last executing test programs: 6.856271901s ago: executing program 2 (id=38): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 5.39472391s ago: executing program 0 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.81300657s ago: executing program 3 (id=51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d92e0f01c93ef32e650f09b805000000b90000c0fe0fae41d90f01df0000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x54}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x1, 0xc8c, 0x1, 0x2, 0x7, 0x8, 0x3}, {0x1, 0x2, 0x0, 0x80, 0x43, 0x9, 0x6}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.778243253s ago: executing program 0 (id=52): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.609774005s ago: executing program 0 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xfffffffffffffefd}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x0, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x10000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0xa80a}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0xb}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000000) 4.258756319s ago: executing program 0 (id=55): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b04, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0017010000008180"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.144631856s ago: executing program 3 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f3266b897008ed0f30f090fc79b06000000673e0f47d7c4e285a78f17ffffff57e0e040", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x62, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="800037bbfa", 0x5, 0x4000, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.069826381s ago: executing program 2 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x4, 0x100, {0x0, 0x0, 0x0, r2, {0xe, 0x1}}}, 0x24}}, 0x4) 3.737627814s ago: executing program 3 (id=58): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d2", 0xa3}, {0x0}, {0x0}, {0x0}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc", 0x6}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f6231", 0x24}], 0x2}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.614790063s ago: executing program 2 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000600)="b8b0be00000f23c00f21f83500000c000f23f80f01c88977eb0fc71967260f78540466baf80cb8c279a388ef66bafc0cec66ba6100ed0f01df0f01c40f229b", 0x3f}], 0x1, 0x57, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.577530545s ago: executing program 3 (id=60): socket$inet6_udplite(0xa, 0x2, 0x88) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) 3.331472422s ago: executing program 2 (id=61): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/32, 0x30}], 0x1}, 0x7}], 0x1, 0x400101a0, 0x0) close(r1) 3.155127214s ago: executing program 2 (id=62): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2.829000587s ago: executing program 4 (id=63): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = inotify_init1(0x800) getdents64(r0, &(0x7f0000000340)=""/214, 0xd6) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x64000522) getdents64(r0, 0x0, 0x0) 2.504551239s ago: executing program 4 (id=64): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x5, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.937318118s ago: executing program 0 (id=65): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x11dc0, &(0x7f0000000440)=ANY=[], 0x0) 1.881142371s ago: executing program 0 (id=66): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xab, &(0x7f00000002c0)="b9429cfedb740b5b44651dd23241963599000000110000004a16941ff5f4b4f1f00000000000000000fffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffffb1000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c5d07e8773eed7b94fa09") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) syz_read_part_table(0x105c, &(0x7f0000000000)="$eJzsz7FNA0EQBdB/dxyrk7hWCIlpghKoi4iEkAoI6YQKkOxorFvZltyA7eC9aPdL80cTbmo4v5YpbcmUPCTfa/L68j79V1Uy/m5ZtVQtQ1qyr+6nD3/+bVGGx2PPnLV3JO3pYkH3UfPu+fQZ376udCYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LVDAAAA//83/xbZ") 1.523622526s ago: executing program 4 (id=68): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x12, r1, 0xc3ce9000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 1.436313882s ago: executing program 4 (id=69): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x10023, 0x0) 1.302463501s ago: executing program 3 (id=70): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000001600)=""/58, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000004c0)=0x200000000) 1.241476995s ago: executing program 1 (id=71): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x6, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x4000000, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x7, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x4000000, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x2, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x1, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x49, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x8001000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0x200000d7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x5, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x80006, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0x30e, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x440, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0xc4, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xb0, 0x84, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffff8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="596bc10ba6b8"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x19, 0x1, @random="602a886ad1bff04b740d95218641adeb217ecb0df4"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffffffff}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}]}, {0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x51}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x48040) 1.212958047s ago: executing program 3 (id=72): ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r0, 0x0, 0x0, 0x78f2a36b) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.098156565s ago: executing program 1 (id=73): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0xe000200c}) poll(&(0x7f00000001c0)=[{r2, 0x88}, {r2, 0x1081}], 0x2, 0x8) 946.415376ms ago: executing program 1 (id=74): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x29) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) read$FUSE(r1, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x9}}, 0x18) 561.027772ms ago: executing program 4 (id=75): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x4, 0x2, 0x101, 0x1}, {0x5, 0x0, 0xf, 0x800001ffffffffe}, 0x80020, 0x0, 0x1, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@broadcast, 0xfffffffd, 0x3, 0x0, 0x0, 0xff7ffc01, 0xfd3, 0x86}}, 0xe4) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 517.239765ms ago: executing program 1 (id=76): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) 475.139128ms ago: executing program 4 (id=77): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970000f02b00fe8000000000000000000200000000aaff020000000000000000000000000001b617"], 0xffe) 253.826863ms ago: executing program 1 (id=78): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000200)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x40f00}, 0x94) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fsopen(0x0, 0x0) 48.300667ms ago: executing program 2 (id=79): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xe0c}}, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/26, 0x1a}, {&(0x7f0000000400)=""/163, 0xa3}], 0x2}, 0x4}], 0x1, 0x10000, 0x0) 0s ago: executing program 1 (id=80): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) open(0x0, 