last executing test programs: 9.21073806s ago: executing program 0 (id=268): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) 8.594633296s ago: executing program 4 (id=270): socket$alg(0x26, 0x5, 0x0) io_getevents(0x0, 0x10000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) 8.440078418s ago: executing program 2 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000e80)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x3, 0x0, [{0x7, 0x5, 0x8, '\x00', 0x55}, {0x7, 0x86, 0x8, '\x00', 0xff}, {0x7, 0x1f, 0x4e, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x5, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0x40, 0x90, 0x4, '\x00', 0x8}, {0x1, 0x4, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x11}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0x3, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x71, 0x6, '\x00', 0x9}, {0x8, 0x84, 0x2}, {0xf9, 0x8, 0x9, '\x00', 0x2}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x24, '\x00', 0x1}, {0x58, 0x4, 0x61, '\x00', 0x81}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xa, '\x00', 0x9}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x7f, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1e50}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x154}, {}, {}, {}, {}, {}, {0x40000000}, {}, {}, {}, {}, {0xd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x40000001}, {0x80000019}, {}, {0x0, 0x0, 0x4}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 8.405998088s ago: executing program 0 (id=273): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 8.351034109s ago: executing program 4 (id=274): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f000000c280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRES32, @ANYBLOB="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", @ANYRES16, @ANYBLOB="7586a035f55c6293d0f1b99c9b1885d532ab5c9f7209d3d9472bc4f6ae44ee7a08ce61001daaba6032a03b61fba7f6b0299550c27826218b7c1898ec7cb416ad734679ede2e5f49b3ef825c5f8f4441b01e9e4a78d86b9f7a56f4d2ce1c37c28d615601630e01709cfcf262367e0418aa422f760e4569bca22c7bf82b1f192a3e4f618e5978e7e8a188486fa2a380915715ef67da718b0037e943a2e8bbcd8265aef7abcca6f6e85d9d36ec4da2d8a8c1ddd4a0f9dcb5a717640ce47b6559045244e04e11052d376", @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0xc1, 0x1521, &(0x7f0000003fc0)="$eJzs3AuYjlX3MPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBwmJo3z+ZBz0uSVJklyCgn7u/T2/3vff+/79n+/+j7f95/1u649s9d1P2s9637WXPPc93NdM991H1GnWd2aTYhI/CHw128pQogYIcQQIcR1QohACFEhvkL85eP5FKT8sSdhf66H0692B+xq4vnnbjz/3I3nn7vx/HM3nn/uxvPP3Xj+uRvPn7HcbNusItfzyr3rKn/+7+GPPSv7Q/j9/3+QnLITv9pQ9sYe/0YKzz83kv+54/nnbjz/3I3nn7vx/HM3nv//fDX+xTGef+7G82csN7vanz//f7Rifn3JrnYff+q6yj9+jDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyiXP+Ci2E+I/91e6LMcYYY4wxxhhjfx6f92p3wBhjjDHGGGOMsf/zQEihhBaByCPyihiRT8SKa0ScuFbkF9eJiLhexIsbRAFxoygoConCoohIEEVFMWEECitIhKK4KCGi4iZRUtwsEkUpUVqUEU6UFUniFlFO3CrKi9tEBXG7qCjuEJVEZVFFVBV3imriLlFd1BA1xd2ilqgt6oi64h5RT9wr6ov7RANxv2goHhCNxIOisXhINBEPi6biEdFMPCqai8dEC9FStBKtRZv/rfyXRG/xsugj+ooU0U/0F6+IAWKgGCQGiyHiVTFUvCaGiddFqhguRog3xEjxphgl3hKjxRgxVrwtxonxYoKYKCaJySJNvCOmiHfFVPGemCamixlipkgXs8Rs8b6YI+aKeeIDMV98KBaIhWKRWCwyxEdiiVgqMsXHYpn4RGSJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2iU/FdrFD7BS7xG6xR+wVn4l94nOxX3whssWX/2b+2f+S3wMECJAgQYOGPJAHYiAGYiEW4iAO8kN+iEAE4iEeCkABKAgFoTAUhgRIgGJQDBAQCAiKQ3GIQhRKQklIhEQoDaXBgYMkSIJycCuUh/JQASpARagIlaAyVIaqUBWqQTWoDtWhJtSEWlAL6kAduAfugXuhPtSHBtAAGkJDaASNoDE0hibQBJpCU2gGzaA5NIcW0AJaQStoA22gLbSFdtAOOkAH6AgdoRN0gmRIhs7QGbpAF+gKXaEbdIPu0B16QE/oCS/BS/AyvAx9oZbsB/2hPwyAATAIBsNgeBWGwmvwGrwOqTAcRsAb8Aa8CaPgDIyGMTAWxkI1OR4mwEQgORnSIA2mwBSYClNhGkyH6TAT0mEWzIbZMAfmwlz4AObDh+c+hIWwEBZDBmTAElgKmZAJy+AsZMFyWAErYRWshlWwFtbBWtgAG2EDbIbNsBW2wqfwKeyAHbALdsEe2AOfwWfwOXwOqZAN2XAADsBBOAiH4BDkQA4chsNwBI7AUTgKx+AYHIcTcBJOwGk4DWfgLJyDc3AezsMFeCHhm6Z7Sq1PFfIyLbXMI/PIGBkjY2WsjJNxMr/MLyMyIuNlvCwgC8iCsqAsLAvLBJkgi8liEiVKkqEsLovLqIzKkrKkTJSJsrQsLZ10MkkmyXKynCwvy8sK8nZZUd4hK8nKsr2rKqvKarKDqy5ryJqypqwla8s6sq6sK+vJerK+rC8byAayoWwoG8kHZWPZDwbBw/LyZJrJ4dBcjoAWsqVsJVvLN+Fx2VaOgnayvewgn5RjYDR0km1dsnxGdpYToIt8Tk6E52U3ORm6yxdlD9lT9pIvyd6ynesj+8pp0E/2lzNhgBwoB8nBcg7UlpcnVke+LlPlcDlCviEXw5tylHxLjpZj5Fj5thwnx8sJcqKcJCfLNPmOnCLflVPle3KanC5nyJkyXc6Ss+X7co6cK+fJD+R8+aFcIBfKRXKxzJAfySVyqcyUH8tl8hOZJZfLFXKlXCVXyzVyrVwn18sNcqPcJDfLLXKr3CY/ldvlDrlT7pK75R65V34m98nP5X75hcyWX8oD8i/yoPxKHpJfyxz5jTwsv5VH5HfyqPxeHpM/yOPyhDwpT8nT8kd5Rp6V5+RP8rz8WV6QF+Ul6aVQoKRSSqtA5VF5VYzKp2LVNSpOXavyq+tURF2v4tUNqoC6URVUhVRhVUQlqKKqmDIKlVWkQlVclVBRdZMqqW5WiaqUKq3KKKfKqiR1iyqnblXl1W2qgrpdVVR3qEqqsqqiqqo7VTV1l6quaqia6m5VS9VWdVRddY+qp+5V9dV9qoG6XzVUD6hG6kHVWD2kmqiHVVP1iGqmHlXN1WOqhWqpWqnWqo16XLVVT6h2qr3qoJ5UHdVTqpN6WiWrZ1Rn9azqop5TXdXzqpt6QXVXL6oeqqfqpS6qS8qrPqqvSlH9VH/1ihqgBqpBarAaol5VQ9Vraph6XaWq4WqEekONVG+qUeotNVqNUWPV22qcGq8mqIlqkpqs0tQ7aop6V01V76lparqaoWaqdDVLDfq10rz/Rv67/yB/2C/PvlVtU5+q7WqH2ql2qd1qj9qr9qp9ap/ar/arbJWtDqgD6qA6qA6pQypH5ajD6rA6oo6oo+qoOqaOqePqhPpJnVKn1Y/qjDqrzqqf1Hl1Xl349TUQGrTUSmsd6Dw6r47R+XSsvkbH6Wt1fn2djujrdby+QRfQN+qCupAurIvoBF1UF9NGo7aadKiL6xI6qm/SJfXNOlGX0qV1Ge10WZ2kb/nD+b/XXxvdRrfVbXU73U530B10R91Rd9KddLJO1p11Z91Fd9FddVfdTXfT3XV33UP30L10L91b99Z9dB+dolN0f/2KHqAH6kF6sB6iX9VD9VA9TA/TqTpVj9Aj9Eg9Uo/So/RoPVqP1WP1OD1OT9AT9CQ9SafpND1FT9FT9VQ9TU/TM/QMna7T9Ww9W8/Rc/Q8PU/P1/P1Ar1AL9KLdIbO0Ev0Ep2pM/UyvUxn6eV6uV6pV+rVerVeq9fq9Xq93qg36s16s87S2/Q2vV1v1zv1Tr1b79Z79V69T+/T+/V+na2z9QF9QB/UB/UhfUjn6Bx9WB/WR/QRfVQf1cf0MX1cH9cn9Ul9Wp/WZ/QZfU6f0+f1eX1BX9CX9KXLl32BDGSgAx3kCfIEMUFMEBvEBnFBXJA/yB9EgkgQH8QHBYIbg4JBoaBwUCRICIoGxQITYGADCsKgeFAiiAY3BSWDm4PEoFRQOigTuKBskBTcEpQLbg3KB7cFFYLbg4rBHUGloHJQJaga3BlUC+4Kqgc1gprB3UGtoHZQJ6gbVB7/12vS+4IGwf1Bw+CBoFHwYNA4eChoEjwcNA0eCZoFjwbNg8eCFkHLoFXQOmjzb9W/J6gX3BvUD/5Zfe/PFHrC9TF9TYrpZ/qbV8wAM9AMMoPNEPOqGWpeM8PM6ybVDDcjzBtmpHnTjDJvmdFmjBlr3jbjzHgzwUw0k8xkk2beMVPMu2aqec9MM9PNDDPTpJtZZrZ538wxc80884GZbz40C8xCs8gsNhnmI7PELDWZ5mOzzHxissxys8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMp2a72WF2ml1mt9lj9prPzD7zudlvvjDZ5ktzwPzFHDRfmUPma5NjvjGHzbfmiPnOHDXfm2PmB3PcnDAnzSlz2vxozpiz5pz5yZw3P5sL5qK5ZPzli/vLb++oUWMezIMxGIOxGItxGIf5MT9GMILxGI8FsAAWxIJYGAtjAiZgMSyGlxESFsfiGMUolsSSmIiJWBpLo0OHSZiE5bAclsfyWAErYEWsiJWwElbBKngn3ol34V1YA2vg3Xg31sbaWBfrYj2sh/WxPjbABtgQG2IjbISNsTE2wSbYFJtiM2yGzbE5tsAW2ApbYRtsg22xLbbDdtgBO2BH7IidsBMmYzJ2xs7YBbtgV+yK3bAbdsfu2AN7YC/shb2xN/bBPpiCKdgf++MAHICDcBAOwSE4FIfiMByGqZiKI3AEjsSROApH4Wgcg2PxbRyH43ECTsRJOBnTMA2n4BScilNxGk7DGTgD0zEdZ+NsnINzcB7Ow/k4HxfgAlyEizADM/IKXIKZmInLcBlmYRauwBW4ClfhGlyD63AdbsANuAk34RbcgttwG27H7bgTd+Ju3I17cS/uw324H/djNmbjATyAB/EgHsJDmIM5eBgP4xE8gkfxKB7DY3gcj+NJPImn8TSewTN4Ds/hefwZL+BFvIQeY6wUsfYaG2evtfntdTbG5rN/Gxe2RWyCLWqLWWML2kJ/F6O1NtGWsqVtGetsWZtkb/lNXMlWtlVsVXunrWbvstV/E9ez99r69j7bwN5v69p7/i5uaB+wjeyjtrF9zDaxLW1T29o2s4/a5vYx28K2tK1sa9vRPmU72adtsn3GdrbP/iZeYpfadXa93WA32n32c3vO/mSP2O/sefuz7WP72iH2VTvUvmaH2ddtqh3+m3isfduOs+PtBDvRTrKTfxPPsDNtup1lZ9v37Rw79zdxhv3IzreZdoFdaBfZxb/El3vKtB/bZfYTm2WX2xV2pV1lV9s1du1/9rrSbrZb7Fa7135mt9sddqfdZXfbPb/El89jv/3CZtsv7WH7rT1ov7KH7FGbY7/5Jb58fkft9/aY/cEetyfsSXvKnrY/2jP27C/nf/ncT9mL9pL1VhCQJEWaAspDeSmG8lEsXUNxdC3lp+soQtdTPN1ABehGKkiFqDAVoQQqSsXIEJIlopCKUwmK0k1Ukm6mRCpFpakMOSpLSXQLlaNbqTzdRhXodqpId1AlqkxVqCrdSdXoLqpONagm3U21qDbVobp0D9Wje6k+3UcN6H5qSA9QI3qQGtND1IQepqb0CDWjR6k5PUYtqCW1otbUhh6ntvQEtaP21IGepI70FHWipymZnqHO9Cx1oeeoKz1P3egF6k4vUg/qSb3oJepNL1Mf6ksp1I/60ys0gAbSIBpMQ+hVGkqv0TB6nVJpOI2gN2gkvUmj6C0aTWNoLL1N42g8TaCJNIkmUxq9Q1PoXZpK79E0mk4zaCal0yyaTe/THJpL8+gDmk8f0gJaSItoMWXQR7SEllImfUzL6BPKouW0glbSKlpNa2gtraP1tIE20ibaTFtoK22jT2k77aCdtIt20x7aS5/RPvqc9tMXlE1f0gH6Cx2kr+gQfU059A0dpm/pCH1HR+l7OkY/0HE6QSfpFJ2mH+kMnaVz9BOdp5/pAl2kS+RJhBDKUIU6DMI8Yd4wJswXxobXhHHhtWH+8LowEl4fxoc3hAXCG8OCYaGwcFgkTAiLhsVCE2JoQwrDsHhYIoyGN4Ulw5vDxLBUWDosE7qwbJgU3hKWC28Ny4e3hRXC28OK4R1hpbBy+Oj9VcM7w2rhXWH1sEZYM7w7rBXWDuuEdcN7wnrhvWH98L6wQXh/WD58IGwUPhg2Dh8Km4QPh03DR8Jm4aNh8/CxsEXYMmwVtg7bhI+HbcMnwnZh+7BD+GTYMXwq7BQ+HSaHz4Sdw2d/93hK2C/sH74SvhJ6f59aFF0czYh+FF0SXRrNjH4cXRb9JJoVXR5dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a9b5uXuHASaecdoHL4/K6GJfPxbprXJy71uV317mIu97FuxtcAXejK+gKucKuiEtwRV0xZxw668iFrrgr4aLuJlfS3ewSXSlX2pVxzpV1Sa61