last executing test programs: 15.679601762s ago: executing program 2 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x12041, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000380)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 13.087082204s ago: executing program 2 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c0001800600060008"], 0x34}}, 0xc000) 11.55490662s ago: executing program 1 (id=333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) 9.508082573s ago: executing program 1 (id=337): r0 = socket$key(0xf, 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 7.816420311s ago: executing program 1 (id=341): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000300)='./file0\x00', 0x20, 0x0) name_to_handle_at(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@raw={0x0, 0x72}, 0xfffffffffffffffe, 0x0) 6.756066519s ago: executing program 0 (id=345): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x41, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r6) connect$netlink(r6, &(0x7f0000000080)=@unspec, 0xc) 6.64395332s ago: executing program 0 (id=346): r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x20000005) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {0x0}], 0x2) 6.376191555s ago: executing program 1 (id=347): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)='2', 0x1}], 0x1) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = getpid() r2 = syz_open_dev$evdev(&(0x7f0000000140), 0xaf6, 0x194000) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000180)={0x57, 0xe9fb, 0x1, {0x7, 0x3}, {0xc709, 0x5}, @ramp={0x3, 0x4, {0x8, 0x8d, 0x9, 0x8}}}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.346629435s ago: executing program 4 (id=348): socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[], 0x0) 6.200672718s ago: executing program 4 (id=349): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc804) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x1600008, &(0x7f0000000440)={[{@nodecompose}, {@umask={'umask', 0x3d, 0x4}}, {@barrier}, {@uid}, {@nobarrier}, {@type={'type', 0x3d, "05f2875e"}}, {@nls={'nls', 0x3d, 'iso8859-4'}}]}, 0x3, 0x632, &(0x7f0000000800)="$eJzs3UtsG2kdAPD/OI4TB9TN7qa7Ba1EtJUWRESbh7IQLpSHUA4rtFoOnKPWbay6aZW4KK0QCi9x4MKh4lwOuXFC6j1SOcMF9ZpjJVAvPaDcjGY8dpy386qd7e8Xjb/v8zfzzX/+9jzsyJoA3lrzE1HciCTmJz5bTdub6zO1zfWZoby7FhFpvRBRbBaRLEUkz5vdN9KHr6VP5vMnB63nSXXuixevN182W8XWwkkprQ0fvNxRmguu5VOMR8RAXu412O2oO8a7eeB4+/nvn/YPshlous1XW4mDXmvssXacxU+83wL9I2meN/cYjRjJztDN64DIjw6FNxvd2TvWUQ4AAAAuqHe2Ymut0Wj0Og4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4SPL7/yf5VGjVxyNp3f+/1DF7qYehnomNXgcAAAAAAAAAACfSGOhsfWMrtmI1LrV7k+x//h9njbHs8SvxMFaiEstxLVZjIepRj+WYiojRjoFKqwv1+vJUF0tO77vk9LluNAAAAAAAAAB82f025rf//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0giRhoFtk01qqPRqEYEcMRUUrnW4v4V6t+kW30OgAAAAB4A97Ziq1YjUutdiPJPvN/kH3uH46HsRT1qEY9alGJW9l3Ac1P/YXN9Zna5vrMvXTaO+5f/tfIdBlGNmI0v3vYf81XsjnKcTuq2TPX4mbcj1q5c5QrrXj2j+s3r9Kxf5DrMrJbeZlu+Z/zsj+MZhkZbGdkMo8tzeO7h2fih69OtaapKLS/+Rk7h5yP5GWyq+y93ZmYjkKW79QHh2ci4pvP/vaLxdrS3cXbKxP9s0kn1MxEo9HMxFDWamXiw7cqE5PZtl9ut+fjp/HzmIjx+DyWoxq/jIWoRyXG4ydZbSF/P6ePo7syVdg59I0drc+PiqSUvy7No+jxYvo4W/ZSVONncT9uRSU+zf6mYyq+G7MxG3Mdr/DlLvb6wvH2+qvfyivpIf2Pedkf0ry+25HXzmPuaNbX+cx2lt47+2Nj8et5JV3H7yLix2e4naezOxPpWeLZV5t97x+eib9m1wkrtaW7y4sLD7pc3yd5me5Hf+irs0T6fnkvfbGy1s53R9r3/r59U1nfWLuvsKfvcrvvqD21lF/D7R1pOuv7cN++mazvSkffnuut9vUQAH1s5NsjpfJ/yv8sPy3/vrxY/mz4R0PfG/qoFIP/GPx+cXLgk8JHyd/jafx6+/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwciuPHt9dqNUqy0dWkuzm/xFdzdxRad3O6fCZk/xGPscZWaVWqwxHX4RxrErt3xEdzyS9jqcfKkP99ubv7XEJOH/X6/ceXF959Pg71XsLdyp3KkuDs7Nzk3Ozn85cv12tDUT6WJnsdZTAedg+6fc6EgAAAAAAAAAAAKBbh/8MYDCf63Q/J+jxJgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX3PxEFDciianJa5Npe3N9ppZOrfr2nMWIKERE8quI5HnEjWhOMdoxXHLQep5U57548Xrz5fZYxdb8hcOW685aPsV4RAzk5VmNd/PU4yXtLUwTdrV0uuDgzPw/AAD//4oVCL4=") truncate(&(0x7f0000000080)='./file2\x00', 0x2000) sched_setscheduler(0x0, 0x6, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x64962, 0x0) epoll_create1(0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0xe4e42, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) sendfile(r0, r0, 0x0, 0x1000200201005) io_uring_setup(0x3c7a, &(0x7f0000000000)={0x0, 0x5f38, 0x8, 0x2, 0x318}) getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x10040080, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.651870917s ago: executing program 4 (id=350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.659350283s ago: executing program 0 (id=351): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x240100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x7}}) 4.381829157s ago: executing program 4 (id=352): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x1, 0x40, 0xca1, 0x45, {{0x7, 0x4, 0x3, 0x1, 0x1c, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @loopback, {[@lsrr={0x83, 0x3, 0xe4}, @ra={0x94, 0x4}]}}}}}) syz_usb_connect(0x3, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x7c, 0xd7, 0x63, 0x20, 0x11ba, 0x1001, 0x8c42, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x80, 0x3, 0x10, 0x7, [{{0x9, 0x4, 0x6, 0x1, 0x0, 0xbd, 0x9b, 0x57, 0x1}}, {{0x9, 0x4, 0x8, 0x8, 0x0, 0xc9, 0x9f, 0xfd, 0x2}}, {{0x9, 0x4, 0x5c, 0x3, 0x0, 0xa9, 0x5a, 0x30, 0x3c}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, r0, 0x25, 0x2, @void}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x4) sendto$unix(r1, 0x0, 0x0, 0x800, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) 3.397413863s ago: executing program 3 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5", @ANYRES32, @ANYBLOB="000000000000010185100000070080", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006000000000000000000000018"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x58, 0x6e, &(0x7f0000000600)="15d4c1407aff030044be5992470874d1d7a41e1d097d8ce76956e885209198ec130244a28a252cf6490b531ec29e021ada0800000000000000500375e79aaca66955ba3b92cb7574f9f182dce9872f8b1ae6cbb89cb5fef8", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x27, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.389940674s ago: executing program 0 (id=354): r0 = gettid() read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000440)) tkill(r0, 0x7) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) syz_usb_disconnect(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000480)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x68, 0x0, 0x5, 0x10001, 0x7, 0x7, "33024842f01b55227c4594486ed4aa8f4a718d44f5717064ea4d9c89fe3608ca50c05a5dc094fa21138648fb249b803c34bec2bb02177ff6280418e2067ebf8b4a999fc54c492a036acc96d6ff0a6574ba09c6212d6d24d8c88d63a1abfbd52366d934b31318946b"}}, 0x180) 3.304241575s ago: executing program 3 (id=355): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) listen(0xffffffffffffffff, 0x8) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000000100)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000000080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.280204176s ago: executing program 1 (id=356): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3.173409417s ago: executing program 2 (id=357): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000008c0)=""/54, 0x36) 2.647918905s ago: executing program 2 (id=358): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x5c3042, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES16=r0, @ANYRES8=0x0, @ANYBLOB="75b8fdeeab1654b4fb498e37c662c00e75c506cf39096270875d0a02537f71fccf9c1cafa241d2b464c41eafd3a8e7fcd5e6b56f795512c98d115410085aaf9e962f396d7daff254935d6755d3d089f164a6ae605f14be2c090000007e1700000000ce183beb3290da", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16=r1, @ANYRES16, @ANYRESHEX, @ANYRES16], 0x5, 0x151a, &(0x7f0000002c80)="$eJzs3AuYjlXXOPC99t43Y5KeJjkMe+1189BgmyTJISGHJEmSJKeEpEmShMSQU9KQhBwnyWEIyWEak8b5fMg5afJKkyQhIcn+X6r3732/er++93r7Pt/3zvpd177mXnM/az3rnjXPPPd9X9c8X/ccVa9F/drNiEj8S+CXL8lCiBghxDAhxDVCiEAIUSmuUtyl/fkUJP9rT8L+XA+kXekO2JXE88/deP65G88/d+P55248/9yN55+78fxzN54/Y7nZ9jlFr+X1Z6xSea98D//84vv/uRm///8bySk/+fON5a/v9U+k8PxzN55/7sbzz914/rkbzz934/n/+6v1n+zj+eduPH/GcrMrff+Z1//IyvOP9l3p3z/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY7nDOX+ZFkL8dftK98UYY4wxxhhjjLE/j897pTtgjDHGGGOMMcbYfz8QUiihRSDyiLwiRuQTseIqkV9cLQqIa0REXCvixHWioLheFBKFRRFRVMSLYqK4MAKFFSRCUUKUFFFRSpQWN4gEUUaUFeWEE+VForhRVBA3iYriZlFJ3CIqi1tFFVFVVBPVxW2ihrhd1BS1RG1xh6gj6op6or64UzQQd4mG4m7RSNwjGot7RRNxn2gq7hfNxAOiuXhQtBAPiZbiYdFKtBZtRFvR7p/OF8ktxfOir3hB9BP9RbIYIAaKF8UgMVgMEUPFMPGSGC5eFiPEKyJFjBSjxKtitHhNjBGvi7FinBgv3hATxEQxSUwWU8RUkSreFNPEW2K6eFvMEDPFLDFbpIk5Yq54R8wT88UC8a5YKN4Ti8RisUQsFenifZEhlolM8YFYLj4UWWKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iI7FD7BS7xG6xR+wV+8THYr/4RBwQn4ps8dk/mX/2P+T3AgECJEjQoCEP5IEYiIFYiIX8kB8KQAGIQATiIA4KQkEoBIWgCBSBeIiH4lAcEBAICEpACYhCFEpDaUiABCgLZcGBg0RIhApwE1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24E+6Eu6AhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBJEiCrtAVukE36A7doQf0gJ7QE3pBb+gNz8Pz8AK8AP2hjhwAA2EgDIJBMASGwlB4CYbDy/AyvAIpMBJGwavwKrwGY+AMjIVxMB7GQw05ESbBZCA5FVIhFabBNJgO02EGzISZMBvSYA7MhbkwD+bDfHgXFsJ78B4shsWwFNIhHTJgGWRCJiyHs5AFK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22AYfwUewE3bCbtgNe2EvfAwfwyfwCaRANmTDQTgIh+AQHIbDkAM5cASOwFE4CsfgGByH43ACTsIpOAmnAX59uZ+D83AeLsCz8V8231tmQ4qQl2ipZR6ZR8bIGBkrY2V+mV8WkAW0EELGyThZUBaUhWQhWUQWkfEyXhaXxSVKlCRDWUKWkFEZlaVlaZkgE2RZWVY66WSiTJQVZAVZUVaUleQtsrK8VVaRVWVHV11WlzVkJ1dT1pK1ZW1ZR9aV9WR9WV82kA1kQ9lQNpKNZGPZWDaR98mmcgAMgQfkpcm0kCOhpRwFrWRr2Ua2la/BI7K9HAMdZEfZST4mx8FY6CLbuyT5pOwqJ0E3+bScDM/IHnIq9JTPyV6yt+wjn5d9ZQfXT/aXM2CAHChnwyA5WA6RQ+U8qCsvTayefEWmyJFylHxVLoXX5Bj5uhwrx8nx8g05QU6Uk+RkOUVOlanyTTlNviWny7flDDlTzpKzZZqcI+fKd+Q8OV8ukO/KhfI9uUgulkvkUpku35cZcpnMlB/I5fJDmSVXyJVylVwt18i1cp1cLzfIjXKT3Cy3yK1ym9wuP5I75E65S+6We+ReuU9+LPfLT+QB+anMlp/Jg/Iv8pD8XB6WX8gc+aU8Ir+SR+XX8pj8Rh6X38oT8qQ8Jb+Tp+X38ow8K8/JH+R5+aO8IH+SF6WXQoGSSimtApVH5VUxKp+KVVep/OpqVUBdoyLqWhWnrlMF1fWqkCqsiqiiKl4VU8WVUaisIhWqEqqkiqpSqrS6QSWoMqqsKqecKq8S1Y2qgrpJVVQ3q0rqFlVZ3aqqqKqqmqqublM11O2qpqqlaqs7VB1VV9VT9dWdqoG6SzVUd6tG6h7VWN2rmqj7VFN1v2qmHlDN1YOqhXpItVQPq1aqtWqj2qp26hHVXj2qOqiOqpN6THVWj6su6gmVpJ5UXdVTqpt6WnVXz6ge6lnVUz2neqneqo/6SV1UXvVT/VWyGqAGqhfVIDVYDVFD1TD1khquXlYj1CsqRY1Uo9SrarR6TY1Rr6uxapwar95QE9RENUlNVlPUVJWq3lTT1FtqunpbzVAz1Sw1W6WpOWrIr5UW/Bfy3/qd/BE/P/s2tV19pHaonWqX2q32qL1qn9qn9qv96oA6oLJVtjqoDqpD6pA6rA6rHJWjjqgj6qg6qo6pY+q4Oq5OqJPqB/WdOq2+V2fUWXVW/aDOq/Pqwq8/A6FBS6201oHOo/PqGJ1Px+qrdH59tS6gr9ERfa2O09fpgvp6XUgX1kV0UR2vi+ni2mjUVpMOdQldUkd1KV1a36ATdBldVpfTTpfXifrGfzn/j/prp9vp9rq97qA76E66k+6sO+suuotO0km6q+6qu+luurvurnvoHrqn7ql76V66j+6j++q+up/up5N1sh6oX9SD9GA9RA/Vw/RLergerkfoETpFp+hRepQerUfrMXqMHqvH6vF6vJ6gJ+hJepKeoqfoVJ2qp+lperqermfoGXqWnqXTdJqeq+fqeXqeXqAX6IV6oV6kF+kleolO1+k6Q2foTJ2pl+vlOkuv0Cv0Kr1Kr9Fr9Dq9Tm/QG/QmvUlv0Vt0lt6ut+sdeofepXfpPXqP3qf36f16vz6gD+hsna0P6oP6kD6kD+vDOkfn6CP6iD6qj+pj+pg+ro/rE/qEPqVP6dP6tD6jz+hz+pw+r8/rC/qCvqgvXjrtC2QgAx3oIE+QJ4gJYoLYIDbIH+QPCgQFgkgQCeKCuKBgcH1QKCgcFAmKBvFBsaB4YAIMbEBBGJQISgbRoFRQOrghSAjKBGWDcoELygeJwY1BheCmoGJwc6wQIqgc3BpUCaoG1YLqwW1BjeD2oGZQK6gd3BHUCeoG9YL6wZ1Bg+CuoGFwd9AouCdoHNwbNAnuC5oG9wfNggeC5sGDQYvgoaBl8HDQKmgdtAnaBu1+qR9UCm75E+p7f6bwo66f6W+SzQAz0LxoBpnBZogZaoaZl8xw87IZYV4xKWakGWVeNaPNa2aMed2MNePMePOGmWAmmklmsplipppU86aZZt4y083bZoaZaWaZ2SbNzDFzzTtmnplvFph3zULznllkFpslZqlJN++bDLPMZJoPzHLzockyK8xKs8qsNmvMWrPOrDcbzEazyWw2W8xWs81sNx+ZHWan2WV2mz1mr9lnPjb7zSfmgPnUZJvPzEHzF3PIfG4Omy9MjvnSHDFfmaPma3PMfGOOm2/NCXPSnDLfmdPme3PGnDXnzA/mvPnRXDA/mYvGXzq5v/T2jho15sE8GIMxGIuxmB/zYwEsgBGMYBzGYUEsiIWwEBbBIhiP8Vgci+MlhIQlsARGMYqlsTQmYAKWxbLo0GEiJmIFrIAVsSJWwkpYGStjFayC1bAa3oa34e14O9bCWngH3oF1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgkmYhF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfJmMyDsSBOAgH4RAcgsNwGA7H4TgCR2AKpuAoHIWjcTSOwTE4FsfheHwDJ+BEnISTcQpOxVRMxWk4DafjdJyBM3AWzsI0TMO5OBfn4TxcgAtwIS7ERbgIl+ASTMd0zMAMzMRMXI7LMQuzcCWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4ALMxGw/iQTyEh/AwHsYczMEjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Ds/jj3gBf8KL6DHGShFrr7L57dW2gL3Gxth89m/jIraojbfFbHFrbCFb+O9itNYm2DK2rC1nnS1vE+2Nv4mr2Kq2mq1ub7M17O225m/iBvYu29DebRvZe2x9e+ffxY3tvbaJfcg2tQ/bZra1bW7b2hb2IdvSPmxb2da2jW1rO9vHbRf7hE2yT9qu9qnfxBl2mV1vN9iNdpPdbz+x5+wP9qj92p63P9p+tr8dZl+yw+3LdoR9xabYkb+Jx9s37AQ70U6yk+0UO/U38Sw726bZOXaufcfOs/N/E6fb9+1Cm2kX2cV2iV36c3ypp0z7gV1uP7RZdoVdaVfZ1XaNXWvX/f9eV9ktdqvdZvfZj+0Ou9PusrvtHrv35/jScRywn9ps+5k9Yr+yh+zn9rA9ZnPslz/Hl47vmP3GHrff2hP2pD1lv7On7ff2jD378/FfOvbv7E/2ovVWEJAkRZoCykN5KYbyUSxdRfnpaipA11CErqU4uo4K0vVUiApTESpK8VSMipMhJEtEIZWgkhSlUlSabqAEKkNlqRw5Kk+JdCNVoJuoIt1MlegWqky3UhWqStWoOt1GNeh2qkm1qDbdQXWoLtWj+nQnNaC7qCHdTY3oHmpM91ITuo+a0v3UjB6g5vQgtaCHqCU9TK2oNbWhttSOHqH29Ch1oI7UiR6jzvQ4daEnKImepK70FHWjp6k7PUM96FnqSc9RL+pNfeh56ksvUD/qT8k0gAbSizSIBtMQGkrD6CUaTi/TCHqFUmgkjaJXaTS9RmPodRpL42g8vUETaCJNosk0haZSKr1J0+gtmk5v0wyaSbNoNqXRHJpL79A8mk8L6F1aSO/RIlpMS2gppdP7lEHLKJM+oOX0IWXRClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttNHtIN20i7aTXtoL+2jj2k/fUIH6FPKps/oIP2FDtHndJi+oBz6