): Inconsistent error blkaddr:5633, sit bitmap:0 [ 133.139914][ T5164] CPU: 0 PID: 5164 Comm: syz.2.243 Not tainted syzkaller #0 [ 133.147206][ T5164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.150587][ T5177] cgroup: Need name or subsystem set [ 133.157355][ T5164] Call Trace: [ 133.157397][ T5164] [ 133.157405][ T5164] dump_stack_lvl+0x188/0x250 [ 133.157433][ T5164] ? show_regs_print_info+0x20/0x20 [ 133.157454][ T5164] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 133.157482][ T5164] ? unlock_page+0x17c/0x1f0 [ 133.189499][ T5164] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 133.194863][ T5164] f2fs_get_read_data_page+0x2c4/0x580 [ 133.200312][ T5164] ? f2fs_get_block+0x2a0/0x2a0 [ 133.205159][ T5164] ? __lock_acquire+0x7d10/0x7d10 [ 133.210175][ T5164] f2fs_find_data_page+0x1c2/0x5d0 [ 133.215269][ T5164] f2fs_readdir+0x4b3/0xda0 [ 133.219767][ T5164] ? f2fs_fill_dentries+0xd10/0xd10 [ 133.224948][ T5164] ? mutex_lock_io_nested+0x60/0x60 [ 133.230145][ T5164] ? end_current_label_crit_section+0x14b/0x170 [ 133.236372][ T5164] ? iterate_dir+0x10d/0x560 [ 133.240960][ T5164] ? down_read_killable+0x1ce/0x340 [ 133.246152][ T5164] ? fsnotify_perm+0x254/0x560 [ 133.250920][ T5164] iterate_dir+0x218/0x560 [ 133.255348][ T5164] ? f2fs_fill_dentries+0xd10/0xd10 [ 133.260535][ T5164] __se_sys_getdents64+0xf2/0x270 [ 133.265635][ T5164] ? __x64_sys_getdents64+0x80/0x80 [ 133.270833][ T5164] ? filldir+0x720/0x720 [ 133.275069][ T5164] ? vtime_user_exit+0x2c8/0x3e0 [ 133.280019][ T5164] ? lockdep_hardirqs_on+0x94/0x140 [ 133.285230][ T5164] do_syscall_64+0x4c/0xa0 [ 133.289654][ T5164] ? clear_bhb_loop+0x30/0x80 [ 133.294312][ T5164] ? clear_bhb_loop+0x30/0x80 [ 133.299057][ T5164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.304935][ T5164] RIP: 0033:0x7f93eaf63799 [ 133.309332][ T5164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.328930][ T5164] RSP: 002b:00007f93e91bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 133.337334][ T5164] RAX: ffffffffffffffda RBX: 00007f93eb1dcfa0 RCX: 00007f93eaf63799 [ 133.345302][ T5164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 133.353289][ T5164] RBP: 00007f93eaff9c99 R08: 0000000000000000 R09: 0000000000000000 [ 133.361252][ T5164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.369481][ T5164] R13: 00007f93eb1dd038 R14: 00007f93eb1dcfa0 R15: 00007ffe311adee8 [ 133.377446][ T5164] [ 135.220667][ T5192] fuse: Bad value for 'fd' [ 135.374852][ T5198] loop3: detected capacity change from 0 to 512 [ 135.411869][ T5198] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (47215!=33349) [ 135.504146][ T5198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 135.520591][ T5198] EXT4-fs (loop3): orphan cleanup on readonly fs [ 135.527415][ T5198] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.254: bad orphan inode 3 [ 135.560131][ T4366] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.567182][ T5198] EXT4-fs (loop3): Remounting filesystem read-only [ 135.577972][ T5198] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,max_batch_time=0x0000000000000009,errors=remount-ro,user_xattr. Quota mode: none. [ 135.740131][ T5198] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.254: dx entry: limit 0 != root limit 125 [ 135.772863][ T5198] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.254: Corrupt directory, running e2fsck is recommended [ 135.806505][ T5198] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 5: comm syz.3.254: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 136.668840][ T5220] loop3: detected capacity change from 0 to 256 [ 136.848935][ T5220] FAT-fs (loop3): Directory bread(block 64) failed [ 136.938054][ T5220] FAT-fs (loop3): Directory bread(block 65) failed [ 136.970615][ T5220] FAT-fs (loop3): Directory bread(block 66) failed [ 137.116842][ T5220] FAT-fs (loop3): Directory bread(block 67) failed [ 137.238042][ T5220] FAT-fs (loop3): Directory bread(block 68) failed [ 137.250624][ T5220] FAT-fs (loop3): Directory bread(block 69) failed [ 137.923119][ T4949] Bluetooth: hci5: command 0x1003 tx timeout [ 137.929267][ T146] Bluetooth: hci5: sending frame failed (-49) [ 137.954697][ T5220] FAT-fs (loop3): Directory bread(block 70) failed [ 137.962101][ T5220] FAT-fs (loop3): Directory bread(block 71) failed [ 137.976719][ T5220] FAT-fs (loop3): Directory bread(block 72) failed [ 138.250008][ T5220] FAT-fs (loop3): Directory bread(block 73) failed [ 138.548866][ T5238] loop3: detected capacity change from 0 to 256 [ 138.589016][ T4228] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 138.610520][ T5238] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 138.896942][ T4228] usb 3-1: Using ep0 maxpacket: 16 [ 139.406561][ T5248] loop1: detected capacity change from 0 to 512 [ 139.709190][ T5248] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 139.716948][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.733071][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.753619][ T5248] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.966736][ T4949] Bluetooth: hci5: command 0x1001 tx timeout [ 139.972849][ T146] Bluetooth: hci5: sending frame failed (-49) [ 139.996810][ T4228] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.005899][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.015421][ T4228] usb 3-1: Product: syz [ 140.019697][ T4228] usb 3-1: Manufacturer: syz [ 140.024299][ T4228] usb 3-1: SerialNumber: syz [ 140.216845][ T1324] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.408837][ T4228] usb 3-1: 0:2 : does not exist [ 140.637516][ T1324] usb 4-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config [ 140.715666][ T1324] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 140.753206][ T4228] usb 3-1: USB disconnect, device number 9 [ 140.840306][ T1324] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.178501][ T1324] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 141.220075][ T4407] udevd[4407]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.244318][ T5270] loop2: detected capacity change from 0 to 512 [ 141.304997][ T5270] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 141.312487][ T5270] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.387014][ T5270] EXT4-fs (loop2): orphan cleanup on readonly fs [ 141.397949][ T5270] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 141.415055][ T5270] EXT4-fs (loop2): Remounting filesystem read-only [ 141.422017][ T5270] Quota error (device loop2): write_blk: dquota write failed [ 141.429717][ T5270] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 141.439621][ T5270] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.276: Failed to acquire dquot type 0 [ 141.452212][ T5270] EXT4-fs (loop2): Remounting filesystem read-only [ 141.459720][ T5270] EXT4-fs (loop2): 1 truncate cleaned up [ 141.470281][ T5270] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 141.526872][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.536046][ T1324] usb 4-1: Product: syz [ 141.540530][ T1324] usb 4-1: Manufacturer: syz [ 141.545442][ T1324] usb 4-1: SerialNumber: syz [ 141.697933][ T1324] usb 4-1: config 0 descriptor?? [ 142.057170][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 142.106815][ T1324] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 142.118363][ T1324] usb 4-1: No valid video chain found. [ 142.134423][ T1324] usb 4-1: USB disconnect, device number 6 [ 144.858599][ T5306] loop0: detected capacity change from 0 to 512 [ 146.244087][ T5306] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 146.251402][ T5306] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.815873][ T5306] EXT4-fs: failed to create workqueue [ 147.821377][ T5306] EXT4-fs (loop0): mount failed [ 148.256885][ T4693] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.655389][ T5322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.294'. [ 148.710192][ T4693] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 127 [ 148.749871][ T4693] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.781144][ T5327] loop4: detected capacity change from 0 to 128 [ 148.787034][ T4693] usb 1-1: config 0 has no interfaces? [ 148.877810][ T5327] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.908031][ T5327] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.976899][ T4693] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 148.986000][ T4693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 148.994176][ T4693] usb 1-1: Product: syz [ 148.998501][ T4693] usb 1-1: Manufacturer: syz [ 149.003098][ T4693] usb 1-1: SerialNumber: syz [ 149.010627][ T4693] usb 1-1: config 0 descriptor?? [ 149.016719][ T4228] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 149.263957][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 149.523370][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.153635][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.164053][ T4228] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 150.173452][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.192747][ T4228] usb 3-1: config 0 descriptor?? [ 150.472244][ T5342] syz.1.298 uses obsolete (PF_INET,SOCK_PACKET) [ 150.713438][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.722297][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.727262][ T5346] loop3: detected capacity change from 0 to 128 [ 150.730275][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.744239][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.751843][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.759664][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.764637][ T5346] EXT4-fs (loop3): Ignoring removed nobh option [ 150.770641][ T5347] loop4: detected capacity change from 0 to 256 [ 150.780002][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.787628][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.788815][ T5346] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 150.796239][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.817339][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.824943][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.832938][ T5346] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.845001][ T5347] exfat: Deprecated parameter 'utf8' [ 150.859449][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.870108][ T5347] exfat: Deprecated parameter 'namecase' [ 150.880457][ T4228] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 150.896126][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.901868][ T5347] exfat: Deprecated parameter 'namecase' [ 150.912141][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.917599][ T5347] exfat: Deprecated parameter 'utf8' [ 