a+PauLbuCdfOtXcd3JPuSfeUe8o97Z52z7jO7lnXxT3nurrnXTf3gnvBveh6uJ6ul3vJ9XYvuz6ur0txKa6/6+8GuAFukBvkhrghbqgb6oa5YS7VpboRboQb6Ua6UW6UG+1Gu7FurBvnxrkJboKb5Ca5NJfmprgpbqqb6qa5aW6Gm+HSXbqb7Wa7OW6Om+fmufmJ890Ct8AtcotchstwS9wSl+ky3TK3zGW5LLfCrXCr3Cq3xq1x69w6t8FtcJvcJrfFbXHb3Da33W13O91Ot9vtdnvdXrfP7XP73X6X7bLdAXfAHXQH3SH3tctx37jD7lt3xH3njrrv3TH3gzvuTriT7pQ77X50Z9xZd8795M67n90Fd9Fdct6lRd6JTIm8G5kaeS8yLTI9MiMyM5IemRWZHXk/MicyNzIv8kFkfuTDyILIwsiiyOJIRuSjyJLI0khm5OPIssgnkazI8siKyMrIqsjqiPdFt4e+uC/ho/4mX9Lf7BN9KV/al/HOl/VJ/hZfzt/qy/vbfAV/u6/o7/CVfGVfxT/mW/iWvpVv7dv4x31b/4Rv59v7Dv5J39E/5Tv5p32yf8Z39s/6Lv4539U/77v5F3x3/6Lv4Xv6Xv4l39u/7Pv4vj7F9/P9/St+gB/oB/nBfoh/1Q/1r/lh/nWf6of7Ef4NP9K/6Uf5t/xoP8aP9W/7cX68n+An+kl+sk/z7/gp/l0/1b/np/npfoaf6dP9LD/bv+/n+Ll+nv/Az/cf+gV+oV/kF/sM/5Ff4pf6TP+xX+Y/8Vl+uV/hV/pVfrVf49f6dX693+A3+k1+s9/it/pt/lO/3e/wO/0uv9vv8Xv9Z36f/9zv91/4bP+lP+D/4g/6r/wh/7XP8d/4w/5bf8R/54/67/0x/4M/7k/4k/6UP+1/9Gf8WX/O/+TP+5/9BX/RX+K/WWOMMcYY+2/ZUvBfH+/3X+JTXggp/rou6y+EuHZHkZy/fYwSQmz6te5AmdAxIoR4pm/3h/9j1aqVkpLy62OzlAhKLBRCRK7k5xFX4uW/fE0W7UW5f9jfQNnzPP1O/ejtQsT+TU6MuBIvFx3EU7/Uv/Wf1H/8ybFLKobn4v9F/YVCJJa4kpNPXImv1C//T+oXavs7/ef7Kk2Idn+TEyeuxFfqJ4knxLMi+e8eyRhjjDHGGGOM/dVAWaXr790/X74/T9BXcvKKK/GV+89/fH/OGGOMMcYYY4yxq+/5nr2efjw5uX1X3vzhDcD/E23whjd/wuZq/2ZijDHGGGOM/dmuXPRf7U4YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLHc6//GvxO72ufIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXW3/KwAA///UIjrY") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) 8.23309624s ago: executing program 0 (id=276): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f00000003c0)={0x40, 0x7, 0x3, "fdc1e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.995803703s ago: executing program 2 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18) 7.808517425s ago: executing program 4 (id=280): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x20000000000c, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0xc004004) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f00000002c0)={0xa, 0xa, 0x7, @remote}, 0x1c, 0x0}, 0x20000b5c) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x10}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x4008000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 7.620363947s ago: executing program 2 (id=282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@fragment={0x32, 0x0, 0x9, 0x0, 0x0, 0xf, 0x66}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 6.668009797s ago: executing program 4 (id=283): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r3, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r2, &(0x7f0000004280)={0x2020}, 0x2020) write$binfmt_script(r5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) tee(r4, r3, 0x7, 0x8) 6.542655238s ago: executing program 3 (id=284): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) 5.927102115s ago: executing program 3 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000e80)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x3, 0x0, [{0x7, 0x5, 0x8, '\x00', 0x55}, {0x7, 0x86, 0x8, '\x00', 0xff}, {0x7, 0x1f, 0x4e, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x5, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0x40, 0x90, 0x4, '\x00', 0x8}, {0x1, 0x4, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x11}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0x3, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x71, 0x6, '\x00', 0x9}, {0x8, 0x84, 0x2}, {0xf9, 0x8, 0x9, '\x00', 0x2}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x24, '\x00', 0x1}, {0x58, 0x4, 0x61, '\x00', 0x81}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xa, '\x00', 0x9}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x7f, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1e50}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x154}, {}, {}, {}, {}, {}, {0x40000000}, {}, {}, {}, {}, {0xd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x40000001}, {0x80000019}, {}, {0x0, 0x0, 0x4}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 5.672936058s ago: executing program 4 (id=289): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = io_uring_setup(0x618c, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x25, &(0x7f0000000000)={0x1, r0, 0x0, {0xfffffffffffffffd, 0x7}, 0x1}, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0xf00, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4.979441936s ago: executing program 3 (id=290): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', 0x8c80, &(0x7f00000006c0)=ANY=[@ANYBLOB='fmask=00000000000000000000001,umask=00000000000020000000002,utf8,keep_last_dots,allow_utime=00000000000000000004001,errors=continue,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703835302c696f636861727365743d69736f383835392d312c006b95def57e2522c1bea829c23d304a63a4dbc03e4e15b41ada21c9a1dd3aad8a353a45e2fb41ed411833b1789f3d88f528c72dcbb5e1aea5dab11e69a77f2b692198fa6cd5c07eae4e91f2350fa2e360df77ba73081b1114f7c77978a4e105bf40f0bfca515e2bbb2552ca497c842e3ebb25e85344d0e964a97a3875dd9cc56d8fda567e4c9f0589ef0b"], 0x5, 0x1510, &(0x7f0000003640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 4.850245517s ago: executing program 1 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x204, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0xffffff00, 'veth0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x89, 0x6, 0x14}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x6, 0x3, 'pptp\x00', {0x760}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10000, 0x2, 'syz1\x00', {0xe0000}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x260) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4.780559937s ago: executing program 2 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18) 4.55547664s ago: executing program 2 (id=293): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) llistxattr(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) 4.384718482s ago: executing program 3 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r5 = socket$inet6(0xa, 0x2, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000000), 0x0, 0x44000102, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) getdents(0xffffffffffffffff, 0x0, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000100)={0x6, 0x10, 0x1}) open(&(0x7f00000001c0)='./file1\x00', 0x169a7e, 0x68) 3.552904411s ago: executing program 0 (id=295): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f00000002c0)={0x2, 0x1, 0x9, 0x6855e913, 0x1, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000010000001a0000200000"], 0x20}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.835313009s ago: executing program 3 (id=296): socket$alg(0x26, 0x5, 0x0) io_getevents(0x0, 0x10000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) 2.574236912s ago: executing program 3 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") symlink(&(0x7f0000000100)='./file2\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.476268653s ago: executing program 1 (id=298): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) read(r0, &(0x7f00000002c0)=""/200, 0x39) futex(0x0, 0x3, 0x1, 0x0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2.252695465s ago: executing program 0 (id=299): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r3, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r2, &(0x7f0000004280)={0x2020}, 0x2020) write$binfmt_script(r5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) tee(r4, r3, 0x7, 0x8) 2.164229306s ago: executing program 1 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000e80)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x3, 0x0, [{0x7, 0x5, 0x8, '\x00', 0x55}, {0x7, 0x86, 0x8, '\x00', 0xff}, {0x7, 0x1f, 0x4e, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x5, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0x40, 0x90, 0x4, '\x00', 0x8}, {0x1, 0x4, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x11}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0x3, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x71, 0x6, '\x00', 0x9}, {0x8, 0x84, 0x2}, {0xf9, 0x8, 