ko7QV3RUCzpG39Bx+pZO0Ek6Rd/RafqeztBZOkc/0Hn6kS7QT3SR1BkRQihDFeowCPOEecOYMF8YG14V5g+vDguE14SR8NowLrwuLBheHxYKC4dFwqJhfFgsLB6aEEMbUhiGJcKSYTQsFZYObwgTwjJh2bBc6MLyYWJ4Y1ghvCmsGN4cVgpvCSuHt4ZVwqrhQ/dUD28La4S3hzXDWmHt8I6wTlg3rBfWD+8MG4R3hQ3Du8NG4T1hxfDesEl4X9g0vD9sFj4QNg8fDFuED4Utw4fDVmHrsE3YNmwXPhK2Dx8NO4Qdw07hY2Hn8PGwS/hEmBQ+GXYNn/rD/cnhgHBg+GL4Yuj93WpJdGk0Pfp+NCO6LJoZ/SC6PPphNCu6Iroyuiq6Oromuja6Lro+uiG6Mbopujm6Jbo1ui3qff28woGTTjntApfH5XUxLp+LdVe5/O5qV8Bd4yLuWhfnrnMF3fWukCvsiriiLt4Vc8WdceisIxe6Eq6ki7pSrrS7wSW4Mq6sK+ecK+8SXVvXzrVz7d2jroPr6Dq5x9xj7nH3uHvCPeGedF3dU66be9p1d8+4Hu5Z96x7zvVyvV0f97zr615w/Vx/l+yS3UA30A1yg9wQN8QNc8PccDfcjXAjXIpLcaPcKDfajXZj3Bg31o114914N8FNcJPcJDfFTXGpLtVNc9PcdDfdzXAz3Cw3y6W5NDfXzXXz3Dy3wC1wCxMWukVukVvilrh0l+4yXIbLdJluuVvuslyWW+lWutVutVvr1rr1br3b6Da6zW6z2+q2uu1uu5Nih9vldrk9bo/b5/a5/W6/O+AOuGyX7Q66g+6QO+QOuy9cjvvSHXFfuaPua3fMfeOOu2/dCXfSnXLfudPue3fGnXXn3A/uvPvRXXA/uYvOu9TIm5Fpkbci0yNvR2ZEZkZmRWZH0iJzInMj70TmReZHFkTejSyMvBdZFFkcWRJZGkmPvB/JiCyLZEY+iCyPfBjJiqyIrIysiqyOiIj3xXaEvoQv6aO+lC/tb/AJvowv68t558v7RH+jr+Bv8hX9zb6Sv8VX9rf6Kr6qr+Yf9q18a9/Gt/Xt/CO+vX/Ud/AdfSf/mO/sH/dd/BM+yT/pu/qnfDf/tO/un/E9/LO+p3/O9/K9fR//vO/rX/D9fH+f7Af4gf5FP8gP9kP8UD/Mv+SH+5f9CP+KT/Ej/Sj/qh/tX/Nj/Ot+rB/nx/s3/AQ/0U/yk/0UP9Wn+jf9NP+Wn+7f9jP8TD/Lz/Zpfo6f69/x8/x8v8C/6xf69/wiv9gv8Ut9un/fZ/hlPtN/4Jf7D32WX+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u//I7/A7/S6/2+/xe/2+X+5IxQr/qc/2n/mD/i/+kP/cH/Zf+Bz/pT/iv/JH/df+mP/GH/ff+hP+pD/lv/On/ff+jD/rz/kf/Hn/o7/gf/LPnuD/WWOMMcYY+69Qf7B/wO98T/66LhkohLh6Z9Gc/1hzc6FftgfL+M4RIcST/Xs+8NdVp05ycvKvj81SIii5WAgRuZyfR/xNnNxJPC6SREdR4Xf7Gyx7n6c/qB+95dJJ5mUx4nK8Qvy1/k3/oP4jj43PqByei/tP6i8WIqHk5Zx84nJ8uX7Ff1C/cPs/6D/f56lCdPibnPzicny5fqJ4VDwlkv7ukYwxxhhjjDHG2C8Gy2rd//76U/3u9Xm8vpyTV/wc//zJAZevP3//+pwxxhhjjDHGGGNX3jO9+zzxSFJSx+7/RzZifu37f0s/vPFvugH/R18gf9rGFfyjxBhjjDHGGPtvcfmk/0p3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5V7/Ex8ndqWPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/l8AAAD//+BwJXk=") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90a495, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@norecovery}, {@dax_always}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfeq\xcf\xf1W\x81\xea\xda\xc4@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe\xe5\x9c'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}, 0x6, 0x510, &(0x7f0000002740)="$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") connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.164087264s ago: executing program 3 (id=359): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r3) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)={0x14, r4, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44048804) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.060872225s ago: executing program 1 (id=360): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="63000e0080000000ffffffffffff08021100000008021100000090000000000000000000640082180104627202040406070401000400052606ac264535a7d15d92ed3883177b0403cbc09fa3dbf799bd588a59887355f0766d272c4f077e250300386b0008000c006400000008000d000000000004001b80"], 0x94}}, 0x0) 1.310352948s ago: executing program 4 (id=361): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140), 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x143201, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000200)={[{@resuid}, {@delalloc}, {@nouid32}, {@init_itable}, {@norecovery}]}, 0x9, 0x617, &(0x7f0000000d80)="$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") r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000400)=""/121, 0x79}], 0x1, 0xffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 1.297271718s ago: executing program 3 (id=362): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000cc0)={'syz0\x00', {}, 0x0, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 1.124014031s ago: executing program 0 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000086000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x800000001fe, 0x82) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = inotify_init() syz_emit_ethernet(0x14, 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) 809.190536ms ago: executing program 2 (id=364): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x76, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000005c0)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@jqfmt_vfsv0}, {@data_err_abort}, {@grpid}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7d3, &(0x7f0000000c80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x1, 0x7ff, 0x80000000, 0xffffffffffffffff}) 353.227634ms ago: executing program 3 (id=365): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4041) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x58, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @initial, {0x0, 0x4c}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x1b, @val={0x8c, 0x18, {0x1fe, "3bf9d27a3fa9", @long="f877cc31de9038e5b85b2ccfde685c3b"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 208.257126ms ago: executing program 4 (id=366): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fdatasync(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) 200.338786ms ago: executing program 0 (id=367): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000001300), 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047457, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f00000003c0)) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0xc035}, {r0, 0x2134}, {r1, 0x8000}, {r0, 0x1}], 0x4, 0x0, 0x0, 0x0) 85.893968ms ago: executing program 3 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 0s ago: executing program 2 (id=369): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x2, 0xf2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) shutdown(r2, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. [ 59.692311][ T4155] cgroup: Unknown subsys name 'net' [ 59.809546][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.283165][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.748668][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 62.774664][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 62.854425][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 62.877907][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 62.898919][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 63.010977][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.018197][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.027060][ T4168] device bridge_slave_0 entered promiscuous mode [ 63.039073][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.046212][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.054542][ T4168] device bridge_slave_1 entered promiscuous mode [ 63.062170][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.069351][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.077262][ T4166] device bridge_slave_0 entered promiscuous mode [ 63.108320][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.115597][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.123673][ T4166] device bridge_slave_1 entered promiscuous mode [ 63.157722][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.190740][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.198018][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.206694][ T4177] device bridge_slave_0 entered promiscuous mode [ 63.216143][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.233609][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.240718][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.248877][ T4174] device bridge_slave_0 entered promiscuous mode [ 63.263862][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.270936][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.278927][ T4177] device bridge_slave_1 entered promiscuous mode [ 63.302988][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.315826][ T4168] team0: Port device team_slave_0 added [ 63.321901][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.329109][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.337071][ T4174] device bridge_slave_1 entered promiscuous mode [ 63.344883][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.351967][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.359978][ T4171] device bridge_slave_0 entered promiscuous mode [ 63.376746][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.387844][ T4168] team0: Port device team_slave_1 added [ 63.400417][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.410621][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.418873][ T4171] device bridge_slave_1 entered promiscuous mode [ 63.464808][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.490599][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.509717][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.521348][ T4166] team0: Port device team_slave_0 added [ 63.528150][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.535432][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.561643][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.575501][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.586377][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.606430][ T4166] team0: Port device team_slave_1 added [ 63.612712][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.619670][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.646325][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.666864][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.726037][ T4177] team0: Port device team_slave_0 added [ 63.757036][ T4174] team0: Port device team_slave_0 added [ 63.766011][ T4174] team0: Port device team_slave_1 added [ 63.773579][ T4177] team0: Port device team_slave_1 added [ 63.781773][ T4171] team0: Port device team_slave_0 added [ 63.788332][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.795352][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.821591][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.837384][ T4168] device hsr_slave_0 entered promiscuous mode [ 63.844265][ T4168] device hsr_slave_1 entered promiscuous mode [ 63.867232][ T4171] team0: Port device team_slave_1 added [ 63.873596][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.880547][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.906680][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.955093][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.962066][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.988405][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.010081][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.017094][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.043053][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.055121][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.062085][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.088227][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.108209][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.115302][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.141238][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.158902][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.166065][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.192027][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.204154][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.211119][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.237157][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.261389][ T4166] device hsr_slave_0 entered promiscuous mode [ 64.268306][ T4166] device hsr_slave_1 entered promiscuous mode [ 64.274920][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.282777][ T4166] Cannot create hsr debugfs directory [ 64.383701][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 64.384318][ T4171] device hsr_slave_0 entered promiscuous mode [ 64.390465][ T4173] Bluetooth: hci0: command 0x0409 tx timeout [ 64.402608][ T4171] device hsr_slave_1 entered promiscuous mode [ 64.409607][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.417292][ T4171] Cannot create hsr debugfs directory [ 64.426485][ T4177] device hsr_slave_0 entered promiscuous mode [ 64.434173][ T4177] device hsr_slave_1 entered promiscuous mode [ 64.440818][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.452396][ T4177] Cannot create hsr debugfs directory [ 64.460895][ T4174] device hsr_slave_0 entered promiscuous mode [ 64.467396][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 64.473552][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 64.479698][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 64.479963][ T4174] device hsr_slave_1 entered promiscuous mode [ 64.493457][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.501030][ T4174] Cannot create hsr debugfs directory [ 64.812350][ T4168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.828215][ T4168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.839072][ T4168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.849769][ T4168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.893464][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.903878][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.924638][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.934978][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.993883][ T4177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.021045][ T4177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.034948][ T4177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.053658][ T4177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.126534][ T4171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.147560][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.158459][ T4171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.172190][ T4171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.185181][ T4171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.215495][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.223104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.236027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.265298][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.281355][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.290748][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.301105][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.308585][ T481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.317487][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.327569][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.337781][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.344920][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.354611][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.372258][ T4174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.396259][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.408062][ T4174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.418843][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.428717][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.437129][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.445274][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.454411][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.463398][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.472161][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.484813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.494304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.504063][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.511290][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.523603][ T4174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.535133][ T4174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.551048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.561301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.570757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.586965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.596617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.622233][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.631519][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.640288][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.647403][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.657746][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.667280][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.696194][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.716220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.727040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.741014][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.757116][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.773464][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.808551][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.817796][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.828679][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.838624][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.847427][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.856627][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.865405][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.876104][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.899315][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.908537][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.923763][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.932499][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.943529][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.950610][ T481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.959337][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.974169][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.005968][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.016701][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.025678][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.032801][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.040898][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.082283][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.112974][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.121834][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.132892][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.141590][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.151572][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.170591][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.186931][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.197829][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.216622][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.229588][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.239553][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.248838][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.256814][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.270507][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.284878][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.303861][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.312264][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.322592][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.331392][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.340154][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.347256][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.356124][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.364055][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.371571][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.395041][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.404336][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.416594][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.426426][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.433531][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.441595][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.456664][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.467348][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.473909][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 66.480789][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 66.497309][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.506358][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.515477][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.532614][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.544506][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.553388][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 66.559681][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 66.594217][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 66.600250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.610760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.620794][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.627962][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.637772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.648550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.657904][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.665050][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.672807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.681706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.690642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.699150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.708447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.716666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.725024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.732970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.743613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.754585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.765963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.778510][ T4168] device veth0_vlan entered promiscuous mode [ 66.798164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.808356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.817833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.826833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.836014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.865531][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.883588][ T4168] device veth1_vlan entered promiscuous mode [ 66.899141][ T4166] device veth0_vlan entered promiscuous mode [ 66.911321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.919178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.927018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.935848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.944943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.954741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.963899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.972165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.981878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.991123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.999931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.008985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.017750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.035488][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.059114][ T4166] device veth1_vlan entered promiscuous mode [ 67.074337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.084437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.096037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.105116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.114021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.124589][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.187310][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.204454][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.216265][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.233980][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.253627][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.269076][ T4177] device veth0_vlan entered promiscuous mode [ 67.285640][ T4168] device veth0_macvtap entered promiscuous mode [ 67.296970][ T4168] device veth1_macvtap entered promiscuous mode [ 67.307183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.321811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.330804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.346702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.356301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.364731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.375387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.386139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.405793][ T4177] device veth1_vlan entered promiscuous mode [ 67.435741][ T4166] device veth0_macvtap entered promiscuous mode [ 67.455964][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.472544][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.488286][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.497157][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.506023][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.515995][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.525974][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.535005][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.542428][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.552540][ T4166] device veth1_macvtap entered promiscuous mode [ 