150.928941][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.936562][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.944237][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.956233][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.963999][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.965390][ T5347] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 150.971708][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 150.993787][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 151.002856][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 151.010484][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 151.018059][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 151.025579][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 151.033192][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 151.034347][ T26] audit: type=1800 audit(1773343655.659:4): pid=5347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.300" name="file1" dev="loop4" ino=1048628 res=0 errno=0 [ 151.040730][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 151.040754][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 151.076786][ T1324] hid-generic 0100:0000:0009.0005: unknown main item tag 0x0 [ 151.087494][ T1324] hid-generic 0100:0000:0009.0005: hidraw1: HID v0.09 Device [syz1] on syz1 [ 151.173368][ T4693] usb 3-1: USB disconnect, device number 10 [ 151.276198][ T1324] usb 1-1: USB disconnect, device number 5 [ 151.536842][ T4228] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 151.538255][ T5357] fido_id[5357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 151.572163][ T5361] fido_id[5361]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 151.812067][ T5366] loop0: detected capacity change from 0 to 512 [ 152.107152][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.265931][ T5366] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 152.273354][ T5366] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.501816][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.655033][ T5366] EXT4-fs (loop0): orphan cleanup on readonly fs [ 152.675205][ T5366] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 152.694350][ T5366] EXT4-fs (loop0): Remounting filesystem read-only [ 152.701481][ T5366] Quota error (device loop0): write_blk: dquota write failed [ 152.709293][ T5366] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 152.719470][ T5366] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.316: Failed to acquire dquot type 0 [ 152.730986][ T4228] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.741692][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.827561][ T5366] EXT4-fs (loop0): Remounting filesystem read-only [ 152.835145][ T5366] EXT4-fs (loop0): 1 truncate cleaned up [ 152.873230][ T5366] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 153.119176][ T4228] usb 2-1: config 0 descriptor?? [ 153.298238][ T4228] hub 2-1:0.0: USB hub found [ 153.517580][ T4228] hub 2-1:0.0: 25 ports detected [ 153.537685][ T4228] hub 2-1:0.0: insufficient power available to use all downstream ports [ 154.437554][ T4228] usb 2-1: USB disconnect, device number 6 [ 155.390249][ T5411] loop1: detected capacity change from 0 to 512 [ 155.539023][ T5410] netlink: 224 bytes leftover after parsing attributes in process `syz.0.318'. [ 155.677432][ T5411] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 155.684909][ T5411] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.217027][ T5411] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.239299][ T5411] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 156.254637][ T5411] EXT4-fs (loop1): Remounting filesystem read-only [ 156.261424][ T5411] Quota error (device loop1): write_blk: dquota write failed [ 156.269002][ T5411] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 156.278916][ T5411] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.319: Failed to acquire dquot type 0 [ 156.304024][ T5411] EXT4-fs (loop1): Remounting filesystem read-only [ 156.311112][ T5411] EXT4-fs (loop1): 1 truncate cleaned up [ 156.319184][ T5411] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 157.876726][ T5434] loop1: detected capacity change from 0 to 512 [ 157.922890][ T5434] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 157.930296][ T5434] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.955661][ T5434] EXT4-fs (loop1): orphan cleanup on readonly fs [ 178.339992][ T5434] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 178.355038][ T5434] EXT4-fs (loop1): Remounting filesystem read-only [ 178.361938][ T5434] Quota error (device loop1): write_blk: dquota write failed [ 178.369453][ T5434] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 178.379341][ T5434] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.324: Failed to acquire dquot type 0 [ 178.393038][ T4949] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 178.407592][ T5434] EXT4-fs (loop1): Remounting filesystem read-only [ 178.414579][ T5434] EXT4-fs (loop1): 1 truncate cleaned up [ 178.421908][ T5434] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 179.546350][ T4286] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.684238][ T4286] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.815698][ T4286] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.888735][ T4286] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.058928][ T5446] chnl_net:caif_netlink_parms(): no params data found [ 180.156157][ T5448] chnl_net:caif_netlink_parms(): no params data found [ 180.239299][ T5449] chnl_net:caif_netlink_parms(): no params data found [ 180.266115][ T5454] chnl_net:caif_netlink_parms(): no params data found [ 180.300599][ T5450] chnl_net:caif_netlink_parms(): no params data found [ 180.382417][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.390258][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.398951][ T5448] device bridge_slave_0 entered promiscuous mode [ 180.412541][ T5448] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.421148][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.429406][ T5448] device bridge_slave_1 entered promiscuous mode [ 180.470222][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.477721][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.485927][ T5446] device bridge_slave_0 entered promiscuous mode [ 180.513765][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.520996][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.531754][ T5446] device bridge_slave_1 entered promiscuous mode [ 180.617783][ T5448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.644260][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.652768][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.661486][ T5449] device bridge_slave_0 entered promiscuous mode [ 180.671527][ T5446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.682986][ T5448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.717938][ T5446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.741193][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.750102][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.758201][ T5449] device bridge_slave_1 entered promiscuous mode [ 180.792308][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.799877][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.808248][ T5454] device bridge_slave_0 entered promiscuous mode [ 180.826959][ T5446] team0: Port device team_slave_0 added [ 180.847091][ T5449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.862139][ T5448] team0: Port device team_slave_0 added [ 180.871519][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.878847][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.887523][ T5450] device bridge_slave_0 entered promiscuous mode [ 180.894902][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.903223][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.911535][ T5454] device bridge_slave_1 entered promiscuous mode [ 180.921299][ T5446] team0: Port device team_slave_1 added [ 180.941614][ T5449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.952245][ T5448] team0: Port device team_slave_1 added [ 180.974591][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.983363][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.991879][ T5450] device bridge_slave_1 entered promiscuous mode [ 181.006102][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.013166][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.039217][ T5446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.058839][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.065896][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.093378][ T5446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.116411][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.123732][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.150093][ T5448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.187308][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.194288][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.232633][ T5448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.246914][ T4233] Bluetooth: hci2: command 0x0409 tx timeout [ 181.279762][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.293546][ T5449] team0: Port device team_slave_0 added [ 181.345724][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.366360][ T5450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.377238][ T5449] team0: Port device team_slave_1 added [ 181.384911][ T5450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.406780][ T4949] Bluetooth: hci3: command 0x0409 tx timeout [ 181.416726][ T5015] Bluetooth: hci5: command 0x0409 tx timeout [ 181.429978][ T5446] device hsr_slave_0 entered promiscuous mode [ 181.437408][ T5446] device hsr_slave_1 entered promiscuous mode [ 181.444039][ T5446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.452385][ T5446] Cannot create hsr debugfs directory [ 181.486739][ T4949] Bluetooth: hci0: command 0x0409 tx timeout [ 181.500533][ T5450] team0: Port device team_slave_0 added [ 181.539584][ T5454] team0: Port device team_slave_0 added [ 181.548710][ T5450] team0: Port device team_slave_1 added [ 181.571738][ T4949] Bluetooth: hci1: command 0x0409 tx timeout [ 181.585910][ T5448] device hsr_slave_0 entered promiscuous mode [ 181.593542][ T5448] device hsr_slave_1 entered promiscuous mode [ 181.600624][ T5448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.613980][ T5448] Cannot create hsr debugfs directory [ 181.623581][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.631412][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.665823][ T5449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.694273][ T5454] team0: Port device team_slave_1 added [ 181.725841][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.734051][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.760631][ T5449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.826756][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.833950][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.860525][ T5450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.894203][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.902142][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.930869][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.943053][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.950423][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.976467][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.997577][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.004645][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.030993][ T5450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.145064][ T5450] device hsr_slave_0 entered promiscuous mode [ 182.153229][ T5450] device hsr_slave_1 entered promiscuous mode [ 182.160966][ T5450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.168918][ T5450] Cannot create hsr debugfs directory [ 182.187731][ T5454] device hsr_slave_0 entered promiscuous mode [ 182.194676][ T5454] device hsr_slave_1 entered promiscuous mode [ 182.201823][ T5454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.209834][ T5454] Cannot create hsr debugfs directory [ 182.219884][ T5449] device hsr_slave_0 entered promiscuous mode [ 182.227002][ T5449] device hsr_slave_1 entered promiscuous mode [ 182.234357][ T5449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.242383][ T5449] Cannot create hsr debugfs directory [ 182.504282][ T5446] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.580979][ T5446] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.664064][ T5446] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.726766][ T5446] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.801548][ T4286] device hsr_slave_0 left promiscuous mode [ 182.810074][ T4286] device hsr_slave_1 left promiscuous mode [ 182.816504][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.826159][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.835721][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.843790][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.852747][ T4286] device bridge_slave_1 left promiscuous mode [ 182.861205][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.875427][ T4286] device bridge_slave_0 left promiscuous mode [ 182.883946][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.907669][ T4286] device veth1_macvtap left promiscuous mode [ 182.914045][ T4286] device veth0_macvtap left promiscuous mode [ 182.922651][ T4286] device veth1_vlan left promiscuous mode [ 182.928963][ T4286] device veth0_vlan left promiscuous mode [ 183.119788][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 183.132835][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 183.150912][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.167871][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.245457][ T4286] bond0 (unregistering): Released all slaves [ 183.313741][ T5448] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 183.327309][ T4174] Bluetooth: hci2: command 0x041b tx timeout [ 183.354955][ T5448] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 183.419113][ T5448] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 183.446936][ T5448] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 183.486932][ T4174] Bluetooth: hci3: command 0x041b tx timeout [ 183.496169][ T5454] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 183.503154][ T4174] Bluetooth: hci5: command 0x041b tx timeout [ 183.560689][ T5454] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 183.582741][ T5454] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 183.589806][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 183.633430][ T5454] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 183.650606][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 183.668213][ T5449] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.718488][ T5449] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 183.753931][ T5449] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 183.769611][ T5446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.823742][ T5449] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 183.867938][ T5446] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.911835][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.929205][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.945182][ T5448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.975400][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.994307][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.006028][ T4913] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.013265][ T4913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.022155][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.034651][ T5450] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 184.087941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.115333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.136356][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.143495][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.163751][ T5450] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 184.181271][ T5448] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.215012][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.239278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.248842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.257124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.266065][ T5450] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 184.307452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.327874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.336519][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.343715][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.363337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.386003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.395146][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.402266][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.411734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.420736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.430254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.440247][ T5450] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.470074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.481310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.491298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.502614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.515847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.535658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.556406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.575574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.586549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.649711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.659942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.677554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.707329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.724110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.737709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.766403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.809157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.830032][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.858118][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.893232][ T5448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.920701][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.935461][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.954504][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.964726][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.983156][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.017431][ T5454] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.067182][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.077807][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.117300][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.124498][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.167681][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.208792][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.238567][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.257321][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.264419][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.291182][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.330964][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.349673][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.368287][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.394587][ T5449] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.407083][ T1324] Bluetooth: hci2: command 0x040f tx timeout [ 185.455422][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.479538][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.499466][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.519472][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.536303][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.556181][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.566008][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.576795][ T4261] Bluetooth: hci5: command 0x040f tx timeout [ 185.583314][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 185.586297][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.598958][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.607074][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.615584][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.623886][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.632400][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.648544][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 185.670400][ T5446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.682931][ T5448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.696515][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.727283][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.735917][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.743221][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.766788][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 185.815856][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.850830][ T5450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.910491][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.921683][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.942386][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.949537][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.977241][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.987387][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.013246][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.033428][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.042730][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.053292][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.062269][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.081536][ T5450] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.105421][ T5449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.120618][ T5449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.139123][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.158193][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.175957][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.186213][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.218273][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.252265][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.310098][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.328288][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.345813][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.366643][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.374037][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.382797][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.391628][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.401203][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.409203][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.417195][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.424810][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.434762][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.444739][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.464996][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.527341][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.550565][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.562225][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.572134][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.583396][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.593141][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.654945][ T5446] device veth0_vlan entered promiscuous mode [ 186.670386][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.684454][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.717919][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.747453][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.771272][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.787701][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.798122][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.816898][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.826128][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.835896][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.854966][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.884299][ T5448] device veth0_vlan entered promiscuous mode [ 186.898528][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.917018][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.944244][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.957764][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.977418][ T5446] device veth1_vlan entered promiscuous mode [ 186.993622][ T5448] device veth1_vlan entered promiscuous mode [ 187.023938][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.037568][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.062983][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.081390][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.094956][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.122705][ T5449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.195364][ T5448] device veth0_macvtap entered promiscuous mode [ 187.246071][ T4286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.286392][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.312030][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.321217][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.332592][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.341762][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.368379][ T5448] device veth1_macvtap entered promiscuous mode [ 187.421615][ T4286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.434623][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.445708][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.455696][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.464417][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.473811][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.481721][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.492697][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.500795][ T4949] Bluetooth: hci2: command 0x0419 tx timeout [ 187.509361][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.517714][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.526451][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.538700][ T5454] device veth0_vlan entered promiscuous mode [ 187.560142][ T5450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.594223][ T4286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.631644][ T5446] device veth0_macvtap entered promiscuous mode [ 187.654273][ T5454] device veth1_vlan entered promiscuous mode [ 187.661201][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 187.667828][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 187.680947][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.707188][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.718324][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.730082][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.736889][ T4949] Bluetooth: hci0: command 0x0419 tx timeout [ 187.740811][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.757035][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.769062][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.780383][ T5446] device veth1_macvtap entered promiscuous mode [ 187.806015][ T4286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.818645][ T4174] Bluetooth: hci1: command 0x0419 tx timeout [ 187.846015][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.854884][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.864241][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.872964][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.881113][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.890996][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.912166][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.923764][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.933800][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.944373][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.954288][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.965118][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.977645][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.997465][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.008325][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.019054][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.029730][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.041748][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.052581][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.062548][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.073342][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.085371][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.096269][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.107249][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.117435][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.136709][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.155841][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.166513][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.177244][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.187755][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.198725][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.206335][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.215974][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.225673][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.234938][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.244405][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.253296][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.274997][ T5448] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.284142][ T5448] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.293430][ T5448] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.303940][ T5448] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.323351][ T5446] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.332974][ T5446] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.342172][ T5446] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.369417][ T5446] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.386461][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.404564][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.421107][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.430130][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.452667][ T5454] device veth0_macvtap entered promiscuous mode [ 188.497540][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.505636][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.516048][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.528288][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.538521][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.547429][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.556483][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.577975][ T5449] device veth0_vlan entered promiscuous mode [ 188.617914][ T5454] device veth1_macvtap entered promiscuous mode [ 188.723891][ T5449] device veth1_vlan entered promiscuous mode [ 188.753822][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.780976][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.795904][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.813447][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.824679][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.835669][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.846176][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.859955][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.870998][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.881970][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.901005][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.947632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.956779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.968324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.979864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.990236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.038449][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.057086][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.070047][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.083480][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.094988][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.106503][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.116879][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.127860][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.137987][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.149145][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.161461][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.197822][ T5450] device veth0_vlan entered promiscuous mode [ 189.214279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.227028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.235373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.244322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.253847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.262215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.281202][ T5454] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.290675][ T5454] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.300127][ T5454] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.313074][ T5454] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.332220][ T4286] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.353753][ T4913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.363634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.371892][ T4913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.381753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.397358][ T5450] device veth1_vlan entered promiscuous mode [ 189.439486][ T5449] device veth0_macvtap entered promiscuous mode [ 189.449176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.457136][ T4913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.464959][ T4913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.467169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.482054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.492197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.524864][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.535481][ T4286] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.538528][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.560638][ T5449] device veth1_macvtap entered promiscuous mode [ 189.593751][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.605249][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.616169][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.634724][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.645246][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.659555][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.670390][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.680486][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.691609][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.701669][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.712712][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.723053][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.733803][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.745271][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.756081][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.767586][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.785886][ T5450] device veth0_macvtap entered promiscuous mode [ 189.819860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.835945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.847157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.855846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.864884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.875061][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.876233][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.884555][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.903663][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.914228][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.925055][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.935181][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.945906][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.956864][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.970297][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.982186][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.993087][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.004957][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.016256][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.028620][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.045751][ T4286] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.065332][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.074874][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.084194][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.097863][ T5450] device veth1_macvtap entered promiscuous mode [ 190.153354][ T5449] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.173495][ T5449] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.187284][ T5449] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.196089][ T5449] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.228637][ T4286] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.261361][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.305969][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.330640][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.343940][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.355833][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.371768][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.386520][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.398887][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.411312][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.430484][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.449841][ T5630] loop8: detected capacity change from 0 to 512 [ 190.467485][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.478643][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.494216][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.507206][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.550789][ T5450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.570039][ T5630] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 190.577553][ T5630] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.607601][ T4228] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 190.625693][ T5630] EXT4-fs (loop8): orphan cleanup on readonly fs [ 190.640088][ T5630] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 190.663092][ T5630] EXT4-fs (loop8): Remounting filesystem read-only [ 190.670532][ T5630] Quota error (device loop8): write_blk: dquota write failed [ 190.678709][ T5630] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 190.689918][ T5630] EXT4-fs error (device loop8): ext4_acquire_dquot:6234: comm syz.8.331: Failed to acquire dquot type 0 [ 190.705545][ T5630] EXT4-fs (loop8): Remounting filesystem read-only [ 190.712518][ T5630] EXT4-fs (loop8): 1 truncate cleaned up [ 190.722812][ T5630] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 190.815130][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.854971][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.887984][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.947692][ T4228] usb 6-1: Using ep0 maxpacket: 32 [ 190.985907][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.005952][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.075359][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.161900][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.175177][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.214605][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.225696][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.235906][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.261814][ T4228] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 191.271974][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.282178][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.290502][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.303333][ T4228] usb 6-1: config 0 descriptor?? [ 191.312111][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.324649][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.337249][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.357839][ T4228] hub 6-1:0.0: USB hub found [ 191.364114][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.384952][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.396031][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.415595][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.447845][ T5450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.479605][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.503832][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.550274][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.596887][ T4228] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 191.926718][ T5644] syz.8.332 (5644): /proc/5640/oom_adj is deprecated, please use /proc/5640/oom_score_adj instead. [ 192.118044][ T5450] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.141581][ T5450] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.155172][ T5450] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.171172][ T5450] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.201120][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.250228][ T4228] hid-generic 0003:046D:C31C.0007: item fetching failed at offset 0/1 [ 192.287987][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.308600][ T4228] hid-generic: probe of 0003:046D:C31C.0007 failed with error -22 [ 192.371031][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.532971][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.547070][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.598774][ T5606] usb 6-1: USB disconnect, device number 2 [ 192.647789][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.684069][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.909463][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.330765][ T5664] netlink: 224 bytes leftover after parsing attributes in process `syz.9.330'. [ 193.588011][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.017220][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.042345][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.179131][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.184337][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.388809][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.549733][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.623290][ T150] block nbd8: Attempted send on invalid socket [ 194.658519][ T150] blk_update_request: I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.676205][ T5686] FAT-fs (nbd8): unable to read boot sector [ 195.000800][ T4286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.773959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.789885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.965315][ T4286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.120539][ T4286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.321567][ T4286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.216138][ T5741] netlink: 224 bytes leftover after parsing attributes in process `syz.6.344'. [ 201.957207][ T5752] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 204.946855][ T5797] netlink: 224 bytes leftover after parsing attributes in process `syz.7.357'. [ 205.091413][ T5809] loop6: detected capacity change from 0 to 512 [ 205.296720][ T4692] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 205.766956][ T4692] usb 8-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 205.844137][ T4692] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.311154][ T4692] usb 8-1: config 0 descriptor?? [ 206.706924][ T4692] hackrf 8-1:0.0: usb_control_msg() failed -71 request 0e [ 206.980053][ T4692] hackrf 8-1:0.0: Could not detect board [ 206.985791][ T4692] hackrf: probe of 8-1:0.0 failed with error -71 [ 207.476879][ T4692] usb 8-1: USB disconnect, device number 3 [ 208.437853][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.360'. [ 208.680415][ T5827] netlink: 76 bytes leftover after parsing attributes in process `syz.7.362'. [ 209.356714][ T4233] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 209.636725][ T4233] usb 7-1: Using ep0 maxpacket: 16 [ 209.766974][ T4233] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.027173][ T4233] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.049776][ T5836] netlink: 'syz.7.364': attribute type 4 has an invalid length. [ 211.206863][ T4233] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.280735][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.326727][ T4233] usb 7-1: Product: syz [ 211.332239][ T4233] usb 7-1: Manufacturer: syz [ 211.356845][ T4233] usb 7-1: SerialNumber: syz [ 211.507116][ T4233] usb 7-1: can't set config #1, error -71 [ 211.550574][ T4233] usb 7-1: USB disconnect, device number 2 [ 214.099659][ T5877] 9pnet: Insufficient options for proto=fd [ 214.176889][ T4233] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 214.443539][ T4233] usb 7-1: Using ep0 maxpacket: 8 [ 215.496609][ C0] raw-gadget.0 gadget: ignoring, device is not running [ 215.536778][ T4233] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 215.562541][ T4233] usb 7-1: can't read configurations, error -71 [ 215.805861][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.379'. [ 216.586172][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.379'. [ 216.967988][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.8.386'. [ 217.984654][ T5912] loop7: detected capacity change from 0 to 40427 [ 218.089024][ T5912] F2FS-fs (loop7): invalid crc value [ 218.192796][ T5912] F2FS-fs (loop7): Found nat_bits in checkpoint [ 218.324173][ T5912] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 218.671572][ T4286] device hsr_slave_0 left promiscuous mode [ 218.681473][ T4286] device hsr_slave_1 left promiscuous mode [ 218.717050][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.724538][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.798142][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.805636][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.917994][ T4286] device bridge_slave_1 left promiscuous mode [ 218.924897][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.957601][ T4286] device bridge_slave_0 left promiscuous mode [ 218.963769][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.090370][ T4286] device hsr_slave_0 left promiscuous mode [ 219.322857][ T5935] delete_channel: no stack [ 219.449125][ T4286] device hsr_slave_1 left promiscuous mode [ 219.468774][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.506883][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.543281][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.585507][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.619778][ T4286] device bridge_slave_1 left promiscuous mode [ 219.652446][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.783399][ T4286] device bridge_slave_0 left promiscuous mode [ 219.798350][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.134302][ T5982] netlink: 224 bytes leftover after parsing attributes in process `syz.5.393'. [ 220.736002][ T4286] device hsr_slave_0 left promiscuous mode [ 221.334228][ T4286] device hsr_slave_1 left promiscuous mode [ 221.374962][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.451314][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.504142][ T4286] device bridge_slave_1 left promiscuous mode [ 221.528128][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.571210][ T4286] device bridge_slave_0 left promiscuous mode [ 221.585484][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.732432][ T4286] device hsr_slave_0 left promiscuous mode [ 221.774291][ T4286] device hsr_slave_1 left promiscuous mode [ 221.822657][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.895616][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.001763][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.061127][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.111005][ T4286] device bridge_slave_1 left promiscuous mode [ 222.150806][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.189369][ T4286] device bridge_slave_0 left promiscuous mode [ 222.214936][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.292806][ T4286] device veth1_macvtap left promiscuous mode [ 222.339513][ T4286] device veth0_macvtap left promiscuous mode [ 222.365346][ T4286] device veth1_vlan left promiscuous mode [ 222.396484][ T4286] device veth0_vlan left promiscuous mode [ 222.480908][ T4286] device veth1_macvtap left promiscuous mode [ 222.511509][ T4286] device veth0_macvtap left promiscuous mode [ 222.529651][ T4286] device veth1_vlan left promiscuous mode [ 222.550942][ T4286] device veth0_vlan left promiscuous mode [ 222.565362][ T4286] device veth1_macvtap left promiscuous mode [ 222.591679][ T4286] device veth0_macvtap left promiscuous mode [ 222.616767][ T4286] device veth1_vlan left promiscuous mode [ 222.622798][ T4286] device veth0_vlan left promiscuous mode [ 222.866708][ T4233] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 224.494574][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.404'. [ 225.089827][ T6029] loop5: detected capacity change from 0 to 512 [ 225.172826][ T6029] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 225.180163][ T6029] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.213565][ T6029] EXT4-fs (loop5): orphan cleanup on readonly fs [ 225.222893][ T6029] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 225.245858][ T6029] EXT4-fs (loop5): Remounting filesystem read-only [ 225.252829][ T6029] Quota error (device loop5): write_blk: dquota write failed [ 225.260337][ T6029] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 225.270301][ T6029] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.407: Failed to acquire dquot type 0 [ 225.283401][ T6029] EXT4-fs (loop5): Remounting filesystem read-only [ 225.290315][ T6029] EXT4-fs (loop5): 1 truncate cleaned up [ 225.296827][ T6029] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 225.532986][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 225.761058][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 225.790682][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.870125][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.023606][ T4286] bond0 (unregistering): Released all slaves [ 226.390820][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 226.412648][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 226.430845][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.449689][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.621204][ T4286] bond0 (unregistering): Released all slaves [ 227.101799][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 227.947378][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 227.970995][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.003699][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.164427][ T4286] bond0 (unregistering): Released all slaves [ 228.536766][ T4233] usb 9-1: unable to get BOS descriptor or descriptor too short [ 228.544566][ T5748] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 228.592333][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 228.608316][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 228.622713][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.641478][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.686810][ T4233] usb 9-1: unable to read config index 0 descriptor/start: -32 [ 228.696758][ T4233] usb 9-1: chopping to 0 config(s) [ 228.708731][ T4233] usb 9-1: can't read configurations, error -32 [ 228.724028][ T4286] bond0 (unregistering): Released all slaves [ 228.807927][ T5748] usb 7-1: Using ep0 maxpacket: 16 [ 228.857056][ T5748] usb 7-1: no configurations [ 228.861682][ T5748] usb 7-1: can't read configurations, error -22 [ 228.868293][ T4233] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 229.036777][ T4233] usb 9-1: device descriptor read/64, error -32 [ 229.043265][ T5748] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 229.119849][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.127188][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.166833][ T4233] usb usb9-port1: attempt power cycle [ 229.297278][ T5748] usb 7-1: Using ep0 maxpacket: 16 [ 229.337367][ T5748] usb 7-1: no configurations [ 229.341998][ T5748] usb 7-1: can't read configurations, error -22 [ 229.348547][ T5748] usb usb7-port1: attempt power cycle [ 229.485184][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.524432][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.576755][ T4233] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 229.656844][ T4233] usb 9-1: device descriptor read/8, error -32 [ 229.756789][ T5748] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 229.826228][ T5993] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.835374][ T5993] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.844344][ T5993] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.850462][ T5748] usb 7-1: Using ep0 maxpacket: 16 [ 229.855562][ T5993] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.897014][ T5748] usb 7-1: no configurations [ 229.901943][ T5748] usb 7-1: can't