0x9, '\x00', 0x2}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x24, '\x00', 0x1}, {0x58, 0x4, 0x61, '\x00', 0x81}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xa, '\x00', 0x9}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x7f, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1e50}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x154}, {}, {}, {}, {}, {}, {0x40000000}, {}, {}, {}, {}, {0xd}, {0x4000000e}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x40000001}, {0x80000019}, {}, {0x0, 0x0, 0x4}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 1.76236393s ago: executing program 1 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000003a00290200000000fcdbdf250a"], 0x20}}, 0x8000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4ecc9ff346a153d5"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 808.734111ms ago: executing program 2 (id=302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@fragment={0x32, 0x0, 0x9, 0x0, 0x0, 0xf, 0x66}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 719.339732ms ago: executing program 0 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18) 714.568712ms ago: executing program 1 (id=304): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffd35}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18}], 0x1, 0x448c4) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) timer_gettime(0x0, &(0x7f0000000140)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) syz_clone(0x20020000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 76.548219ms ago: executing program 1 (id=305): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904000000010100000a2401030003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020000000000000010"], 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="16011003000000082505a8a440000102030109021b000101060005090400000007010000090521"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) 0s ago: executing program 4 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x20000600) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 64.044545][ T4177] cgroup: Unknown subsys name 'net' [ 64.188925][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.687129][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.135502][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.176587][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 67.270117][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.324770][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.342235][ T4203] chnl_net:caif_netlink_parms(): no params data found [ 67.410940][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.418892][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.427757][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.444631][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.451885][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.460212][ T4199] device bridge_slave_0 entered promiscuous mode [ 67.476550][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.483911][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.492718][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.505082][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.512295][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.520176][ T4199] device bridge_slave_1 entered promiscuous mode [ 67.599975][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.607398][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.616121][ T4203] device bridge_slave_0 entered promiscuous mode [ 67.626384][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.643968][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.653644][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.660741][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.669342][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.678298][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.685844][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.694253][ T4203] device bridge_slave_1 entered promiscuous mode [ 67.703524][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.728763][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.738180][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.746076][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.755160][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.769199][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.776742][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.785907][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.829499][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.838799][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.846273][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.854656][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.870228][ T4191] team0: Port device team_slave_0 added [ 67.886687][ T4203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.899558][ T4203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.913312][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.931891][ T4191] team0: Port device team_slave_1 added [ 67.940850][ T4199] team0: Port device team_slave_0 added [ 67.955916][ T4199] team0: Port device team_slave_1 added [ 67.970829][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.989666][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.034265][ T4203] team0: Port device team_slave_0 added [ 68.049120][ T4189] team0: Port device team_slave_0 added [ 68.056287][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.064929][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.091566][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.111748][ T4203] team0: Port device team_slave_1 added [ 68.120021][ T4190] team0: Port device team_slave_0 added [ 68.128116][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.135477][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.162262][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.175015][ T4189] team0: Port device team_slave_1 added [ 68.181326][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.188426][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.214607][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.226670][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.234087][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.260224][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.279370][ T4190] team0: Port device team_slave_1 added [ 68.366201][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.373389][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.380898][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.388541][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.415057][ T4203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.427425][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.434791][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.460993][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.479289][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.486800][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.513162][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.525171][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.532388][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.559190][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.573035][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.580058][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.606210][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.626755][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.634000][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.660547][ T4203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.700798][ T4199] device hsr_slave_0 entered promiscuous mode [ 68.707713][ T4199] device hsr_slave_1 entered promiscuous mode [ 68.714492][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.722598][ T4199] Cannot create hsr debugfs directory [ 68.769229][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.777528][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.784788][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.793281][ T4189] Cannot create hsr debugfs directory [ 68.793905][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 68.832275][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 68.854756][ T4203] device hsr_slave_0 entered promiscuous mode [ 68.862259][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 68.862260][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 68.874957][ T4203] device hsr_slave_1 entered promiscuous mode [ 68.882409][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 68.888551][ T4203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.896718][ T4203] Cannot create hsr debugfs directory [ 68.929705][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.936824][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.943776][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.951409][ T4190] Cannot create hsr debugfs directory [ 69.253320][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.266873][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.280578][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.291935][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.335504][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.356772][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.384165][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.396901][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.455044][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.465584][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.476903][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.490077][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.558511][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.570614][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.602502][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.613580][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.650078][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.673426][ T4203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.688984][ T4203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.698695][ T4203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.726092][ T4203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.738082][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.748425][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.768606][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.789792][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.824772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.834331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.843981][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.851255][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.860038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.870092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.881202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.900634][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.909115][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.917528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.927557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.936997][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.944191][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.977874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.987952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.998033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.008484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.018579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.028756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.038291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.048225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.057172][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.064488][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.082171][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.092733][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.111035][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.125835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.134120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.143264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.153122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.162696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.172726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.181237][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.188350][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.197088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.205849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.214410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.226373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.234780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.244138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.252718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.294239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.303813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.322400][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.329533][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.354059][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.371104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.379921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.389919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.399708][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.406977][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.457587][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.483351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.494599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.503672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.513319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.522350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.531104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.539327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.548190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.558707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.568027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.577444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.587574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.608365][ T4203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.626442][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.637848][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.654558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.663627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.672010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.680482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.689054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.699317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.708656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.718652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.728228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.737107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.747841][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.770130][ T4203] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.783016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.797144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.806928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.823198][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.830334][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.843301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.850995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.859830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.863507][ T4193] Bluetooth: hci0: command 0x041b tx timeout [ 70.874986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.884994][ T4193] Bluetooth: hci3: command 0x041b tx timeout [ 