67.564084][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.577163][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.586920][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.596242][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.623186][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.636078][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.646524][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.657079][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.667740][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.679679][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.690242][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.698506][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.708292][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.718834][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.729863][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.741938][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.753344][ T4177] device veth0_macvtap entered promiscuous mode [ 67.778276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.792077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.810044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.820635][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.832953][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.844302][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.869320][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.885067][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.900110][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.911511][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.925878][ T4177] device veth1_macvtap entered promiscuous mode [ 67.956093][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.976526][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.987020][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.996439][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.019483][ T4174] device veth0_vlan entered promiscuous mode [ 68.042082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.053594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.091884][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.103861][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.116725][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.127498][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.138784][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.148832][ T4174] device veth1_vlan entered promiscuous mode [ 68.171436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.180384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.190591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.198936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.208018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.226025][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.237437][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.247683][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.258493][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.270070][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.281232][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.285994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.297775][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.310578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.320197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.329991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.339011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.385139][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.395691][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.405025][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.414464][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.478470][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.488480][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.488487][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.489225][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.512121][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.521395][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.529806][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.540504][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.550714][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.553359][ T2855] Bluetooth: hci1: command 0x040f tx timeout [ 68.559093][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.577239][ T4171] device veth0_vlan entered promiscuous mode [ 68.585989][ T2855] Bluetooth: hci0: command 0x040f tx timeout [ 68.587720][ T4174] device veth0_macvtap entered promiscuous mode [ 68.614783][ T481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.619478][ T4171] device veth1_vlan entered promiscuous mode [ 68.630743][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 68.637983][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 68.639065][ T481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.644957][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 68.697260][ T4174] device veth1_macvtap entered promiscuous mode [ 68.709264][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.720295][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.729076][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.744523][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.759107][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.813204][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.821226][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.837534][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.851070][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.861992][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.881517][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.892705][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.893845][ T4242] loop2: detected capacity change from 0 to 164 [ 68.911106][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.923673][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.931219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.939864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.951239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.965973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.989232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.005763][ T4171] device veth0_macvtap entered promiscuous mode [ 69.021313][ T4171] device veth1_macvtap entered promiscuous mode [ 69.040651][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.052256][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.062265][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.089575][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.112330][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.129194][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.141636][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.146384][ T4244] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.193784][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.210293][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.221160][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.230965][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.245798][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.276682][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.309600][ T4244] kvm: pic: single mode not supported [ 69.309697][ T4244] kvm: pic: level sensitive irq not supported [ 69.362889][ T4174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.408900][ T4174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.438639][ T4174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.461657][ T4174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.550526][ T4250] loop2: detected capacity change from 0 to 512 [ 69.571567][ T4248] loop1: detected capacity change from 0 to 40427 [ 69.616779][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.627861][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.638679][ T4250] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.646057][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.664872][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.676139][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.687982][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.697920][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.702503][ T4250] EXT4-fs (loop2): 1 orphan inode deleted [ 69.708393][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.711649][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.723135][ T4250] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.751921][ T4248] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512) [ 69.760768][ T4248] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 69.763474][ T4250] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.776614][ T4248] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 69.814555][ T26] audit: type=1800 audit(1744901287.675:2): pid=4250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="bus" dev="loop2" ino=16 res=0 errno=0 [ 69.863986][ T4248] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.929255][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.939215][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.949506][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.965100][ T4248] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 69.967467][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.972877][ T4248] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 70.005413][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.063492][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.084935][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.099805][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.111764][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.128161][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.140048][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.158870][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.172195][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.191968][ T4171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.214894][ T4171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.224084][ T4171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.232840][ T4171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.263851][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.271871][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.281652][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.373669][ T4259] attempt to access beyond end of device [ 70.373669][ T4259] loop1: rw=2049, want=45104, limit=40427 [ 71.091082][ T4246] Bluetooth: hci0: command 0x0419 tx timeout [ 71.097813][ T4246] Bluetooth: hci1: command 0x0419 tx timeout [ 71.104924][ T4212] Bluetooth: hci2: command 0x0419 tx timeout [ 71.111054][ T4212] Bluetooth: hci3: command 0x0419 tx timeout [ 71.117902][ T4212] Bluetooth: hci4: command 0x0419 tx timeout [ 71.155880][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.212991][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.286891][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.358879][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.366921][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.956883][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.975197][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.081628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.101560][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.104931][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.120688][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.131222][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.139602][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.201941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.288708][ T4212] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.455282][ T4272] tipc: Started in network mode [ 72.460633][ T4272] tipc: Node identity 32943dc3707b, cluster identity 4711 [ 72.470322][ T4272] tipc: Enabled bearer , priority 0 [ 72.492248][ T4268] tipc: Resetting bearer [ 72.553844][ T4212] usb 4-1: Using ep0 maxpacket: 16 [ 72.693185][ T4212] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.826541][ T4212] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.292712][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 73.302768][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 73.312702][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 73.322697][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 73.332697][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 73.341700][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 73.350684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.359730][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.368691][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.377675][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.392161][ T4212] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 73.412705][ T4212] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 73.529026][ T4268] tipc: Disabling bearer [ 73.544036][ T4212] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.563247][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 73.589691][ T4212] usb 4-1: SerialNumber: syz [ 73.590603][ T13] tipc: Node number set to 1122975171 [ 73.813837][ T4212] cdc_acm 4-1:1.0: skipping garbage [ 74.294902][ T4212] usb 4-1: USB disconnect, device number 2 [ 75.840736][ T4316] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 75.868853][ T4314] loop3: detected capacity change from 0 to 512 [ 75.896908][ T4325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'. [ 75.942243][ T4314] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 75.964073][ T4314] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 76.015917][ T4314] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 76.018993][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 76.049664][ T4314] System zones: 1-12 [ 76.090766][ T4326] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 76.107700][ T4314] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.19: corrupted in-inode xattr [ 76.119663][ T4326] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 76.169617][ T4314] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.19: couldn't read orphan inode 15 (err -117) [ 76.203566][ T4314] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 76.224448][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.533006][ T1111] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.513548][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 77.588191][ T4350] loop0: detected capacity change from 0 to 1024 [ 77.665520][ T4355] sch_tbf: burst 8791 is lower than device lo mtu (65550) ! [ 77.669127][ T1111] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 77.688448][ T4355] sch_tbf: burst 8787 is lower than device lo mtu (65550) ! [ 77.691599][ T1111] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 77.737891][ T1111] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.759552][ T1111] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.781080][ T1111] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.791079][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.906314][ T4350] hfsplus: xattr searching failed [ 77.927052][ T4350] hfsplus: xattr searching failed [ 78.815303][ T1111] usb 5-1: GET_CAPABILITIES returned 0 [ 78.820838][ T1111] usbtmc 5-1:16.0: can't read capabilities [ 78.941942][ T4350] hfsplus: bad catalog entry type [ 79.049725][ T4366] loop3: detected capacity change from 0 to 2048 [ 79.062833][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.073769][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.083156][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.092446][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.101727][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.111027][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.120341][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.129636][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.138937][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.148238][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.157530][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.166877][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.176166][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.185453][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.194737][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 79.205246][ T4331] usbtmc 5-1:16.0: Unable to send data, error -71 [ 79.216078][ T4350] hfsplus: xattr search failed [ 79.285583][ T4366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.601033][ T4377] tipc: Started in network mode [ 79.617635][ T4377] tipc: Node identity 1a0a2e215673, cluster identity 4711 [ 79.641006][ T4377] tipc: Enabled bearer , priority 0 [ 79.776402][ T4378] device syzkaller0 entered promiscuous mode [ 79.849903][ T21] usb 5-1: USB disconnect, device number 2 [ 80.005121][ T4376] tipc: Resetting bearer [ 80.050746][ T4380] loop4: detected capacity change from 0 to 1024 [ 80.113712][ T4376] tipc: Disabling bearer [ 80.165115][ T4380] hfsplus: unable to parse mount options [ 81.598305][ T1108] cfg80211: failed to load regulatory.db [ 81.663095][ T4211] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.927423][ T4392] loop2: detected capacity change from 0 to 32768 [ 82.005667][ T4392] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.44 (4392) [ 82.083284][ T4211] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.100431][ T4211] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 82.159587][ T4392] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 82.206087][ T4392] BTRFS info (device loop2): enabling auto defrag [ 82.222722][ T4392] BTRFS info (device loop2): max_inline at 0 [ 82.230000][ T4392] BTRFS info (device loop2): enabling ssd optimizations [ 82.260728][ T4392] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 82.278200][ T4392] BTRFS info (device loop2): use lzo compression, level 0 [ 82.292715][ T4392] BTRFS info (device loop2): using free space tree [ 82.299270][ T4392] BTRFS info (device loop2): has skinny extents [ 82.312908][ T4211] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.322064][ T4211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.350785][ T4211] usb 4-1: Product: syz [ 82.356940][ T4211] usb 4-1: Manufacturer: syz [ 82.363383][ T4211] usb 4-1: SerialNumber: syz [ 82.540929][ T4414] netlink: 156 bytes leftover after parsing attributes in process `syz.0.48'. [ 82.612286][ T4395] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.650324][ T26] audit: type=1326 audit(1744901300.505:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.48" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa74fc7e169 code=0x0 [ 83.315595][ T4395] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.583996][ T4211] cdc_mbim 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 83.584061][ T4211] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 83.584084][ T4211] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 83.803716][ T4211] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 83.826129][ T4211] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 84.749545][ T4452] udc-core: couldn't find an available UDC or it's busy [ 84.793583][ T4452] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.880553][ T4211] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:42:42:42:42:42 [ 85.008806][ T13] usb 4-1: USB disconnect, device number 3 [ 85.027268][ T13] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 85.296944][ T4457] loop1: detected capacity change from 0 to 32768 [ 85.304524][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.340083][ T4464] loop4: detected capacity change from 0 to 512 [ 85.358636][ T4457] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.56 (4457) [ 85.403583][ T4464] ======================================================= [ 85.403583][ T4464] WARNING: The mand mount option has been deprecated and [ 85.403583][ T4464] and is ignored by this kernel. Remove the mand [ 85.403583][ T4464] option from the mount to silence this warning. [ 85.403583][ T4464] ======================================================= [ 85.453021][ T4457] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 85.462106][ T4457] BTRFS info (device loop1): using free space tree [ 85.469208][ T4457] BTRFS info (device loop1): has skinny extents [ 86.723540][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.770439][ T4464] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.58: bad orphan inode 15 [ 86.787706][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 86.790017][ T4457] BTRFS info (device loop1): enabling ssd optimizations [ 86.855565][ T4464] ext4_test_bit(bit=14, block=5) = 0 [ 86.861041][ T4464] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 86.872707][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.981607][ T4464] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 87.092406][ T7] usb 3-1: config 0 descriptor?? [ 87.142855][ T7] usb 3-1: can't set config #0, error -71 [ 87.168844][ T7] usb 3-1: USB disconnect, device number 2 [ 87.521473][ T4173] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.593688][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 87.620022][ T4462] loop3: detected capacity change from 0 to 32768 [ 87.792814][ T4173] usb 1-1: Using ep0 maxpacket: 32 [ 87.843783][ T4462] XFS (loop3): Mounting V5 Filesystem [ 87.934804][ T4173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 87.995097][ T4173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 88.006831][ T7] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 88.035805][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.075318][ T4515] misc userio: Invalid payload size [ 88.080731][ T4173] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.108210][ T7] usb 3-1: config 0 descriptor?? [ 88.120357][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.131180][ T4173] usb 1-1: config 0 descriptor?? [ 88.150688][ T4462] XFS (loop3): Ending clean mount [ 88.179828][ T4177] XFS (loop3): Unmounting Filesystem [ 88.188657][ T4173] hub 1-1:0.0: USB hub found [ 88.422906][ T4173] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 88.777030][ T7] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 88.852975][ T7] [drm] Initialized udl on minor 2 [ 89.559233][ T4173] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 89.713619][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 89.751018][ T7] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 89.830209][ T7] usb 3-1: USB disconnect, device number 3 [ 89.897715][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 90.004100][ T4209] usb 1-1: USB disconnect, device number 2 [ 90.112898][ T4500] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.522881][ T4500] usb 4-1: Using ep0 maxpacket: 8 [ 91.532849][ T4500] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 91.553746][ T4500] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 91.597867][ T4500] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.649821][ T4500] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.696725][ T4500] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.734811][ T4500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.333295][ T4500] usb 4-1: GET_CAPABILITIES returned 0 [ 92.339233][ T4500] usbtmc 4-1:16.0: can't read capabilities [ 92.633832][ T4500] usb 4-1: USB disconnect, device number 4 [ 93.123849][ T4563] loop0: detected capacity change from 0 to 2048 [ 93.659648][ T4563] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.498578][ T4591] usb usb8: usbfs: process 4591 (syz.0.77) did not claim interface 0 before use [ 94.500709][ T4585] loop1: detected capacity change from 0 to 512 [ 94.558970][ T4595] device dummy0 entered promiscuous mode [ 94.578896][ T4595] device macsec1 entered promiscuous mode [ 94.598933][ T4595] device dummy0 left promiscuous mode [ 94.659341][ T4585] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.695168][ T4585] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.82: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 94.763827][ T4585] EXT4-fs error (device loop1): ext4_quota_enable:6398: comm syz.1.82: Bad quota inode: 4, type: 1 [ 94.797945][ T4585] EXT4-fs warning (device loop1): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.854540][ T4585] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 94.862008][ T4585] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.927531][ T4603] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.227412][ T4614] loop4: detected capacity change from 0 to 128 [ 95.317951][ T4614] ufs: You didn't specify the type of your ufs filesystem [ 95.317951][ T4614] [ 95.317951][ T4614] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 95.317951][ T4614] [ 95.317951][ T4614] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 95.400330][ T4619] serio: Serial port ptm0 [ 95.416023][ T4617] loop1: detected capacity change from 0 to 2048 [ 95.478689][ T4614] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 95.489235][ T4617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.007257][ T4629] device syzkaller0 entered promiscuous mode [ 99.193090][ T4612] ODEBUG: Out of memory. ODEBUG disabled [ 100.896392][ T4503] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.928740][ T4211] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.152748][ T4503] usb 4-1: Using ep0 maxpacket: 32 [ 101.272909][ T4503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 101.296288][ T4503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 101.334528][ T4503] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.358623][ T4211] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.360582][ T4503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.394445][ T4211] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 101.427350][ T4503] usb 4-1: config 0 descriptor?? [ 101.473955][ T4503] hub 4-1:0.0: USB hub found [ 101.643924][ T4211] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.653328][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.661435][ T4211] usb 3-1: Product: syz [ 101.684186][ T4211] usb 3-1: Manufacturer: syz [ 101.688863][ T4211] usb 3-1: SerialNumber: syz [ 101.692881][ T4503] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 101.947197][ T4657] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 102.200316][ T4503] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 103.404551][ T4657] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.514587][ T4503] usb 4-1: USB disconnect, device number 5 [ 103.632898][ T4211] cdc_mbim 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 103.640974][ T4211] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 103.670029][ T4211] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 103.673148][ T4678] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 103.682606][ T4678] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.741067][ T4678] vhci_hcd vhci_hcd.0: Device attached [ 103.852896][ T4211] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 103.868970][ T4211] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 103.902024][ T4211] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:42:42:42:42:42 [ 103.986009][ T4173] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.005962][ T4500] vhci_hcd: vhci_device speed not set [ 104.108711][ T4500] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 104.117720][ T4657] udc-core: couldn't find an available UDC or it's busy [ 104.143241][ T4657] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 104.219178][ T4436] usb 3-1: USB disconnect, device number 4 [ 104.232167][ T4436] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 104.262744][ T4173] usb 5-1: Using ep0 maxpacket: 8 [ 104.383227][ T4173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.423448][ T4173] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 104.468863][ T4693] loop3: detected capacity change from 0 to 4096 [ 104.604293][ T4173] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 104.652846][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.663126][ T4701] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.686861][ T4173] usb 5-1: Product: syz [ 104.695700][ T4173] usb 5-1: Manufacturer: syz [ 104.700340][ T4173] usb 5-1: SerialNumber: syz [ 104.741653][ T4173] usb 5-1: config 0 descriptor?? [ 105.063124][ T4173] usb 5-1: USB disconnect, device number 3 [ 105.072080][ T4679] usb 41-1: recv xbuf, -104 [ 105.087073][ T154] vhci_hcd: stop threads [ 105.121335][ T154] vhci_hcd: release socket [ 105.156573][ T154] vhci_hcd: disconnect device [ 105.172876][ T4500] vhci_hcd: vhci_device speed not set [ 105.506289][ T4722] loop1: detected capacity change from 0 to 256 [ 105.523674][ T4723] loop3: detected capacity change from 0 to 1024 [ 105.604480][ T4723] hfsplus: unable to parse mount options [ 105.654502][ T4612] Set syz1 is full, maxelem 65536 reached [ 106.233711][ T4735] loop1: detected capacity change from 0 to 512 [ 106.967222][ T4743] loop4: detected capacity change from 0 to 512 [ 107.032829][ T4743] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 107.052804][ T4743] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 107.118219][ T4743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 107.166208][ T4743] System zones: 1-12 [ 107.210035][ T4753] kernel read not supported for file /eth0 (pid: 4753 comm: syz.0.121) [ 107.228895][ T4743] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.119: corrupted in-inode xattr [ 107.294452][ T4743] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.119: couldn't read orphan inode 15 (err -117) [ 107.309440][ T4755] syz.0.121 uses obsolete (PF_INET,SOCK_PACKET) [ 107.350563][ T26] audit: type=1800 audit(1744901330.200:4): pid=4753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.121" name="eth0" dev="mqueue" ino=35232 res=0 errno=0 [ 107.399752][ T4743] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 107.437884][ T4757] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 107.468702][ T4757] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 107.608218][ T4763] loop0: detected capacity change from 0 to 4096 [ 107.632781][ T4209] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.784121][ T4764] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.767849][ T4774] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 108.774501][ T4774] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.783050][ T4209] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.824701][ T4209] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 108.844501][ T4774] vhci_hcd vhci_hcd.0: Device attached [ 109.033029][ T4209] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.052496][ T4209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.062928][ T4500] vhci_hcd: vhci_device speed not set [ 109.117213][ T4209] usb 2-1: Product: syz [ 109.162923][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.225628][ T4209] usb 2-1: Manufacturer: syz [ 109.269215][ T4209] usb 2-1: SerialNumber: syz [ 109.742316][ T4758] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.114841][ T4500] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 110.403022][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 110.479551][ T4795] loop2: detected capacity change from 0 to 1024 [ 110.503728][ T4758] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.552912][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.571870][ T21] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 110.762888][ T4209] cdc_mbim 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 110.769467][ T4209] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 110.783051][ T21] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 110.797044][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.807543][ T4795] EXT4-fs (loop2): Test dummy encryption mode enabled [ 110.814880][ T4209] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 110.822988][ T21] usb 4-1: Product: syz [ 110.838046][ T21] usb 4-1: Manufacturer: syz [ 110.852812][ T21] usb 4-1: SerialNumber: syz [ 110.872535][ T21] usb 4-1: config 0 descriptor?? [ 110.895867][ T4795] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 110.972928][ T4209] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 110.982738][ T4209] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 111.011640][ T4209] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:42:42:42:42:42 [ 111.303562][ T4758] udc-core: couldn't find an available UDC or it's busy [ 111.312908][ T4758] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.323718][ T4436] usb 4-1: USB disconnect, device number 6 [ 111.330599][ T4775] usb 39-1: recv xbuf, -104 [ 111.335870][ T4267] vhci_hcd: stop threads [ 111.433838][ T4500] vhci_hcd: vhci_device speed not set [ 111.486366][ T4267] vhci_hcd: release socket [ 112.024124][ T4500] usb 39-1: device descriptor read/64, error -71 [ 112.064747][ T4267] vhci_hcd: disconnect device [ 112.079314][ T21] usb 2-1: USB disconnect, device number 2 [ 112.097930][ T21] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 112.233601][ T4500] vhci_hcd: vhci_device speed not set [ 112.473688][ T4811] loop0: detected capacity change from 0 to 1024 [ 113.770274][ T4811] EXT4-fs (loop0): Test dummy encryption mode enabled [ 114.290825][ T4825] kernel read not supported for file /eth0 (pid: 4825 comm: syz.2.135) [ 114.423105][ T26] audit: type=1800 audit(1744901337.280:5): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.135" name="eth0" dev="mqueue" ino=35527 res=0 errno=0 [ 114.446016][ T4811] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 116.193454][ T4844] device syzkaller1 entered promiscuous mode [ 117.635844][ T4861] loop2: detected capacity change from 0 to 64 [ 120.526431][ T4267] attempt to access beyond end of device [ 120.526431][ T4267] loop2: rw=1, want=162, limit=64 [ 120.561962][ T4267] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 120.577571][ T4267] attempt to access beyond end of device [ 120.577571][ T4267] loop2: rw=1, want=163, limit=64 [ 120.590902][ T4267] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 120.600671][ T4267] attempt to access beyond end of device [ 120.600671][ T4267] loop2: rw=1, want=164, limit=64 [ 120.632787][ T4267] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 120.656901][ T4267] attempt to access beyond end of device [ 120.656901][ T4267] loop2: rw=1, want=168, limit=64 [ 120.678945][ T4267] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 120.696483][ T4267] attempt to access beyond end of device [ 120.696483][ T4267] loop2: rw=1, want=170, limit=64 [ 120.720502][ T4267] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 120.732694][ T4500] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.750366][ T4267] attempt to access beyond end of device [ 120.750366][ T4267] loop2: rw=1, want=172, limit=64 [ 120.779862][ T4267] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 120.805473][ T4267] attempt to access beyond end of device [ 120.805473][ T4267] loop2: rw=1, want=173, limit=64 [ 120.840919][ T4897] loop3: detected capacity change from 0 to 64 [ 120.855116][ T4267] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 120.888927][ T4267] attempt to access beyond end of device [ 120.888927][ T4267] loop2: rw=1, want=174, limit=64 [ 120.928342][ T4267] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 120.957986][ T4267] attempt to access beyond end of device [ 120.957986][ T4267] loop2: rw=1, want=175, limit=64 [ 121.133955][ T4500] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.207066][ T4267] Buffer I/O error on dev loop2, logical block 174, lost async page write [ 121.367354][ T4500] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 121.515372][ T4267] attempt to access beyond end of device [ 121.515372][ T4267] loop2: rw=1, want=176, limit=64 [ 121.762441][ T4267] Buffer I/O error on dev loop2, logical block 175, lost async page write [ 122.081553][ T4500] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.091826][ T4500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.099972][ T4500] usb 1-1: Product: syz [ 122.104194][ T4500] usb 1-1: Manufacturer: syz [ 122.108801][ T4500] usb 1-1: SerialNumber: syz [ 123.098316][ T4880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.200861][ T4916] device dummy0 entered promiscuous mode [ 123.213115][ T4916] device macsec1 entered promiscuous mode [ 123.293674][ T4916] device dummy0 left promiscuous mode [ 123.470200][ T4915] loop2: detected capacity change from 0 to 4096 [ 123.862831][ T4880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.113985][ T4500] cdc_mbim 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 124.123670][ T4500] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 124.131292][ T4500] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 124.146211][ T4924] loop3: detected capacity change from 0 to 2048 [ 124.219100][ T4924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.332923][ T4500] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 124.351436][ T4500] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 124.431235][ T4918] loop4: detected capacity change from 0 to 32768 [ 124.535806][ T4880] udc-core: couldn't find an available UDC or it's busy [ 124.558181][ T4500] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42 [ 124.566623][ T4880] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 125.497176][ T4918] XFS (loop4): Mounting V5 Filesystem [ 125.690086][ T4503] usb 1-1: USB disconnect, device number 3 [ 125.720848][ T4918] XFS (loop4): Ending clean mount [ 125.737161][ T4503] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 125.790253][ T4943] device syzkaller1 entered promiscuous mode [ 128.240239][ T4171] XFS (loop4): Unmounting Filesystem [ 128.332715][ T4500] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.813672][ T4500] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 128.916495][ T4500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.533165][ T4500] usb 3-1: config 0 descriptor?? [ 129.772861][ T4500] usb 3-1: can't set config #0, error -71 [ 129.820618][ T4986] kernel read not supported for file /eth0 (pid: 4986 comm: syz.1.171) [ 129.824524][ T4500] usb 3-1: USB disconnect, device number 5 [ 129.835090][ T26] audit: type=1800 audit(1744901352.690:6): pid=4986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.171" name="eth0" dev="mqueue" ino=34667 res=0 errno=0 [ 129.849256][ T4987] loop0: detected capacity change from 0 to 512 [ 129.861810][ T4979] Zero length message leads to an empty skb [ 129.962550][ T4991] loop2: detected capacity change from 0 to 2048 [ 130.090347][ T4987] EXT4-fs error (device