read configurations, error -22 [ 229.932453][ T4233] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 230.076712][ T4233] usb 9-1: device descriptor read/8, error -71 [ 230.096687][ T5748] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 230.152245][ T6079] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 230.186884][ T5748] usb 7-1: Using ep0 maxpacket: 16 [ 230.216860][ T4233] usb usb9-port1: unable to enumerate USB device [ 230.226764][ T5748] usb 7-1: no configurations [ 230.231390][ T5748] usb 7-1: can't read configurations, error -22 [ 230.258809][ T6081] loop8: detected capacity change from 0 to 512 [ 230.294874][ T5748] usb usb7-port1: unable to enumerate USB device [ 230.308124][ T6081] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 230.315420][ T6081] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.335915][ T6081] EXT4-fs (loop8): orphan cleanup on readonly fs [ 230.343859][ T6081] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 230.360223][ T6081] EXT4-fs (loop8): Remounting filesystem read-only [ 230.367100][ T6081] Quota error (device loop8): write_blk: dquota write failed [ 230.374578][ T6081] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 230.384673][ T6081] EXT4-fs error (device loop8): ext4_acquire_dquot:6234: comm syz.8.420: Failed to acquire dquot type 0 [ 230.566595][ T6081] EXT4-fs (loop8): Remounting filesystem read-only [ 230.573741][ T6081] EXT4-fs (loop8): 1 truncate cleaned up [ 230.584364][ T6081] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 230.758887][ T6096] netlink: 14 bytes leftover after parsing attributes in process `syz.5.424'. [ 230.979813][ T6096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.038905][ T6096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.094381][ T6096] bond0 (unregistering): Released all slaves [ 231.156042][ T6094] infiniband syz0: ib_query_port failed (-19) [ 231.209087][ T6094] infiniband syz0: Couldn't set up InfiniBand P_Key/GID cache [ 231.245663][ T6094] rdma_rxe: rxe_register_device failed with error -19 [ 231.295231][ T6094] rdma_rxe: failed to add bond0 [ 231.815785][ T6121] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 232.941518][ T6115] ODEBUG: Out of memory. ODEBUG disabled [ 234.438007][ T6173] loop7: detected capacity change from 0 to 512 [ 234.472973][ T6173] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 234.480464][ T6173] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 234.503849][ T6173] EXT4-fs (loop7): orphan cleanup on readonly fs [ 234.516004][ T6173] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 234.533820][ T6173] EXT4-fs (loop7): Remounting filesystem read-only [ 234.540814][ T6173] Quota error (device loop7): write_blk: dquota write failed [ 234.548426][ T6173] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 234.558407][ T6173] EXT4-fs error (device loop7): ext4_acquire_dquot:6234: comm syz.7.436: Failed to acquire dquot type 0 [ 234.571674][ T6173] EXT4-fs (loop7): Remounting filesystem read-only [ 234.578443][ T6173] EXT4-fs (loop7): 1 truncate cleaned up [ 234.599729][ T6173] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 234.646770][ T4268] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 234.687113][ T6177] device syzkaller0 entered promiscuous mode [ 235.053975][ T4268] usb 9-1: Using ep0 maxpacket: 16 [ 235.129061][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.9.438'. [ 235.338035][ T4268] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.530175][ T4268] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.986960][ T4268] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.996814][ T4268] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.004819][ T4268] usb 9-1: Product: syz [ 236.585413][ T4268] usb 9-1: Manufacturer: syz [ 236.594564][ T4268] usb 9-1: SerialNumber: syz [ 236.919811][ T4268] usb 9-1: 0:2 : does not exist [ 236.986322][ T6221] loop6: detected capacity change from 0 to 256 [ 237.176936][ T4268] usb 9-1: USB disconnect, device number 6 [ 237.946300][ T6221] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 238.429624][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.704842][ T6234] device syzkaller0 entered promiscuous mode [ 239.116038][ T6249] loop6: detected capacity change from 0 to 512 [ 239.165164][ T6249] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 239.172625][ T6249] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.308895][ T6249] EXT4-fs (loop6): orphan cleanup on readonly fs [ 239.316849][ T6249] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 239.341356][ T6249] EXT4-fs (loop6): Remounting filesystem read-only [ 239.348604][ T6249] Quota error (device loop6): write_blk: dquota write failed [ 239.356109][ T6249] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 239.366048][ T6249] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.451: Failed to acquire dquot type 0 [ 240.027065][ T6249] EXT4-fs (loop6): Remounting filesystem read-only [ 240.033820][ T6249] EXT4-fs (loop6): 1 truncate cleaned up [ 240.146797][ T6249] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 240.147448][ T6258] netlink: 'syz.5.454': attribute type 1 has an invalid length. [ 240.252014][ T6235] delete_channel: no stack [ 240.909957][ T6260] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.030143][ T6260] bond0: (slave vxcan3): Error -22 calling dev_set_mtu [ 246.176288][ T6353] loop6: detected capacity change from 0 to 512 [ 246.246774][ T5748] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 246.265063][ T6353] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 246.272569][ T6353] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 246.898111][ T6353] EXT4-fs (loop6): orphan cleanup on readonly fs [ 246.930468][ T6353] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 246.945555][ T6353] EXT4-fs (loop6): Remounting filesystem read-only [ 246.952822][ T6353] Quota error (device loop6): write_blk: dquota write failed [ 246.960381][ T6353] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 246.970411][ T6353] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.465: Failed to acquire dquot type 0 [ 246.993431][ T6353] EXT4-fs (loop6): Remounting filesystem read-only [ 247.000243][ T6353] EXT4-fs (loop6): 1 truncate cleaned up [ 247.917086][ T6353] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 248.016957][ T5748] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 248.031836][ T5748] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.102323][ T5748] usb 8-1: Product: syz [ 248.124265][ T5748] usb 8-1: Manufacturer: syz [ 248.152829][ T5748] usb 8-1: SerialNumber: syz [ 248.367029][ T5748] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 248.650956][ T5748] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 248.972351][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.473'. [ 248.981412][ T6385] netlink: set zone limit has 8 unknown bytes [ 249.032600][ T5748] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 249.178246][ T5748] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 249.249109][ T5748] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 249.319689][ T5748] lan78xx: probe of 8-1:1.0 failed with error -71 [ 249.419811][ T5748] usb 8-1: USB disconnect, device number 4 [ 249.647712][ T6401] device syzkaller0 entered promiscuous mode [ 249.756756][ T4268] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 250.431495][ T6419] netlink: 224 bytes leftover after parsing attributes in process `syz.5.481'. [ 250.456923][ T4268] usb 10-1: Using ep0 maxpacket: 16 [ 250.656670][ T4268] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.689617][ T4268] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.770585][ T6432] loop6: detected capacity change from 0 to 512 [ 250.823561][ T6432] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 250.831684][ T6432] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 250.892876][ T6432] EXT4-fs (loop6): orphan cleanup on readonly fs [ 250.906166][ T6432] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 250.927008][ T6432] EXT4-fs (loop6): Remounting filesystem read-only [ 250.933750][ T6432] Quota error (device loop6): write_blk: dquota write failed [ 250.941844][ T6432] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 250.951736][ T6432] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.483: Failed to acquire dquot type 0 [ 250.965962][ T6432] EXT4-fs (loop6): Remounting filesystem read-only [ 250.972676][ T6432] EXT4-fs (loop6): 1 truncate cleaned up [ 250.993042][ T6432] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 251.009657][ T4268] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.038788][ T4268] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.058986][ T4268] usb 10-1: Product: syz [ 251.074614][ T4268] usb 10-1: Manufacturer: syz [ 251.275969][ T6440] netlink: 224 bytes leftover after parsing attributes in process `syz.8.485'. [ 251.858180][ T4268] usb 10-1: SerialNumber: syz [ 252.886753][ T4268] usb 10-1: can't set config #1, error -71 [ 252.905916][ T4268] usb 10-1: USB disconnect, device number 2 [ 254.990447][ T6470] device syzkaller0 entered promiscuous mode [ 255.649928][ T6487] loop8: detected capacity change from 0 to 512 [ 255.732593][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.732970][ T6487] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 255.738974][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.754749][ T6487] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.868145][ T6487] EXT4-fs (loop8): orphan cleanup on readonly fs [ 255.907199][ T6487] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 255.924686][ T6487] EXT4-fs (loop8): Remounting filesystem read-only [ 255.931561][ T6487] Quota error (device loop8): write_blk: dquota write failed [ 255.939137][ T6487] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 255.949108][ T6487] EXT4-fs error (device loop8): ext4_acquire_dquot:6234: comm syz.8.496: Failed to acquire dquot type 0 [ 256.048190][ T6487] EXT4-fs (loop8): Remounting filesystem read-only [ 256.054876][ T6487] EXT4-fs (loop8): 1 truncate cleaned up [ 256.417197][ T6487] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 256.946664][ T4691] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 256.950746][ T5752] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 257.238674][ T4691] usb 9-1: Using ep0 maxpacket: 16 [ 257.377822][ T4691] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.816222][ T4691] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.856615][ T5752] usb 10-1: Using ep0 maxpacket: 32 [ 257.976823][ T5752] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 258.005627][ T5752] usb 10-1: config 0 has no interface number 0 [ 258.036170][ T5752] usb 10-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.046887][ T4691] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.073806][ T4691] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.082227][ T5752] usb 10-1: config 0 interface 89 has no altsetting 0 [ 258.096173][ T4691] usb 9-1: Product: syz [ 258.111347][ T4691] usb 9-1: Manufacturer: syz [ 258.130230][ T6519] device syzkaller0 entered promiscuous mode [ 258.136391][ T4691] usb 9-1: SerialNumber: syz [ 258.266863][ T5752] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 258.314096][ T5752] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.352823][ T5752] usb 10-1: Product: syz [ 258.362953][ T5752] usb 10-1: Manufacturer: syz [ 258.389578][ T5752] usb 10-1: SerialNumber: syz [ 258.425807][ T5752] usb 10-1: config 0 descriptor?? [ 258.478898][ T5752] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 258.496896][ T4691] usb 9-1: 0:2 : does not exist [ 258.516210][ T5752] em28xx 10-1:0.89: Video interface 89 found: [ 258.634355][ T4691] usb 9-1: USB disconnect, device number 7 [ 259.126757][ T5752] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 259.866875][ T5752] em28xx 10-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 259.887490][ T5752] em28xx 10-1:0.89: board has no eeprom [ 260.016721][ T5752] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 260.034509][ T5752] em28xx 10-1:0.89: analog set to bulk mode. [ 260.109161][ T5752] usb 10-1: USB disconnect, device number 3 [ 260.153193][ T5752] em28xx 10-1:0.89: Disconnecting em28xx [ 260.204488][ T1324] em28xx 10-1:0.89: Registering V4L2 extension [ 260.290633][ T1324] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 260.306741][ T1324] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 260.396660][ T1324] em28xx 10-1:0.89: No AC97 audio processor [ 260.524547][ T1324] usb 10-1: Decoder not found [ 260.991624][ T1324] em28xx 10-1:0.89: failed to create media graph [ 261.057602][ T1324] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 261.123819][ T6557] ================================================================== [ 261.132168][ T6557] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 261.139111][ T6557] Read of size 8 at addr ffff88802c058900 by task v4l_id/6557 [ 261.146642][ T6557] [ 261.148961][ T6557] CPU: 1 PID: 6557 Comm: v4l_id Not tainted syzkaller #0 [ 261.156101][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.166147][ T6557] Call Trace: [ 261.169417][ T6557] [ 261.172343][ T6557] dump_stack_lvl+0x188/0x250 [ 261.177027][ T6557] ? show_regs_print_info+0x20/0x20 [ 261.182213][ T6557] ? _printk+0xda/0x130 [ 261.186356][ T6557] ? v4l2_fh_open+0xc6/0x430 [ 261.190928][ T6557] ? load_image+0x400/0x400 [ 261.195411][ T6557] print_address_description+0x60/0x2d0 [ 261.200967][ T6557] ? v4l2_fh_open+0xc6/0x430 [ 261.205543][ T6557] kasan_report+0xdf/0x130 [ 261.209945][ T6557] ? v4l2_fh_open+0xc6/0x430 [ 261.214534][ T6557] v4l2_fh_open+0xc6/0x430 [ 261.218993][ T6557] em28xx_v4l2_open+0x152/0x990 [ 261.223828][ T6557] ? __lock_acquire+0x7d10/0x7d10 [ 261.228864][ T6557] v4l2_open+0x20b/0x360 [ 261.233108][ T6557] chrdev_open+0x5c5/0x6a0 [ 261.237520][ T6557] ? cd_forget+0x160/0x160 [ 261.241934][ T6557] ? fsnotify_perm+0x3a7/0x560 [ 261.246872][ T6557] ? cd_forget+0x160/0x160 [ 261.251297][ T6557] do_dentry_open+0x7ff/0xf80 [ 261.255964][ T6557] path_openat+0x26f5/0x2fa0 [ 261.260545][ T6557] ? verify_lock_unused+0x140/0x140 [ 261.265736][ T6557] ? slab_post_alloc_hook+0x4c/0x380 [ 261.271012][ T6557] ? do_filp_open+0x410/0x410 [ 261.275677][ T6557] do_filp_open+0x1e2/0x410 [ 261.280161][ T6557] ? vfs_tmpfile+0x300/0x300 [ 261.284744][ T6557] ? _raw_spin_unlock+0x24/0x40 [ 261.289589][ T6557] ? alloc_fd+0x598/0x630 [ 261.293903][ T6557] do_sys_openat2+0x150/0x4b0 [ 261.298559][ T6557] ? __lock_acquire+0x7d10/0x7d10 [ 261.303567][ T6557] ? do_sys_open+0xe0/0xe0 [ 261.308486][ T6557] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 261.314450][ T6557] ? lock_chain_count+0x20/0x20 [ 261.319280][ T6557] ? vtime_user_exit+0x2c8/0x3e0 [ 261.324198][ T6557] __x64_sys_openat+0x135/0x160 [ 261.329115][ T6557] do_syscall_64+0x4c/0xa0 [ 261.333512][ T6557] ? clear_bhb_loop+0x30/0x80 [ 261.338274][ T6557] ? clear_bhb_loop+0x30/0x80 [ 261.342970][ T6557] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.348867][ T6557] RIP: 0033:0x7f4928443407 [ 261.353283][ T6557] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 261.372891][ T6557] RSP: 002b:00007ffe8b8e1060 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 261.381290][ T6557] RAX: ffffffffffffffda RBX: 00007f4928355880 RCX: 00007f4928443407 [ 261.389250][ T6557] RDX: 0000000000000000 RSI: 00007ffe8b8e1f1a RDI: ffffffffffffff9c [ 261.397229][ T6557] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 261.405181][ T6557] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 261.413135][ T6557] R13: 00007ffe8b8e12b0 R14: 00007f4928bd1000 R15: 00005589441244d8 [ 261.421105][ T6557] [ 261.424104][ T6557] [ 261.426404][ T6557] The buggy address belongs to the page: [ 261.432034][ T6557] page:ffffea0000b01600 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c058 [ 261.442170][ T6557] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 261.449310][ T6557] raw: 00fff00000000000 ffffea0001ed5908 ffff8880b90409f0 0000000000000000 [ 261.457883][ T6557] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 261.466438][ T6557] page dumped because: kasan: bad access detected [ 261.472833][ T6557] page_owner tracks the page as freed [ 261.478171][ T6557] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 1324, ts 260213587507, free_ts 261121199222 [ 261.493967][ T6557] get_page_from_freelist+0x1bbd/0x1ca0 [ 261.499506][ T6557] __alloc_pages+0x1ee/0x480 [ 261.504076][ T6557] kmalloc_order+0x40/0x150 [ 261.508746][ T6557] kmalloc_order_trace+0x14/0xf0 [ 261.513664][ T6557] em28xx_v4l2_init+0xe2/0x2e50 [ 261.518495][ T6557] em28xx_init_extension+0x118/0x1b0 [ 261.523919][ T6557] process_one_work+0x85f/0x1010 [ 261.528895][ T6557] worker_thread+0xdcf/0x1290 [ 261.533576][ T6557] kthread+0x436/0x520 [ 261.537718][ T6557] ret_from_fork+0x1f/0x30 [ 261.542118][ T6557] page last free stack trace: [ 261.546771][ T6557] free_unref_page_prepare+0x637/0x6c0 [ 261.552208][ T6557] free_unref_page+0x8f/0x2a0 [ 261.556946][ T6557] free_nonslab_page+0xe2/0x150 [ 261.561772][ T6557] em28xx_v4l2_init+0x1649/0x2e50 [ 261.566775][ T6557] em28xx_init_extension+0x118/0x1b0 [ 261.572035][ T6557] process_one_work+0x85f/0x1010 [ 261.576957][ T6557] worker_thread+0xdcf/0x1290 [ 261.581698][ T6557] kthread+0x436/0x520 [ 261.585744][ T6557] ret_from_fork+0x1f/0x30 [ 261.590147][ T6557] [ 261.592477][ T6557] Memory state around the buggy address: [ 261.598092][ T6557] ffff88802c058800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.606141][ T6557] ffff88802c058880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.614182][ T6557] >ffff88802c058900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.622315][ T6557] ^ [ 261.626793][ T6557] ffff88802c058980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.634846][ T6557] ffff88802c058a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.642883][ T6557] ================================================================== [ 261.650924][ T6557] Disabling lock debugging due to kernel taint [ 261.674499][ T1324] em28xx 10-1:0.89: Registering snapshot button... [ 261.739001][ T1324] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input9 [ 261.855969][ T1324] em28xx 10-1:0.89: Remote control support is not available for this card. [ 261.885102][ T5752] em28xx 10-1:0.89: Closing input extension [ 261.892322][ T5752] em28xx 10-1:0.89: Deregistering snapshot button [ 262.053171][ T6521] ALSA: mixer_oss: invalid OSS volume '' [ 262.405619][ T6557] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 262.412847][ T6557] CPU: 1 PID: 6557 Comm: v4l_id Tainted: G B syzkaller #0 [ 262.421372][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.431431][ T6557] Call Trace: [ 262.434708][ T6557] [ 262.437631][ T6557] dump_stack_lvl+0x188/0x250 [ 262.442306][ T6557] ? show_regs_print_info+0x20/0x20 [ 262.447514][ T6557] ? load_image+0x400/0x400 [ 262.452028][ T6557] panic+0x2e5/0x810 [ 262.455921][ T6557] ? bpf_jit_dump+0xd0/0xd0 [ 262.460420][ T6557] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 262.466398][ T6557] ? _raw_spin_unlock+0x40/0x40 [ 262.471259][ T6557] ? print_memory_metadata+0x314/0x400 [ 262.476734][ T6557] ? v4l2_fh_open+0xc6/0x430 [ 262.481362][ T6557] check_panic_on_warn+0x80/0xa0 [ 262.486309][ T6557] ? v4l2_fh_open+0xc6/0x430 [ 262.490907][ T6557] end_report+0x6d/0xf0 [ 262.495072][ T6557] kasan_report+0x102/0x130 [ 262.499591][ T6557] ? v4l2_fh_open+0xc6/0x430 [ 262.504192][ T6557] v4l2_fh_open+0xc6/0x430 [ 262.508627][ T6557] em28xx_v4l2_open+0x152/0x990 [ 262.513489][ T6557] ? __lock_acquire+0x7d10/0x7d10 [ 262.518545][ T6557] v4l2_open+0x20b/0x360 [ 262.522808][ T6557] chrdev_open+0x5c5/0x6a0 [ 262.527240][ T6557] ? cd_forget+0x160/0x160 [ 262.531682][ T6557] ? fsnotify_perm+0x3a7/0x560 [ 262.536458][ T6557] ? cd_forget+0x160/0x160 [ 262.540886][ T6557] do_dentry_open+0x7ff/0xf80 [ 262.545580][ T6557] path_openat+0x26f5/0x2fa0 [ 262.550189][ T6557] ? verify_lock_unused+0x140/0x140 [ 262.555398][ T6557] ? slab_post_alloc_hook+0x4c/0x380 [ 262.560692][ T6557] ? do_filp_open+0x410/0x410 [ 262.565404][ T6557] do_filp_open+0x1e2/0x410 [ 262.569926][ T6557] ? vfs_tmpfile+0x300/0x300 [ 262.574542][ T6557] ? _raw_spin_unlock+0x24/0x40 [ 262.579457][ T6557] ? alloc_fd+0x598/0x630 [ 262.583808][ T6557] do_sys_openat2+0x150/0x4b0 [ 262.588492][ T6557] ? __lock_acquire+0x7d10/0x7d10 [ 262.593538][ T6557] ? do_sys_open+0xe0/0xe0 [ 262.597961][ T6557] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 262.603954][ T6557] ? lock_chain_count+0x20/0x20 [ 262.608815][ T6557] ? vtime_user_exit+0x2c8/0x3e0 [ 262.614117][ T6557] __x64_sys_openat+0x135/0x160 [ 262.618984][ T6557] do_syscall_64+0x4c/0xa0 [ 262.623414][ T6557] ? clear_bhb_loop+0x30/0x80 [ 262.628100][ T6557] ? clear_bhb_loop+0x30/0x80 [ 262.632874][ T6557] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.638876][ T6557] RIP: 0033:0x7f4928443407 [ 262.643656][ T6557] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 262.663275][ T6557] RSP: 002b:00007ffe8b8e1060 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 262.671704][ T6557] RAX: ffffffffffffffda RBX: 00007f4928355880 RCX: 00007f4928443407 [ 262.679688][ T6557] RDX: 0000000000000000 RSI: 00007ffe8b8e1f1a RDI: ffffffffffffff9c [ 262.687678][ T6557] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 262.695662][ T6557] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 262.703994][ T6557] R13: 00007ffe8b8e12b0 R14: 00007f4928bd1000 R15: 00005589441244d8 [ 262.712348][ T6557] [ 262.715733][ T6557] Kernel Offset: disabled [ 262.720062][ T6557] Rebooting in 86400 seconds..