70.885446][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.898157][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.906827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.915991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.931280][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.943496][ T4193] Bluetooth: hci2: command 0x041b tx timeout [ 70.957863][ T4193] Bluetooth: hci4: command 0x041b tx timeout [ 70.958642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.972909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.982881][ T4193] Bluetooth: hci1: command 0x041b tx timeout [ 70.991281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.006127][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.013313][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.028830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.038082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.053094][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.060225][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.120350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.139011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.157633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.169988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.186995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.199308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.208795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.226091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.241018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.250882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.259897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.296358][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.305582][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.317480][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.326837][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.336088][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.345195][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.354606][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.363299][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.372119][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.380726][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.389394][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.397885][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.430442][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.450543][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.459334][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.476773][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.486284][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.494158][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.507103][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.512770][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.514350][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.535774][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.588228][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.602707][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.634809][ T4191] device veth0_vlan entered promiscuous mode [ 71.653526][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.663659][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.672654][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.684092][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.701286][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.716094][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.760291][ T4191] device veth1_vlan entered promiscuous mode [ 71.776705][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.790164][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.800607][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.817440][ T4189] device veth0_vlan entered promiscuous mode [ 71.833773][ T4199] device veth0_vlan entered promiscuous mode [ 71.847347][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.856824][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.866224][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.875991][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.885935][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.908580][ T4189] device veth1_vlan entered promiscuous mode [ 71.930974][ T4191] device veth0_macvtap entered promiscuous mode [ 71.940401][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.949961][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.959985][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.969114][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.979181][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.989076][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.997447][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.009823][ T4199] device veth1_vlan entered promiscuous mode [ 72.022849][ T4191] device veth1_macvtap entered promiscuous mode [ 72.030199][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.039655][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.049007][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.073094][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.102439][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.111072][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.120657][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.128591][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.148319][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.159662][ T4199] device veth0_macvtap entered promiscuous mode [ 72.169296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.178815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.188993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.198697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.210288][ T4203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.235165][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.263658][ T4189] device veth0_macvtap entered promiscuous mode [ 72.280864][ T4199] device veth1_macvtap entered promiscuous mode [ 72.288888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.297637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.308251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.317383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.327363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.337201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.346163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.355612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.374604][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.385309][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.400226][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.409317][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.428963][ T4189] device veth1_macvtap entered promiscuous mode [ 72.440870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.450353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.503336][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.512953][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.522046][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.530024][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.558815][ T4190] device veth0_vlan entered promiscuous mode [ 72.573564][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.588854][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.602393][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.617279][ T4190] device veth1_vlan entered promiscuous mode [ 