loop0): ext4_fill_super:4841: inode #2: comm syz.0.181: iget: bad i_size value: -1 [ 130.135446][ T4987] EXT4-fs (loop0): get root inode failed [ 130.147966][ T5000] loop3: detected capacity change from 0 to 512 [ 130.181408][ T4987] EXT4-fs (loop0): mount failed [ 130.214337][ T4991] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.186072][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 131.251306][ T5000] EXT4-fs (loop3): 1 orphan inode deleted [ 131.326299][ T5000] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.338699][ T26] audit: type=1804 audit(1744901354.180:7): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.172" name="/newroot/36/file2/bus" dev="loop2" ino=18 res=1 errno=0 [ 131.338879][ T5000] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.465058][ T26] audit: type=1804 audit(1744901354.220:8): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.172" name="/newroot/36/file2/bus" dev="loop2" ino=18 res=1 errno=0 [ 131.487977][ T5018] EXT4-fs (loop2): shut down requested (2) [ 131.605319][ T26] audit: type=1800 audit(1744901354.440:9): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.174" name="bus" dev="loop3" ino=16 res=0 errno=0 [ 132.796980][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.708351][ T5040] loop1: detected capacity change from 0 to 128 [ 140.879789][ T5100] process 'syz.0.197' launched './file0' with NULL argv: empty string added [ 142.865132][ T5118] loop0: detected capacity change from 0 to 64 [ 142.949472][ T5120] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 143.092918][ T4173] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.375267][ T5118] gfs2: path_lookup on c::: returned error -2 [ 143.487992][ T4173] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.504335][ T4173] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 143.873284][ T4173] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.915020][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.970211][ T4173] usb 5-1: Product: syz [ 143.999287][ T4173] usb 5-1: Manufacturer: syz [ 144.036754][ T4173] usb 5-1: SerialNumber: syz [ 144.333104][ T4209] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.715476][ T5116] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 144.832941][ T4209] usb 3-1: Using ep0 maxpacket: 32 [ 145.226369][ T5151] loop0: detected capacity change from 0 to 256 [ 145.316679][ T4209] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.325387][ T4209] usb 3-1: config 0 has no interface number 0 [ 145.331531][ T4209] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 145.343555][ T4209] usb 3-1: config 0 interface 1 has no altsetting 0 [ 145.383554][ T5116] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.843477][ T4173] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 145.850702][ T4173] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 145.858310][ T4173] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 145.883622][ T4209] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 145.897698][ T4209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.908102][ T4209] usb 3-1: Product: syz [ 145.912367][ T4209] usb 3-1: Manufacturer: syz [ 145.922690][ T4209] usb 3-1: SerialNumber: syz [ 145.942564][ T4209] usb 3-1: config 0 descriptor?? [ 146.086691][ T4173] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 146.099419][ T4173] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 146.112189][ T4173] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 146.895588][ T5116] udc-core: couldn't find an available UDC or it's busy [ 146.922835][ T5116] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.952902][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 146.960143][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 146.977226][ T4209] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 147.003328][ T4173] usb 5-1: USB disconnect, device number 4 [ 147.003436][ T5164] gfs2: path_lookup on c::: returned error -2 [ 147.010079][ T4173] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 147.025622][ T4209] cx231xx 3-1:0.1: Failed to read PCB config [ 147.031812][ T4209] cx231xx: probe of 3-1:0.1 failed with error -71 [ 147.052272][ T4209] usb 3-1: USB disconnect, device number 6 [ 147.432822][ T4209] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.482160][ T5191] loop0: detected capacity change from 0 to 256 [ 148.142951][ T4209] usb 3-1: Using ep0 maxpacket: 32 [ 148.563397][ T4209] usb 3-1: device descriptor read/all, error -71 [ 148.640214][ T5207] netlink: 'syz.4.232': attribute type 1 has an invalid length. [ 148.730877][ T5220] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 148.771645][ T5216] device bond0 entered promiscuous mode [ 148.826477][ T5216] device bond_slave_0 entered promiscuous mode [ 148.835634][ T5216] device bond_slave_1 entered promiscuous mode [ 148.843258][ T5216] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 148.853635][ T5216] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 149.007144][ T5214] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 149.052832][ T5214] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 150.906939][ T5259] misc userio: No port type given on /dev/userio [ 150.940907][ T5259] loop2: detected capacity change from 0 to 256 [ 151.081184][ T5259] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.528787][ T5279] loop4: detected capacity change from 0 to 256 [ 154.630942][ T4181] Bluetooth: Wrong link type (-22) [ 156.647407][ T5306] loop0: detected capacity change from 0 to 2048 [ 156.703002][ T5306] loop0: p1 < > p3 [ 156.820223][ T5306] loop0: p3 size 134217728 extends beyond EOD, truncated [ 157.894774][ C0] Illegal XDP return value 16128, expect packet loss! [ 158.041611][ T5333] loop2: detected capacity change from 0 to 512 [ 158.239286][ T5333] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.253771][ T5333] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.012983][ T4501] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 160.063045][ T4501] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.642675][ T4501] usb 3-1: not running at top speed; connect to a high speed hub [ 160.883271][ T4501] usb 3-1: config 3 has an invalid interface number: 86 but max is 0 [ 160.919834][ T4501] usb 3-1: config 3 has no interface number 0 [ 160.927638][ T4501] usb 3-1: config 3 interface 86 has no altsetting 0 [ 161.962775][ T4501] usb 3-1: New USB device found, idVendor=0d8e, idProduct=7802, bcdDevice=f3.cf [ 161.971904][ T4501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.022801][ T4501] usb 3-1: can't set config #3, error -71 [ 162.035660][ T5378] loop2: detected capacity change from 0 to 2048 [ 162.058034][ T4501] usb 3-1: USB disconnect, device number 9 [ 162.109114][ T5378] Alternate GPT is invalid, using primary GPT. [ 162.262903][ T5378] loop2: p1 p2 p3 [ 163.284633][ T4455] udevd[4455]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 163.297032][ T4158] udevd[4158]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 163.316039][ T4460] udevd[4460]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 163.339936][ T5400] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.526701][ T4501] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 165.681583][ T5416] loop4: detected capacity change from 0 to 128 [ 165.822618][ C1] sched: RT throttling activated [ 165.915977][ T4501] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 165.972349][ T4501] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.985867][ T4501] usb 1-1: config 0 descriptor?? [ 166.022895][ T4501] usb 1-1: can't set config #0, error -71 [ 166.039692][ T4501] usb 1-1: USB disconnect, device number 4 [ 170.611502][ T5460] loop2: detected capacity change from 0 to 16 [ 170.635732][ T5454] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 170.648294][ T5460] erofs: (device loop2): mounted with root inode @ nid 36. [ 171.502915][ T5454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.299'. [ 171.532578][ T5454] batman_adv: batadv0: Adding interface: vlan1 [ 171.539333][ T5454] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.571100][ T5454] batman_adv: batadv0: Interface activated: vlan1 [ 171.742795][ T5459] sctp: failed to load transform for md5: -2 [ 173.286554][ T5493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 173.327981][ T5493] device vlan2 entered promiscuous mode [ 173.353426][ T5493] device erspan0 entered promiscuous mode [ 173.376870][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 173.591285][ T5507] loop0: detected capacity change from 0 to 512 [ 173.600192][ T26] audit: type=1326 audit(1744901396.450:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc637a7169 code=0x7ffc0000 [ 173.637985][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 173.693082][ T5516] loop4: detected capacity change from 0 to 16 [ 173.723243][ T26] audit: type=1326 audit(1744901396.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc637a7169 code=0x7ffc0000 [ 173.748878][ T5507] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.772930][ T26] audit: type=1326 audit(1744901396.460:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc637a7169 code=0x7ffc0000 [ 173.775086][ T5507] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.811409][ T5516] erofs: (device loop4): mounted with root inode @ nid 36. [ 173.826078][ T26] audit: type=1326 audit(1744901396.460:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc637a7169 code=0x7ffc0000 [ 173.860075][ T26] audit: type=1326 audit(1744901396.460:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc637a7169 code=0x7ffc0000 [ 174.129043][ T26] audit: type=1326 audit(1744901396.460:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc637a7169 code=0x7ffc0000 [ 174.151263][ T26] audit: type=1326 audit(1744901396.460:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc637a7169 code=0x7ffc0000 [ 174.179666][ T26] audit: type=1326 audit(1744901396.460:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc637a7169 code=0x7ffc0000 [ 174.300696][ T26] audit: type=1326 audit(1744901396.460:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbc637a7169 code=0x7ffc0000 [ 174.324614][ T26] audit: type=1326 audit(1744901396.460:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz.1.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc637a71a3 code=0x7ffc0000 [ 175.521155][ T5525] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 175.537511][ T5525] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 175.550191][ T5525] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 177.693054][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 177.837493][ T5558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'. [ 177.847197][ T5558] openvswitch: netlink: Missing key (keys=40, expected=80) [ 179.632778][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 179.908101][ T1108] usb 1-1: device descriptor read/all, error -71 [ 180.079867][ T5573] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.240110][ T5590] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 182.281327][ T5595] netlink: 104 bytes leftover after parsing attributes in process `syz.3.343'. [ 182.474878][ T5601] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 183.113301][ T5612] loop4: detected capacity change from 0 to 1024 [ 183.252133][ T5612] handle_bad_sector: 7 callbacks suppressed [ 183.252154][ T5612] attempt to access beyond end of device [ 183.252154][ T5612] loop4: rw=0, want=201326594, limit=1024 [ 183.281095][ T5612] buffer_io_error: 6 callbacks suppressed [ 183.281114][ T5612] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 183.306554][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 183.306570][ T26] audit: type=1800 audit(1744901406.160:43): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.349" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 183.348519][ T5612] hfsplus: unable to mark blocks free: error -5 [ 183.361865][ T5614] attempt to access beyond end of device [ 183.361865][ T5614] loop4: rw=0, want=201326594, limit=1024 [ 183.388327][ T26] audit: type=1800 audit(1744901406.190:44): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.349" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 183.412917][ T5612] hfsplus: can't free extent [ 183.421348][ T5614] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 183.432239][ T5614] attempt to access beyond end of device [ 183.432239][ T5614] loop4: rw=0, want=201326594, limit=1024 [ 183.444691][ T5614] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 185.122982][ T4501] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 185.402824][ T4501] usb 5-1: Using ep0 maxpacket: 32 [ 185.923084][ T4501] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.038103][ T4501] usb 5-1: config 128 has an invalid interface number: 6 but max is 2 [ 186.061700][ T4501] usb 5-1: config 128 has an invalid interface