0x108843, 0x190) open(0x0, 0x108843, 0x98) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 59.988326][ T4173] cgroup: Unknown subsys name 'net' [ 60.151646][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.444245][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.786151][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 62.871863][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 62.912934][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 62.936311][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.971429][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 63.010969][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.018373][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.027178][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.061104][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.068273][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.075948][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.127775][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.144828][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.152085][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.159822][ T4198] device bridge_slave_0 entered promiscuous mode [ 63.169281][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.179013][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.186071][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.194532][ T4196] device bridge_slave_0 entered promiscuous mode [ 63.209593][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.217042][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.224852][ T4198] device bridge_slave_1 entered promiscuous mode [ 63.238068][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.245143][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.252950][ T4196] device bridge_slave_1 entered promiscuous mode [ 63.298330][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.305591][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.314375][ T4185] device bridge_slave_0 entered promiscuous mode [ 63.332194][ T4186] team0: Port device team_slave_0 added [ 63.343686][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.351011][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.359211][ T4191] device bridge_slave_0 entered promiscuous mode [ 63.366657][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.373723][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.381628][ T4185] device bridge_slave_1 entered promiscuous mode [ 63.390274][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.401417][ T4186] team0: Port device team_slave_1 added [ 63.421435][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.430689][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.437962][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.446402][ T4191] device bridge_slave_1 entered promiscuous mode [ 63.461881][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.471923][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.479550][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.506176][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.520553][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.553572][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.561050][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.588002][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.617660][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.630310][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.646378][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.659847][ T4198] team0: Port device team_slave_0 added [ 63.668095][ T4198] team0: Port device team_slave_1 added [ 63.682177][ T4196] team0: Port device team_slave_0 added [ 63.696912][ T4196] team0: Port device team_slave_1 added [ 63.704265][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.743474][ T4185] team0: Port device team_slave_0 added [ 63.755245][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.762926][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.789479][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.802989][ T4191] team0: Port device team_slave_0 added [ 63.810839][ T4191] team0: Port device team_slave_1 added [ 63.818989][ T4185] team0: Port device team_slave_1 added [ 63.857754][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.864725][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.891214][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.912666][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.921718][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.948533][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.960087][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.967404][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.993886][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.009863][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.017520][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.039073][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.046047][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.072487][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.083961][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.090966][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.117351][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.140727][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.147944][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.174224][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.192341][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.202405][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.229873][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.263407][ T4198] device hsr_slave_0 entered promiscuous mode [ 64.270272][ T4198] device hsr_slave_1 entered promiscuous mode [ 64.277190][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.285535][ T4198] Cannot create hsr debugfs directory [ 64.306230][ T4196] device hsr_slave_0 entered promiscuous mode [ 64.313796][ T4196] device hsr_slave_1 entered promiscuous mode [ 64.320887][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.329026][ T4196] Cannot create hsr debugfs directory [ 64.397431][ T4191] device hsr_slave_0 entered promiscuous mode [ 64.404454][ T4191] device hsr_slave_1 entered promiscuous mode [ 64.411566][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.419268][ T4191] Cannot create hsr debugfs directory [ 64.449981][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.457160][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.463656][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.471761][ T4185] Cannot create hsr debugfs directory [ 64.564265][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 64.577099][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 64.584947][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 64.597015][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 64.603581][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 64.734227][ T4198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.745032][ T4198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.754057][ T4198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.769866][ T4198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.831633][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.848382][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.857587][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.870845][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.912824][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.923539][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.950377][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.960425][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.983830][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.033450][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.044415][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.065956][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.083388][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.093066][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.115242][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.124519][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.142980][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.152231][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.163652][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.170895][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.185636][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.193948][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.202916][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.211872][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.218985][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.227932][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.238665][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.260314][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.270824][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.280069][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.290689][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.313794][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.334403][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.347428][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.355869][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.383985][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.393017][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.401837][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.411108][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.428688][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.444894][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.455504][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.473907][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.483545][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.493472][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.502461][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.542733][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.565336][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.590038][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.599783][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.609049][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.617657][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.624721][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.633254][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.642784][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.652510][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.659888][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.670651][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.679655][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.693431][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.717171][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.740459][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.748764][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.758507][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.768707][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.778629][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.787409][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.795736][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.803704][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.811642][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.820600][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.833314][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.851429][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.864845][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.878532][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.888267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.896162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.905216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.914309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.929720][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.944935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.961192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.971914][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.979042][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.989640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.998748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.007553][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.014799][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.023032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.031993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.043928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.054947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.063954][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.072030][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.085880][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.112480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.122250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.131878][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.139037][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.150471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.159642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.169199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.178322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.187838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.196728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.215428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.225253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.235357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.264336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.272522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.282585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.292240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.300900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.309554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.319010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.327920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.337313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.348335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.356221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.370446][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.383175][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.404987][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.422488][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.432338][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.447049][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.455501][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.464570][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.472332][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.482943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.491631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.503420][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.513378][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.524891][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.539245][ T4198] device veth0_vlan entered promiscuous mode [ 66.546561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.554631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.570199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.579697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.615095][ T4198] device veth1_vlan entered promiscuous mode [ 66.624005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.633381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.636951][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 66.642331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.654410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.656656][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 66.665058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.674732][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 66.684141][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 66.687544][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.690652][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 66.697792][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.713670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.743148][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.752572][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.763849][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.772929][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.780447][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.790378][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.800065][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.823329][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.854480][ T4198] device veth0_macvtap entered promiscuous mode [ 66.883430][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.893977][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.911112][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.923578][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.953508][ T4186] device veth0_vlan entered promiscuous mode [ 66.964442][ T4198] device veth1_macvtap entered promiscuous mode [ 66.972542][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.983621][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.999515][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.014823][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.023877][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.033037][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.044054][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.054946][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.064455][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.074245][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.084722][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.092663][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.100479][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.108787][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.121867][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.130195][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.139151][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.151233][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.181907][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.205613][ T4186] device veth1_vlan entered promiscuous mode [ 67.234992][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.266934][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.276024][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.299701][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.321423][ T4186] device veth0_macvtap entered promiscuous mode [ 67.351467][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.362148][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.373038][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.382130][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.392123][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.401158][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.410261][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.419035][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.427982][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.439594][ T4186] device veth1_macvtap entered promiscuous mode [ 67.471332][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.482419][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.491404][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.499166][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.507733][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.515906][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.525530][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.534173][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.542630][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.550768][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.559216][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.578100][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.587763][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.597920][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.607239][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.631002][ T4196] device veth0_vlan entered promiscuous mode [ 67.647045][ T4185] device veth0_vlan entered promiscuous mode [ 67.661540][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.683107][ T4196] device veth1_vlan entered promiscuous mode [ 67.695306][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.708947][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.720476][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.761796][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.772659][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.782174][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.792066][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.801031][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.810994][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.825827][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.838597][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.849846][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.862661][ T4191] device veth0_vlan entered promiscuous mode [ 67.872751][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.882118][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.891041][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.899514][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.908781][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.916760][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.934031][ T4185] device veth1_vlan entered promiscuous mode [ 67.946247][ T4191] device veth1_vlan entered promiscuous mode [ 67.959621][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.968669][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.977938][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.989071][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.011300][ T4196] device veth0_macvtap entered promiscuous mode [ 68.040580][ T473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.051516][ T473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.070991][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.080187][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.089124][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.098247][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.108090][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.116934][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.124682][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.147354][ T4196] device veth1_macvtap entered