number: 8 but max is 2 [ 186.113343][ T4263] Bluetooth: hci4: command 0x0406 tx timeout [ 186.119488][ T4263] Bluetooth: hci1: command 0x0406 tx timeout [ 186.129761][ T4501] usb 5-1: config 128 has an invalid interface number: 92 but max is 2 [ 186.156257][ T4437] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 186.169801][ T4501] usb 5-1: config 128 has no interface number 0 [ 186.254234][ T4501] usb 5-1: config 128 has no interface number 1 [ 186.320400][ T4501] usb 5-1: config 128 has no interface number 2 [ 186.416661][ T4501] usb 5-1: config 128 interface 6 has no altsetting 0 [ 186.511968][ T4501] usb 5-1: config 128 interface 8 has no altsetting 0 [ 186.573285][ T4437] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.618961][ T4501] usb 5-1: config 128 interface 92 has no altsetting 0 [ 186.640586][ T4437] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.734584][ T4437] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.836156][ T4437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.883674][ T4501] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=8c.42 [ 186.893008][ T4501] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.901149][ T4501] usb 5-1: Product: syz [ 186.915820][ T4501] usb 5-1: Manufacturer: syz [ 186.920633][ T4501] usb 5-1: SerialNumber: syz [ 186.936498][ T4503] Bluetooth: hci2: command 0x0406 tx timeout [ 186.942558][ T4503] Bluetooth: hci3: command 0x0406 tx timeout [ 186.949249][ T5629] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 186.957064][ T4503] Bluetooth: hci0: command 0x0406 tx timeout [ 187.208984][ T5649] loop2: detected capacity change from 0 to 256 [ 187.280190][ T1108] usb 1-1: USB disconnect, device number 7 [ 187.315896][ T4501] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 187.341235][ T4501] usb 5-1: selecting invalid altsetting 0 [ 187.354431][ T2423] pvrusb2: Invalid write control endpoint [ 187.432393][ T4501] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 187.455584][ T4501] usb 5-1: selecting invalid altsetting 0 [ 187.529238][ T4501] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 187.544516][ T5649] loop2: detected capacity change from 0 to 512 [ 187.545225][ T4501] usb 5-1: selecting invalid altsetting 0 [ 187.556464][ T2423] pvrusb2: Invalid write control endpoint [ 187.562563][ T2423] pvrusb2: Invalid write control endpoint [ 187.580222][ T4501] usb 5-1: USB disconnect, device number 5 [ 187.602898][ T2423] pvrusb2: Invalid write control endpoint [ 187.608669][ T2423] pvrusb2: Invalid write control endpoint [ 187.617148][ T2423] pvrusb2: Invalid write control endpoint [ 187.624206][ T2423] pvrusb2: Invalid write control endpoint [ 187.630772][ T2423] pvrusb2: Invalid write control endpoint [ 187.639766][ T2423] pvrusb2: Invalid write control endpoint [ 187.645715][ T2423] pvrusb2: Invalid write control endpoint [ 187.651471][ T2423] pvrusb2: Invalid write control endpoint [ 187.657416][ T2423] pvrusb2: Invalid write control endpoint [ 187.670675][ T2423] pvrusb2: Invalid write control endpoint [ 187.703957][ T2423] pvrusb2: Invalid write control endpoint [ 187.731611][ T2423] pvrusb2: Invalid write control endpoint [ 187.748105][ T2423] pvrusb2: Invalid write control endpoint [ 187.754084][ T2423] pvrusb2: Invalid write control endpoint [ 187.759851][ T2423] pvrusb2: Invalid write control endpoint [ 187.765898][ T2423] pvrusb2: Invalid write control endpoint [ 187.771721][ T2423] pvrusb2: Invalid write control endpoint [ 187.779157][ T2423] pvrusb2: Invalid write control endpoint [ 187.785047][ T2423] pvrusb2: Invalid write control endpoint [ 187.800243][ T2423] pvrusb2: Invalid write control endpoint [ 187.814629][ T2423] pvrusb2: Invalid write control endpoint [ 187.828199][ T2423] pvrusb2: Invalid write control endpoint [ 187.870758][ T2423] pvrusb2: Invalid write control endpoint [ 187.899082][ T2423] pvrusb2: Invalid write control endpoint [ 187.922685][ T2423] pvrusb2: Invalid write control endpoint [ 187.957832][ T2423] pvrusb2: Invalid write control endpoint [ 187.979170][ T2423] pvrusb2: Invalid write control endpoint [ 188.022749][ T2423] pvrusb2: Invalid write control endpoint [ 188.028730][ T2423] pvrusb2: Invalid write control endpoint [ 188.064762][ T2423] pvrusb2: Invalid write control endpoint [ 188.088765][ T5666] loop4: detected capacity change from 0 to 1024 [ 188.120001][ T2423] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 188.208943][ T5666] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 188.281339][ T5666] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #32: comm syz.4.361: iget: special inode unallocated [ 188.391056][ T2423] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 188.410746][ T2423] pvrusb2: Invalid write control endpoint [ 188.439880][ T5666] EXT4-fs (loop4): no journal found [ 188.452866][ T2423] pvrusb2: Invalid write control endpoint [ 188.467413][ T2423] pvrusb2: Invalid write control endpoint [ 188.483462][ T5666] EXT4-fs (loop4): can't get journal size [ 188.485601][ T5672] loop2: detected capacity change from 0 to 2048 [ 188.516083][ T2423] pvrusb2: Invalid write control endpoint [ 188.529270][ T2423] pvrusb2: Invalid write control endpoint [ 188.542996][ T5666] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.361: iget: special inode unallocated [ 188.604393][ T2423] pvrusb2: Invalid write control endpoint [ 188.624835][ T5666] EXT4-fs (loop4): failed to initialize system zone (-117) [ 188.626791][ T5672] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,jqfmt=vfsv0,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 188.654800][ T5666] EXT4-fs (loop4): mount failed [ 188.683820][ T2423] pvrusb2: Invalid write control endpoint [ 188.690182][ T2423] pvrusb2: Invalid write control endpoint [ 188.696497][ T2423] pvrusb2: Invalid write control endpoint [ 188.702341][ T2423] pvrusb2: Invalid write control endpoint [ 188.709250][ T2423] pvrusb2: Invalid write control endpoint [ 188.715457][ T2423] pvrusb2: Invalid write control endpoint [ 188.721299][ T2423] pvrusb2: Invalid write control endpoint [ 188.727556][ T2423] pvrusb2: Invalid write control endpoint [ 188.734345][ T2423] pvrusb2: Invalid write control endpoint [ 188.740176][ T2423] pvrusb2: Invalid write control endpoint [ 188.746455][ T2423] pvrusb2: Invalid write control endpoint [ 188.753056][ T2423] pvrusb2: Invalid write control endpoint [ 188.758879][ T2423] pvrusb2: Invalid write control endpoint [ 188.765812][ T2423] pvrusb2: Invalid write control endpoint [ 188.771650][ T2423] pvrusb2: Invalid write control endpoint [ 188.796814][ T2423] pvrusb2: Attached sub-driver cs53l32a [ 188.894663][ T5671] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.364: bg 0: block 234: padding at end of block bitmap is not set [ 188.988258][ T2423] pvrusb2: Invalid write control endpoint [ 189.001015][ T2423] pvrusb2: Invalid write control endpoint [ 189.017334][ T2423] pvrusb2: Invalid write control endpoint [ 189.037667][ T2423] pvrusb2: Invalid write control endpoint [ 189.112649][ T2423] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 189.154993][ T4298] ------------[ cut here ]------------ [ 189.161026][ T4298] kernel BUG at fs/ext4/inode.c:2733! [ 189.175537][ T4298] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 189.181635][ T4298] CPU: 0 PID: 4298 Comm: kworker/u4:12 Not tainted 5.15.180-syzkaller #0 [ 189.190064][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.200143][ T4298] Workqueue: writeback wb_workfn (flush-7:2) [ 189.206177][ T4298] RIP: 0010:ext4_writepages+0x3d02/0x3d10 [ 189.211920][ T4298] Code: c7 50 97 c8 8c 4c 89 f2 e8 5b 76 17 02 e9 bb fb ff ff e8 e1 6c 62 ff 0f 0b e8 aa 59 21 08 e8 d5 6c 62 ff 0f 0b e8 ce 6c 62 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 41 54 53 49 [ 189.231796][ T4298] RSP: 0018:ffffc900031eef60 EFLAGS: 00010293 [ 189.237881][ T4298] RAX: ffffffff821dd572 RBX: 0000008000000000 RCX: ffff88801ee13b80 [ 189.245866][ T4298] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 189.253847][ T4298] RBP: ffffc900031ef350 R08: ffffffff821d9f10 R09: ffffed100ba8c785 [ 189.261830][ T4298] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900031ef220 [ 189.269811][ T4298] R13: ffffc900031ef710 R14: 0000008410000000 R15: 0000000000000001 [ 189.277794][ T4298] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 189.286729][ T4298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.293310][ T4298] CR2: 0000001b3041fffc CR3: 000000007549f000 CR4: 00000000003506f0 [ 189.301320][ T4298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.309414][ T4298] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.317382][ T4298] Call Trace: [ 189.320656][ T4298] [ 189.323577][ T4298] ? mark_lock+0x98/0x340 [ 189.327908][ T4298] ? validate_chain+0x112/0x5930 [ 189.332866][ T4298] ? validate_chain+0x112/0x5930 [ 189.337823][ T4298] ? mark_lock+0x98/0x340 [ 189.342146][ T4298] ? __lock_acquire+0x1295/0x1ff0 [ 189.347182][ T4298] ? ext4_readpage+0x300/0x300 [ 189.351984][ T4298] ? do_raw_spin_unlock+0x137/0x8b0 [ 189.357199][ T4298] ? ext4_readpage+0x300/0x300 [ 189.361964][ T4298] do_writepages+0x481/0x730 [ 189.366558][ T4298] ? __writepage+0x120/0x120 [ 189.371594][ T4298] ? read_lock_is_recursive+0x10/0x10 [ 189.376969][ T4298] ? writeback_sb_inodes+0x732/0x1a40 [ 189.382349][ T4298] ? __lock_acquire+0x1ff0/0x1ff0 [ 189.387393][ T4298] ? do_raw_spin_lock+0x14a/0x370 [ 189.392419][ T4298] __writeback_single_inode+0x15b/0xe30 [ 189.397988][ T4298] writeback_sb_inodes+0xbce/0x1a40 [ 189.403288][ T4298] ? __lock_acquire+0x1ff0/0x1ff0 [ 189.408323][ T4298] ? queue_io+0x560/0x560 [ 189.412751][ T4298] ? __writeback_inodes_wb+0x400/0x400 [ 189.418284][ T4298] ? queue_io+0x3d3/0x560 [ 189.422621][ T4298] wb_writeback+0x451/0xc50 [ 189.427136][ T4298] ? rcu_lock_release+0x20/0x20 [ 189.431986][ T4298] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 189.437967][ T4298] ? do_raw_spin_unlock+0x137/0x8b0 [ 189.443179][ T4298] wb_workfn+0x46c/0x1130 [ 189.447558][ T4298] ? mark_lock+0x98/0x340 [ 189.451894][ T4298] ? inode_wait_for_writeback+0x280/0x280 [ 189.457696][ T4298] ? read_lock_is_recursive+0x10/0x10 [ 189.463173][ T4298] ? preempt_schedule+0xd9/0xe0 [ 189.468038][ T4298] ? schedule_preempt_disabled+0x20/0x20 [ 189.473671][ T4298] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 189.479664][ T4298] ? print_irqtrace_events+0x210/0x210 [ 189.485222][ T4298] ? preempt_schedule_thunk+0x16/0x18 [ 189.490603][ T4298] process_one_work+0x8a1/0x10c0 [ 189.495543][ T4298] ? worker_detach_from_pool+0x260/0x260 [ 189.501175][ T4298] ? _raw_spin_lock_irqsave+0x120/0x120 [ 189.506733][ T4298] ? kthread_data+0x4e/0xc0 [ 189.511270][ T4298] ? wq_worker_running+0x97/0x170 [ 189.516293][ T4298] worker_thread+0xaca/0x1280 [ 189.520981][ T4298] kthread+0x3f6/0x4f0 [ 189.525039][ T4298] ? rcu_lock_release+0x20/0x20 [ 189.529880][ T4298] ? kthread_blkcg+0xd0/0xd0 [ 189.534463][ T4298] ret_from_fork+0x1f/0x30 [ 189.538875][ T4298] [ 189.541880][ T4298] Modules linked in: [ 189.562656][ T2423] pvrusb2: Device being rendered inoperable [ 190.107257][ T2423] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 190.133147][ T2423] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 190.181261][ T4501] pvrusb2: Device being rendered inoperable [ 190.197085][ T2423] pvrusb2: Invalid write control endpoint [ 190.212499][ T4298] ---[ end trace b0013b0114e3425b ]--- [ 190.220290][ T4298] RIP: 0010:ext4_writepages+0x3d02/0x3d10 [ 190.227972][ T4298] Code: c7 50 97 c8 8c 4c 89 f2 e8 5b 76 17 02 e9 bb fb ff ff e8 e1 6c 62 ff 0f 0b e8 aa 59 21 08 e8 d5 6c 62 ff 0f 0b e8 ce 6c 62 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 41 54 53 49 [ 190.247762][ T4298] RSP: 0018:ffffc900031eef60 EFLAGS: 00010293 [ 190.254193][ T4298] RAX: ffffffff821dd572 RBX: 0000008000000000 RCX: ffff88801ee13b80 [ 190.262293][ T4298] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 190.270435][ T4298] RBP: ffffc900031ef350 R08: ffffffff821d9f10 R09: ffffed100ba8c785 [ 190.278567][ T4298] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900031ef220 [ 190.286641][ T4298] R13: ffffc900031ef710 R14: 0000008410000000 R15: 0000000000000001 [ 190.295185][ T4298] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 190.298169][ T2423] pvrusb2: Invalid write control endpoint [ 190.307680][ T4298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.310495][ T2423] pvrusb2: Invalid write control endpoint [ 190.318851][ T4298] CR2: 00007f7fdcace178 CR3: 000000006434f000 CR4: 00000000003506f0 [ 190.337676][ T2423] pvrusb2: Invalid write control endpoint [ 190.337702][ T4298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.351737][ T4298] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.363325][ T4298] Kernel panic - not syncing: Fatal exception [ 190.369667][ T4298] Kernel Offset: disabled [ 190.373994][ T4298] Rebooting in 86400 seconds..