promiscuous mode [ 68.179269][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.187819][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.198144][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.220546][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.235088][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.246458][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.258169][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.268389][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.279135][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.290554][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.315307][ T4191] device veth0_macvtap entered promiscuous mode [ 68.344884][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.354628][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.370880][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.380574][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.390604][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.402427][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.413170][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.423654][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.434399][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.445830][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.461843][ T4185] device veth0_macvtap entered promiscuous mode [ 68.499515][ T4265] loop0: detected capacity change from 0 to 128 [ 68.513304][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.522533][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.532361][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.545335][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.555834][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.566557][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.575437][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.587154][ T4265] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.589848][ T4185] device veth1_macvtap entered promiscuous mode [ 68.617752][ T4191] device veth1_macvtap entered promiscuous mode [ 68.626950][ T473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.635148][ T473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.643425][ T4265] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.701334][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.715341][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.719293][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 68.732823][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 68.740836][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 68.750507][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 68.760155][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 68.783461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.795132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.805077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.815456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.830535][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.842924][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.853195][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.863699][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.874055][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.887619][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.900374][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.955286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.984246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.003425][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.014273][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.027182][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.041440][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.051730][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.063182][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.075491][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.100150][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.132285][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.147643][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.163708][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.176138][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.187682][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.201987][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.212775][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.225889][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.242313][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.262112][ T4282] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.275769][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.297084][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.312484][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.330356][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.345393][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.369792][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.379982][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.403625][ T473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.405273][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.413044][ T473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.427027][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.440923][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.451842][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.461895][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.472416][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.482592][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.493380][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.504713][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.557140][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.565062][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.605993][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.619847][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.644104][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.667518][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.689478][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.870354][ T473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.886322][ T473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.921531][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.936172][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.949473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.986098][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.006606][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.014450][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.079658][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.140783][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.155824][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.191921][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.200645][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.229475][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.254890][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.353657][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 70.579041][ T4330] Illegal XDP return value 1823310762, expect packet loss! [ 70.594413][ T4326] IPv4: Oversized IP packet from 172.20.20.24 [ 70.602313][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 70.609486][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 70.778439][ T4338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 70.797131][ T4188] Bluetooth: hci0: command 0x0419 tx timeout [ 70.818117][ T4338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 70.826379][ T4188] Bluetooth: hci2: command 0x0419 tx timeout [ 70.861683][ T4188] Bluetooth: hci1: command 0x0419 tx timeout [ 70.875100][ T4188] Bluetooth: hci3: command 0x0419 tx timeout [ 70.922895][ T4188] Bluetooth: hci4: command 0x0419 tx timeout [ 70.962144][ T4350] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.327569][ T4367] loop2: detected capacity change from 0 to 64 [ 71.369604][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.376931][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.520571][ T4370] netlink: 280 bytes leftover after parsing attributes in process `syz.4.37'. [ 71.522724][ T4340] loop3: detected capacity change from 0 to 32768 [ 71.570907][ T4370] netlink: 280 bytes leftover after parsing attributes in process `syz.4.37'. [ 71.613711][ T4340] [ 71.613711][ T4340] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.613711][ T4340] [ 71.777696][ T4340] read_mapping_page failed! [ 71.777991][ T4340] ERROR: (device loop3): txCommit: [ 71.777991][ T4340] [ 71.789354][ T4375] read_mapping_page failed! [ 71.789381][ T4375] ERROR: (device loop3): txCommit: [ 71.789381][ T4375] [ 71.875701][ T3060] read_mapping_page failed! [ 71.881540][ T4382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.906551][ T3060] ERROR: (device loop3): txCommit: [ 71.906551][ T3060] [ 71.914211][ T3060] jfs_write_inode: jfs_commit_inode failed! [ 71.929657][ T4186] [ 71.929657][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.929657][ T4186] [ 71.968520][ T4186] [ 71.968520][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.968520][ T4186] [ 72.326910][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.370150][ T4393] loop3: detected capacity change from 0 to 1024 [ 72.417215][ T4393] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 72.426196][ T4393] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.460774][ T4393] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 72.481447][ T4393] System zones: 0-1, 3-36 [ 72.512367][ T4388] loop4: detected capacity change from 0 to 32768 [ 72.512483][ T4393] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 72.534538][ T4384] loop1: detected capacity change from 0 to 32768 [ 72.585348][ T4384] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.43 (4384) [ 72.627557][ T4393] capability: warning: `syz.3.42' uses deprecated v2 capabilities in a way that may be insecure [ 72.643270][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 72.708258][ T4388] UFO tlock:0xffffc90002872288 [ 72.723002][ T4384] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 72.740929][ T4388] MetaData crosses page boundary!! [ 72.747523][ T4384] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 72.758430][ T4388] lblock = 6300000010, size = -820051968 [ 72.764369][ T4388] CPU: 1 PID: 4388 Comm: syz.4.45 Not tainted syzkaller #0 [ 72.771781][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 72.781858][ T4388] Call Trace: [ 72.785344][ T4388] [ 72.788314][ T4388] dump_stack_lvl+0x188/0x250 [ 72.793219][ T4388] ? show_regs_print_info+0x20/0x20 [ 72.798443][ T4388] ? load_image+0x400/0x400 [ 72.803144][ T4388] ? unlock_page+0x17c/0x1f0 [ 72.807788][ T4388] ? release_metapage+0x2f7/0xe10 [ 72.812828][ T4388] ? unlock_page+0x17c/0x1f0 [ 72.817435][ T4388] __get_metapage+0xbfa/0x1060 [ 72.822412][ T4388] dtSearch+0x5d5/0x2050 [ 72.826723][ T4388] dtDelete+0x123/0x2a40 [ 72.831013][ T4388] ? jfs_unlink+0x23d/0xa00 [ 72.835664][ T4388] ? __mutex_lock_common+0x465/0x2400 [ 72.841170][ T4388] ? dtInsertEntry+0x1270/0x1270 [ 72.846253][ T4388] ? _raw_spin_unlock+0x24/0x40 [ 72.851112][ T4388] ? txBegin+0x4b2/0x650 [ 72.855397][ T4388] jfs_unlink+0x297/0xa00 [ 72.859757][ T4388] ? jfs_link+0x650/0x650 [ 72.864192][ T4388] ? rwsem_write_trylock+0x135/0x1c0 [ 72.869510][ T4388] ? clear_nonspinnable+0x60/0x60 [ 72.874810][ T4388] ? bpf_lsm_inode_unlink+0x5/0x10 [ 72.880204][ T4388] ? security_inode_unlink+0xcb/0x110 [ 72.885960][ T4388] vfs_unlink+0x385/0x600 [ 72.890403][ T4388] do_unlinkat+0x391/0x710 [ 72.894845][ T4388] ? __virt_addr_valid+0x3c6/0x470 [ 72.900024][ T4388] ? fsnotify_link_count+0xf0/0xf0 [ 72.905527][ T4388] ? strncpy_from_user+0x1fb/0x360 [ 72.910677][ T4388] ? getname_flags+0x1fe/0x500 [ 72.915512][ T4388] __x64_sys_unlink+0x45/0x50 [ 72.920200][ T4388] do_syscall_64+0x4c/0xa0 [ 72.924661][ T4388] ? clear_bhb_loop+0x30/0x80 [ 72.929466][ T4388] ? clear_bhb_loop+0x30/0x80 [ 72.934174][ T4388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.940184][ T4388] RIP: 0033:0x7fdfd5be4819 [ 72.944622][ T4388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.964251][ T4388] RSP: 002b:00007fdfd3e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 72.972771][ T4388] RAX: ffffffffffffffda RBX: 00007fdfd5e5dfa0 RCX: 00007fdfd5be4819 [ 72.980844][ T4388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 72.988841][ T4388] RBP: 00007fdfd5c7ac91 R08: 0000000000000000 R09: 0000000000000000 [ 72.996941][ T4388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.005015][ T4388] R13: 00007fdfd5e5e038 R14: 00007fdfd5e5dfa0 R15: 00007ffcfaad1858 [ 73.013114][ T4388] [ 73.021206][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.046850][ T4384] BTRFS info (device loop1): use zstd compression, level 3 [ 73.054199][ T4384] BTRFS info (device loop1): using free space tree [ 73.060795][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.084145][ T4384] BTRFS info (device loop1): has skinny extents [ 73.096519][ T4399] device syzkaller1 entered promiscuous mode [ 73.114069][ T4388] bread failed! [ 73.132780][ T4388] jfs_unlink: dtDelete returned -5 [ 73.141400][ T4388] ERROR: (device loop4): jfs_unlink: [ 73.141400][ T4388] [ 73.180974][ T4388] ERROR: (device loop4): remounting filesystem as read-only [ 73.296627][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.350232][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.386435][ T23] usb 3-1: Product: syz [ 73.394207][ T23] usb 3-1: Manufacturer: syz [ 73.430683][ T4384] BTRFS info (device loop1): enabling ssd optimizations [ 73.449907][ T23] usb 3-1: SerialNumber: syz [ 73.816608][ T23] usb 3-1: 0:2 : does not exist [ 73.930044][ T23] usb 3-1: USB disconnect, device number 2 [ 74.029980][ T4435] netlink: 52 bytes leftover after parsing attributes in process `syz.0.53'. [ 74.049593][ T4428] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 74.067034][ T4435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 74.115619][ T4428] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 74.488194][ T4452] device batadv_slave_0 entered promiscuous mode [ 74.510592][ T4452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 74.550771][ T4452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.636558][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.674140][ T4452] device batadv_slave_0 left promiscuous mode [ 74.695859][ T4452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.916347][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 75.006416][ T4449] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.037493][ T13] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 75.056175][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.086099][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.122003][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.147356][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.175987][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.212813][ T4432] ODEBUG: Out of memory. ODEBUG disabled [ 75.253132][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.416353][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.446869][ T4449] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 75.455032][ T4449] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.471945][ T4449] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.482088][ T4449] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.496089][ T4449] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.505300][ T4449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.520073][ T13] usb 1-1: GET_CAPABILITIES returned 0 [ 75.528715][ T13] usbtmc 1-1:16.0: can't read capabilities [ 75.544030][ T4449] usb 2-1: config 0 descriptor?? [ 75.766653][ T2302] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.778701][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.793011][ T4470] loop4: detected capacity change from 0 to 8192 [ 75.809237][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.820361][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.833836][ T4230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.837956][ T4470] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 75.843857][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.863909][ T4470] REISERFS (device loop4): using ordered data mode [ 75.865008][ T4230] usb 4-1: config 0 descriptor?? [ 75.881859][ T4470] reiserfs: using flush barriers [ 75.888980][ T4470] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.907693][ T4470] REISERFS (device loop4): checking transaction log (loop4) [ 75.924255][ T4470] REISERFS (device loop4): Using r5 hash to sort names [ 75.933327][ T4470] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 76.036524][ T2302] usb 3-1: Using ep0 maxpacket: 32 [ 76.047416][ T23] usb 1-1: USB disconnect, device number 2 [ 76.089385][ T4449] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 76.110734][ T4449] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 76.134610][ T4449] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 76.201295][ T2302] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 76.210313][ T2302] usb 3-1: config 0 has no interface number 0 [ 76.216841][ T2302] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.227722][ T2302] usb 3-1: config 0 interface 89 has no altsetting 0 [ 76.341276][ T4188] usb 2-1: USB disconnect, device number 2 [ 76.361498][ T4230] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 76.373684][ T4230] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 76.389917][ T4230] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 76.437342][ T2302] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 76.446701][ T2302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.454704][ T2302] usb 3-1: Product: syz [ 76.459279][ T2302] usb 3-1: Manufacturer: syz [ 76.463931][ T2302] usb 3-1: SerialNumber: syz [ 76.480911][ T2302] usb 3-1: config 0 descriptor?? [ 76.528577][ T2302] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 76.538298][ T2302] em28xx 3-1:0.89: Video interface 89 found: [ 76.678921][ T23] usb 4-1: USB disconnect, device number 2 [ 76.897323][ T4484] loop1: detected capacity change from 0 to 4096 [ 76.916571][ T4188] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.047687][ T4484] EXT4-fs (loop1): Test dummy encryption mode enabled [ 77.055247][ T4484] EXT4-fs (loop1): Ignoring removed orlov option [ 77.083379][ T4484] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 77.129124][ T26] audit: type=1800 audit(1775587039.745:2): pid=4484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.67" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 77.129556][ T4484] fs-verity: sha256 using implementation "sha256-avx2" [ 77.167149][ T2302] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 77.216331][ T26] audit: type=1800 audit(1775587039.825:3): pid=4484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.67" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 77.336928][ T4188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.363752][ T4503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 77.364527][ T4188] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.383402][ T4188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.406233][ T4188] usb 1-1: config 0 descriptor?? [ 77.625193][ T4507] loop1: detected capacity change from 0 to 1024 [ 77.653095][ T4507] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.711749][ T4507] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 77.782179][ T4507] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.74: missing EA_INODE flag [ 77.812694][ T4507] EXT4-fs (loop1): Remounting filesystem read-only [ 77.821848][ T4507] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.74: error while reading EA inode 11 err=-117 [ 77.844103][ T4507] EXT4-fs (loop1): Remounting filesystem read-only [ 77.852181][ T4507] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.885299][ T4507] EXT4-fs (loop1): shut down requested (2) [ 77.896724][ T2302] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 77.897549][ T4188] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 77.905261][ T2302] em28xx 3-1:0.89: board has no eeprom [ 77.930505][ T4188] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input7 [ 78.006408][ T2302] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 78.013675][ T2302] em28xx 3-1:0.89: analog set to bulk mode. [ 78.047082][ T4188] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 78.118659][ T2302] usb 3-1: USB disconnect, device number 3 [ 78.158072][ T2302] em28xx 3-1:0.89: Disconnecting em28xx [ 78.186514][ T4449] em28xx 3-1:0.89: Registering V4L2 extension [ 78.283419][ T4449] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 78.299735][ T4449] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 78.321281][ T4523] process 'syz.1.78' launched './file0' with NULL argv: empty string added [ 78.330845][ T4449] em28xx 3-1:0.89: No AC97 audio processor [ 78.368730][ T4449] usb 3-1: Decoder not found [ 78.389124][ T4449] em28xx 3-1:0.89: failed to create media graph [ 78.426569][ T4449] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 78.509914][ T4449] em28xx 3-1:0.89: Registering snapshot button... [ 78.510508][ T4525] ================================================================== [ 78.524817][ T4525] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 78.530503][ T4449] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input8 [ 78.531765][ T4525] Read of size 8 at addr ffff88805a87c900 by task v4l_id/4525 [ 78.549783][ T4525] [ 78.552201][ T4525] CPU: 0 PID: 4525 Comm: v4l_id Not tainted syzkaller #0 [ 78.559234][ T4525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 78.569310][ T4525] Call Trace: [ 78.572639][ T4525] [ 78.575579][ T4525] dump_stack_lvl+0x188/0x250 [ 78.580265][ T4525] ? show_regs_print_info+0x20/0x20 [ 78.585473][ T4525] ? _printk+0xda/0x130 [ 78.589719][ T4525] ? v4l2_fh_open+0xc6/0x430 [ 78.594443][ T4525] ? load_image+0x400/0x400 [ 78.598942][ T4525] print_address_description+0x60/0x2d0 [ 78.604485][ T4525] ? v4l2_fh_open+0xc6/0x430 [ 78.609084][ T4525] kasan_report+0xdf/0x130 [ 78.613648][ T4525] ? v4l2_fh_open+0xc6/0x430 [ 78.618237][ T4525] v4l2_fh_open+0xc6/0x430 [ 78.622644][ T4525] em28xx_v4l2_open+0x152/0x990 [ 78.627483][ T4525] ? __lock_acquire+0x7d10/0x7d10 [ 78.632506][ T4525] v4l2_open+0x20b/0x360 [ 78.636744][ T4525] chrdev_open+0x5c5/0x6a0 [ 78.641179][ T4525] ? cd_forget+0x160/0x160 [ 78.645784][ T4525] ? fsnotify_perm+0x3a7/0x560 [ 78.650742][ T4525] ? cd_forget+0x160/0x160 [ 78.655162][ T4525] do_dentry_open+0x7ff/0xf80 [ 78.659971][ T4525] path_openat+0x26f5/0x2fa0 [ 78.664600][ T4525] ? verify_lock_unused+0x140/0x140 [ 78.669817][ T4525] ? slab_post_alloc_hook+0x4c/0x380 [ 78.675292][ T4525] ? do_filp_open+0x410/0x410 [ 78.679999][ T4525] do_filp_open+0x1e2/0x410 [ 78.684518][ T4525] ? vfs_tmpfile+0x300/0x300 [ 78.689125][ T4525] ? _raw_spin_unlock+0x24/0x40 [ 78.694004][ T4525] ? alloc_fd+0x598/0x630 [ 78.698330][ T4525] do_sys_openat2+0x150/0x4b0 [ 78.703003][ T4525] ? __lock_acquire+0x7d10/0x7d10 [ 78.708026][ T4525] ? do_sys_open+0xe0/0xe0 [ 78.712442][ T4525] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 78.718524][ T4525] ? lock_chain_count+0x20/0x20 [ 78.723393][ T4525] ? vtime_user_exit+0x2c8/0x3e0 [ 78.728327][ T4525] __x64_sys_openat+0x135/0x160 [ 78.733261][ T4525] do_syscall_64+0x4c/0xa0 [ 78.737783][ T4525] ? clear_bhb_loop+0x30/0x80 [ 78.742462][ T4525] ? clear_bhb_loop+0x30/0x80 [ 78.747144][ T4525] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.753117][ T4525] RIP: 0033:0x7f2a283a6407 [ 78.757625][ T4525] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 78.777872][ T4525] RSP: 002b:00007ffd9956a590 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 78.786303][ T4525] RAX: ffffffffffffffda RBX: 00007f2a282b8880 RCX: 00007f2a283a6407 [ 78.794356][ T4525] RDX: 0000000000000000 RSI: 00007ffd9956bf1d RDI: ffffffffffffff9c [ 78.802320][ T4525] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 78.810557][ T4525] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 78.818617][ T4525] R13: 00007ffd9956a7e0 R14: 00007f2a28b34000 R15: 0000560027e324d8 [ 78.826613][ T4525] [ 78.829636][ T4525] [ 78.831961][ T4525] The buggy address belongs to the page: [ 78.837584][ T4525] page:ffffea00016a1f00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a87c [ 78.847724][ T4525] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 78.854848][ T4525] raw: 00fff00000000000 ffffea0001ec7108 ffff8880b91409f0 0000000000000000 [ 78.863604][ T4525] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 78.872168][ T4525] page dumped because: kasan: bad access detected [ 78.878585][ T4525] page_owner tracks the page as freed [ 78.883973][ T4525] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x102cc0(GFP_USER|__GFP_NOWARN), pid 4449, ts 78529195307, free_ts 78529199924 [ 78.898900][ T4525] get_page_from_freelist+0x1bbd/0x1ca0 [ 78.904629][ T4525] __alloc_pages+0x1ee/0x480 [ 78.909207][ T4525] stack_depot_save+0x342/0x440 [ 78.916888][ T4525] __kasan_kmalloc+0xcc/0xf0 [ 78.921492][ T4525] kstrdup_const+0x51/0x90 [ 78.926433][ T4525] __kernfs_new_node+0xa8/0x6c0 [ 78.931382][ T4525] kernfs_new_node+0x148/0x250 [ 78.936408][ T4525] kernfs_create_dir_ns+0x40/0x120 [ 78.941697][ T4525] sysfs_create_dir_ns+0x12c/0x290 [ 78.946801][ T4525] kobject_add_internal+0x6e0/0xd90 [ 78.951996][ T4525] kobject_add+0x160/0x230 [ 78.956406][ T4525] device_add+0x483/0xfb0 [ 78.960720][ T4525] input_register_device+0xa5b/0x1140 [ 78.966176][ T4525] em28xx_register_snapshot_button+0x2d8/0x460 [ 78.972407][ T4525] em28xx_ir_init+0x625/0x1db0 [ 78.977167][ T4525] em28xx_init_extension+0x118/0x1b0 [ 78.982439][ T4525] page last free stack trace: [ 78.987098][ T4525] free_unref_page_prepare+0x637/0x6c0 [ 78.992644][ T4525] free_unref_page+0x8f/0x2a0 [ 78.997320][ T4525] stack_depot_save+0x418/0x440 [ 79.002174][ T4525] __kasan_kmalloc+0xcc/0xf0 [ 79.006774][ T4525] kstrdup_const+0x51/0x90 [ 79.011280][ T4525] __kernfs_new_node+0xa8/0x6c0 [ 79.016123][ T4525] kernfs_new_node+0x148/0x250 [ 79.020906][ T4525] kernfs_create_dir_ns+0x40/0x120 [ 79.026092][ T4525] sysfs_create_dir_ns+0x12c/0x290 [ 79.031455][ T4525] kobject_add_internal+0x6e0/0xd90 [ 79.036644][ T4525] kobject_add+0x160/0x230 [ 79.041152][ T4525] device_add+0x483/0xfb0 [ 79.045510][ T4525] input_register_device+0xa5b/0x1140 [ 79.050881][ T4525] em28xx_register_snapshot_button+0x2d8/0x460 [ 79.057124][ T4525] em28xx_ir_init+0x625/0x1db0 [ 79.061928][ T4525] em28xx_init_extension+0x118/0x1b0 [ 79.067199][ T4525] [ 79.069940][ T4525] Memory state around the buggy address: [ 79.075549][ T4525] ffff88805a87c800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.083598][ T4525] ffff88805a87c880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.091644][ T4525] >ffff88805a87c900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.099685][ T4525] ^ [ 79.103737][ T4525] ffff88805a87c980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.111779][ T4525] ffff88805a87ca00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.119817][ T4525] ================================================================== [ 79.127860][ T4525] Disabling lock debugging due to kernel taint [ 79.134041][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.145984][ T4449] em28xx 3-1:0.89: Remote control support is not available for this card. [ 79.176359][ T2302] em28xx 3-1:0.89: Closing input extension [ 79.182303][ T2302] em28xx 3-1:0.89: Deregistering snapshot button [ 79.201782][ T4525] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.209016][ T4525] CPU: 0 PID: 4525 Comm: v4l_id Tainted: G B syzkaller #0 [ 79.217614][ T4525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 79.227687][ T4525] Call Trace: [ 79.230989][ T4525] [ 79.234013][ T4525] dump_stack_lvl+0x188/0x250 [ 79.238699][ T4525] ? show_regs_print_info+0x20/0x20 [ 79.243912][ T4525] ? load_image+0x400/0x400 [ 79.248430][ T4525] panic+0x2e5/0x810 [ 79.252389][ T4525] ? bpf_jit_dump+0xd0/0xd0 [ 79.256904][ T4525] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 79.262896][ T4525] ? _raw_spin_unlock+0x40/0x40 [ 79.267755][ T4525] ? print_memory_metadata+0x314/0x400 [ 79.273225][ T4525] ? v4l2_fh_open+0xc6/0x430 [ 79.277828][ T4525] check_panic_on_warn+0x80/0xa0 [ 79.282771][ T4525] ? v4l2_fh_open+0xc6/0x430 [ 79.287371][ T4525] end_report+0x6d/0xf0 [ 79.291547][ T4525] kasan_report+0x102/0x130 [ 79.296058][ T4525] ? v4l2_fh_open+0xc6/0x430 [ 79.300750][ T4525] v4l2_fh_open+0xc6/0x430 [ 79.305261][ T4525] em28xx_v4l2_open+0x152/0x990 [ 79.310119][ T4525] ? __lock_acquire+0x7d10/0x7d10 [ 79.315168][ T4525] v4l2_open+0x20b/0x360 [ 79.316028][ T4526] loop0: detected capacity change from 0 to 8192 [ 79.319420][ T4525] chrdev_open+0x5c5/0x6a0 [ 79.319441][ T4525] ? cd_forget+0x160/0x160 [ 79.319457][ T4525] ? fsnotify_perm+0x3a7/0x560 [ 79.319474][ T4525] ? cd_forget+0x160/0x160 [ 79.319488][ T4525] do_dentry_open+0x7ff/0xf80 [ 79.319512][ T4525] path_openat+0x26f5/0x2fa0 [ 79.319535][ T4525] ? verify_lock_unused+0x140/0x140 [ 79.319554][ T4525] ? slab_post_alloc_hook+0x4c/0x380 [ 79.365006][ T4525] ? do_filp_open+0x410/0x410 [ 79.369749][ T4525] do_filp_open+0x1e2/0x410 [ 79.374262][ T4525] ? vfs_tmpfile+0x300/0x300 [ 79.378869][ T4525] ? _raw_spin_unlock+0x24/0x40 [ 79.383752][ T4525] ? alloc_fd+0x598/0x630 [ 79.388094][ T4525] do_sys_openat2+0x150/0x4b0 [ 79.392784][ T4525] ? __lock_acquire+0x7d10/0x7d10 [ 79.397819][ T4525] ? do_sys_open+0xe0/0xe0 [ 79.402238][ T4525] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 79.408225][ T4525] ? lock_chain_count+0x20/0x20 [ 79.413097][ T4525] ? vtime_user_exit+0x2c8/0x3e0 [ 79.418056][ T4525] __x64_sys_openat+0x135/0x160 [ 79.422926][ T4525] do_syscall_64+0x4c/0xa0 [ 79.427346][ T4525] ? clear_bhb_loop+0x30/0x80 [ 79.432120][ T4525] ? clear_bhb_loop+0x30/0x80 [ 79.436806][ T4525] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.442717][ T4525] RIP: 0033:0x7f2a283a6407 [ 79.447169][ T4525] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 79.466777][ T4525] RSP: 002b:00007ffd9956a590 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 79.475209][ T4525] RAX: ffffffffffffffda RBX: 00007f2a282b8880 RCX: 00007f2a283a6407 [ 79.483187][ T4525] RDX: 0000000000000000 RSI: 00007ffd9956bf1d RDI: ffffffffffffff9c [ 79.491610][ T4525] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 79.499760][ T4525] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 79.507733][ T4525] R13: 00007ffd9956a7e0 R14: 00007f2a28b34000 R15: 0000560027e324d8 [ 79.515743][ T4525] [ 79.519393][ T4525] Kernel Offset: disabled [ 79.523791][ T4525] Rebooting in 86400 seconds..