72.633679][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.646247][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.656027][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.680696][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.697995][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.708404][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.725299][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.741054][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.750394][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.767809][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.788701][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.810224][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.825958][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.835445][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.845944][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.859355][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.872676][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.886168][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.896887][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.908339][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.922500][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.932353][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.941151][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.951671][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 72.959803][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.969013][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 72.975921][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.984746][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.994191][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.022826][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 73.029279][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 73.036030][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 73.047847][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.057164][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.066693][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.075774][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.128471][ T4190] device veth0_macvtap entered promiscuous mode [ 73.140062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.149382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.160649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.169931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.180404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.199958][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.208765][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.223120][ T4190] device veth1_macvtap entered promiscuous mode [ 73.267390][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.279052][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.287541][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.298321][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.307364][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.315866][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.345151][ T4203] device veth0_vlan entered promiscuous mode [ 73.388731][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.400490][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.411057][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.422511][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.432626][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.443763][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.455486][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.465860][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.480640][ T4203] device veth1_vlan entered promiscuous mode [ 73.489241][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.529148][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.537891][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.547942][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.558594][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.570944][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.588576][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.600137][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.611618][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.621465][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.632081][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.643428][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.654607][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.665018][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.682452][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.690347][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.701706][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.716223][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.729139][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.740657][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.767620][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.777060][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.786435][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.795825][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.880856][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.919788][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.931339][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.948938][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.965679][ T4203] device veth0_macvtap entered promiscuous mode [ 73.981423][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.991398][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.010664][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.026261][ T4274] loop3: detected capacity change from 0 to 4096 [ 74.037637][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.069243][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.071206][ T4274] EXT4-fs (loop3): inline encryption not supported [ 74.089733][ T4203] device veth1_macvtap entered promiscuous mode [ 74.125991][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.145152][ T4274] EXT4-fs (loop3): Ignoring removed bh option [ 74.151436][ T4274] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 74.205160][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.216131][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.226976][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.238349][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.249318][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.260976][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.271045][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.278925][ T4274] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c028, mo2=0002] [ 74.287921][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.300258][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.312436][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.324793][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.340557][ T4274] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,errors=remount-ro,grpjquota=,bh,noblock_validity,jqfmt=vfsv0,. Quota mode: writeback. [ 74.359063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.369290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.402590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.478442][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.526199][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.571628][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.582810][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.595078][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.605989][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.621780][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.661622][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.685986][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.705053][ T4279] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 74.739048][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.750266][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.775999][ T4203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.781951][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.795680][ T4203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.807912][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.812075][ T4203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.828414][ T4203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.847878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.017842][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.025163][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 75.038681][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.049585][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 75.082095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.102107][ T4193] Bluetooth: hci2: command 0x0419 tx timeout [ 75.111048][ T4193] Bluetooth: hci4: command 0x0419 tx timeout [ 75.153049][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.160932][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.166903][ T4193] Bluetooth: hci1: command 0x0419 tx timeout [ 75.189752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.373372][ T4296] loop3: detected capacity change from 0 to 32768 [ 75.417226][ T4296] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.6 (4296) [ 75.494125][ T4296] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 75.503970][ T4296] BTRFS info (device loop3): using free space tree [ 75.510536][ T4296] BTRFS info (device loop3): has skinny extents [ 76.251926][ T4296] BTRFS info (device loop3): enabling ssd optimizations [ 76.361689][ T4272] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.373220][ T4333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.497862][ T4339] vivid-008: disconnect [ 76.562816][ T4336] loop1: detected capacity change from 0 to 1024 [ 76.601950][ T4325] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 76.955130][ T4294] vivid-008: reconnect [ 76.991985][ T4325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.021343][ T4325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.071453][ T4325] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 77.129245][ T4336] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.137491][ T4325] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 77.161614][ T4336] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.191131][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.232624][ T4327] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 77.259810][ T4325] hub 1-1:1.0: bad descriptor, ignoring hub [ 77.267741][ T4343] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.282029][ T4325] hub: probe of 1-1:1.0 failed with error -5 [ 77.293403][ T4343] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.302648][ T4325] cdc_wdm 1-1:1.0: skipping garbage [ 77.307917][ T4325] cdc_wdm 1-1:1.0: skipping garbage [ 77.330232][ T4344] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.340541][ T4325] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 77.357958][ T4325] cdc_wdm 1-1:1.0: Unknown control protocol [ 77.367426][ T4344] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.402934][ T4272] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.411015][ T4272] usb 3-1: config 0 has no interface number 0 [ 77.427817][ T4336] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.442277][ T23] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 77.463129][ T4336] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.475066][ T4343] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.571909][ T4343] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.608485][ T4344] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.625224][ T4272] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 77.628005][ T4344] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.641847][ T4272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.649989][ T4272] usb 3-1: Product: syz [ 77.660041][ T4272] usb 3-1: Manufacturer: syz [ 77.665545][ T4272] usb 3-1: SerialNumber: syz [ 77.674014][ T4272] usb 3-1: config 0 descriptor?? [ 77.677510][ T4336] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.698412][ T4336] hfsplus: request for non-existent node 33423360 in B*Tree [ 77.823809][ T23] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 77.887996][ T23] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 77.920800][ T23] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 77.944089][ T4272] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 77.959130][ T4272] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 77.982778][ T4272] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 77.991285][ T4272] usb 3-1: media controller created [ 77.992577][ T4338] usb 1-1: USB disconnect, device number 2 [ 78.049033][ T4272] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.057751][ T23] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 78.074888][ T23] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 78.087315][ T23] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 78.171905][ T23] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 78.179383][ T23] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 78.190636][ T23] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 78.312162][ T4355] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.441845][ T23] usb 5-1: string descriptor 0 read error: -22 [ 78.449437][ T23] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 78.471160][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.507393][ T4361] device syzkaller0 entered promiscuous mode [ 78.524011][ T23] adutux 5-1:168.0: interrupt endpoints not found [ 78.686594][ T4365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.727587][ T4355] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.739077][ T4355] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.754033][ T4355] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.765820][ T4355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.803712][ T23] usb 5-1: USB disconnect, device number 2 [ 78.812232][ T4357] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 79.212880][ T4272] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 79.257656][ T4355] usb 4-1: USB disconnect, device number 2 [ 79.322279][ T4272] usb 3-1: USB disconnect, device number 2 [ 79.483789][ T4206] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 79.493810][ T4206] CPU: 1 PID: 4206 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 79.501399][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.511486][ T4206] Workqueue: hci1 hci_rx_work [ 79.516234][ T4206] Call Trace: [ 79.519663][ T4206] [ 79.522615][ T4206] dump_stack_lvl+0x188/0x250 [ 79.527325][ T4206] ? show_regs_print_info+0x20/0x20 [ 79.533083][ T4206] ? load_image+0x400/0x400 [ 79.537635][ T4206] sysfs_create_dir_ns+0x26a/0x290 [ 79.542799][ T4206] ? sysfs_warn_dup+0xa0/0xa0 [ 79.547521][ T4206] ? process_one_work+0x85f/0x1010 [ 79.552666][ T4206] ? do_raw_spin_unlock+0x11d/0x230 [ 79.557930][ T4206] kobject_add_internal+0x6e0/0xd90 [ 79.563241][ T4206] kobject_add+0x160/0x230 [ 79.567706][ T4206] ? kobject_init+0x1d0/0x1d0 [ 79.572417][ T4206] ? klist_children_get+0x50/0x50 [ 79.577494][ T4206] ? get_device_parent+0x121/0x3f0 [ 79.582651][ T4206] device_add+0x483/0xfb0 [ 79.587028][ T4206] hci_conn_add_sysfs+0xd1/0x1e0 [ 79.592005][ T4206] le_conn_complete_evt+0xc48/0x15c0 [ 79.597338][ T4206] ? cs_le_create_conn+0x5e0/0x5e0 [ 79.602485][ T4206] ? __mutex_trylock_common+0x155/0x260 [ 79.608068][ T4206] hci_le_meta_evt+0xd59/0x3c90 [ 79.612955][ T4206] ? hci_event_packet+0x37b/0x1370 [ 79.618094][ T4206] ? __lock_acquire+0x7d10/0x7d10 [ 79.623244][ T4206] ? hci_remote_host_features_evt+0x280/0x280 [ 79.629372][ T4206] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 79.635045][ T4206] ? mark_lock+0x94/0x320 [ 79.639400][ T4206] ? mutex_unlock+0x10/0x10 [ 79.643934][ T4206] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 79.649988][ T4206] ? lock_chain_count+0x20/0x20 [ 79.654899][ T4206] ? __rwlock_init+0x140/0x140 [ 79.659881][ T4206] hci_event_packet+0xe48/0x1370 [ 79.664857][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 79.670098][ T4206] ? rcu_lock_release+0x20/0x20 [ 79.674992][ T4206] ? hci_send_to_monitor+0x9c/0x4a0 [ 79.680261][ T4206] hci_rx_work+0x255/0xa10 [ 79.684735][ T4206] process_one_work+0x85f/0x1010 [ 79.689725][ T4206] ? worker_detach_from_pool+0x240/0x240 [ 79.695493][ T4206] ? lockdep_hardirqs_off+0x70/0x100 [ 79.700861][ T4206] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.705921][ T4206] ? _raw_spin_lock_irqsave+0x100/0x100 [ 79.711607][ T4206] ? wq_worker_running+0x97/0x170 [ 79.716669][ T4206] worker_thread+0xaa6/0x1290 [ 79.721397][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 79.726643][ T4206] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 79.732682][ T4206] kthread+0x436/0x520 [ 79.736793][ T4206] ? rcu_lock_release+0x20/0x20 [ 79.741686][ T4206] ? kthread_blkcg+0xd0/0xd0 [ 79.746316][ T4206] ret_from_fork+0x1f/0x30 [ 79.750805][ T4206] [ 79.768755][ T4206] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 79.783280][ T4206] Bluetooth: hci1: failed to register connection device [ 80.248834][ T4384] loop0: detected capacity change from 0 to 64 [ 80.372441][ T4384] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 80.452146][ T4384] hfs: get root inode failed [ 81.205109][ T4384] autofs4:pid:4384:autofs_fill_super: called with bogus options [ 81.336652][ T4398] syz.3.27 uses obsolete (PF_INET,SOCK_PACKET) [ 81.509811][ T4406] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 82.801602][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 82.811595][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 82.821571][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 82.831564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 82.841563][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 82.851568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 82.871574][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 82.881571][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 82.891568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 82.901567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.351747][ T4272] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.461066][ T4445] netlink: 60 bytes leftover after parsing attributes in process `syz.2.44'. [ 83.471801][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.582650][ T4355] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.607157][ T4452] loop4: detected capacity change from 0 to 512 [ 83.621758][ T4272] usb 4-1: Using ep0 maxpacket: 16 [ 83.670375][ T4452] EXT4-fs (loop4): Ignoring removed orlov option [ 83.692355][ T4452] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 83.740019][ T4452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 83.764240][ T4272] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.779098][ T4272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 83.789271][ T4272] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 83.801891][ T4452] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.46: corrupted in-inode xattr [ 83.803438][ T4272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.829596][ T4272] usb 4-1: config 0 descriptor?? [ 83.834614][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.834647][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.834673][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.837226][ T4452] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.46: couldn't read orphan inode 15 (err -117) [ 83.845141][ T4355] usb 1-1: Using ep0 maxpacket: 8 [ 83.896107][ T4452] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 83.992819][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 84.011679][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 84.020949][ T23] usb 2-1: Product: syz [ 84.031486][ T23] usb 2-1: Manufacturer: syz [ 84.036531][ T23] usb 2-1: SerialNumber: syz [ 84.067727][ T4459] EXT4-fs error (device loop4): ext4_check_dx_root:2266: inode #2: comm syz.4.46: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 84.883555][ T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 84.894451][ T4355] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 84.926112][ T4355] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 84.972344][ T4355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.990714][ T4272] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 85.013991][ T4355] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 85.030374][ T4355] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.044275][ T4355] usb 1-1: config 168 interface 0 has no altsetting 0 [ 85.107560][ T4193] usb 2-1: USB disconnect, device number 2 [ 85.147483][ T4355] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 85.155832][ T4193] usblp0: removed [ 85.160499][ T4355] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.182120][ T4355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.193952][ T4355] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 85.205177][ T4355] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.218862][ T4355] usb 1-1: config 168 interface 0 has no altsetting 0 [ 85.299228][ T23] usb 4-1: USB disconnect, device number 3 [ 85.311894][ T4355] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 85.319384][ T4355] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.330915][ T4355] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.346068][ T4355] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 85.358493][ T4355] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.372598][ T4355] usb 1-1: config 168 interface 0 has no altsetting 0 [ 85.421963][ T4352] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 85.641818][ T4355] usb 1-1: string descriptor 0 read error: -22 [ 85.651257][ T4355] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.666829][ T4355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.693848][ T4470] loop1: detected capacity change from 0 to 4096 [ 85.711717][ T2285] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.728037][ T4355] adutux 1-1:168.0: interrupt endpoints not found [ 85.792504][ T4470] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 85.940267][ T23] usb 1-1: USB disconnect, device number 3 [ 85.951725][ T2285] usb 3-1: Using ep0 maxpacket: 8 [ 85.961945][ T4352] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 85.980349][ T4352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.989397][ T4352] usb 5-1: Product: syz [ 86.019143][ T4352] usb 5-1: Manufacturer: syz [ 86.029271][ T4352] usb 5-1: SerialNumber: syz [ 86.076633][ T4352] usb 5-1: config 0 descriptor?? [ 86.231934][ T2285] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 86.241642][ T2285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.249720][ T2285] usb 3-1: Product: syz [ 86.254164][ T2285] usb 3-1: Manufacturer: syz [ 86.258807][ T2285] usb 3-1: SerialNumber: syz [ 86.284905][ T2285] usb 3-1: config 0 descriptor?? [ 86.352070][ T4352] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 86.581815][ T2285] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 86.870792][ T1347] cfg80211: failed to load regulatory.db [ 87.132420][ T4500] loop0: detected capacity change from 0 to 1024 [ 87.282076][ T4352] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 87.303716][ T4352] usb 5-1: USB disconnect, device number 3 [ 87.317957][ T4500] hfsplus: request for non-existent node 33423360 in B*Tree [ 87.361873][ T2285] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 87.365933][ T4500] hfsplus: request for non-existent node 33423360 in B*Tree [ 87.383635][ T2285] usb 3-1: USB disconnect, device number 3 [ 87.750104][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.767775][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.776371][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.794194][ T4508] device bridge_slave_0 left promiscuous mode [ 87.801766][ T4508] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.879927][ T4508] device bridge_slave_1 left promiscuous mode [ 87.886885][ T4508] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.190277][ T4508] bond0: (slave bond_slave_0): Releasing backup interface [ 88.629400][ T4508] bond0: (slave bond_slave_1): Releasing backup interface [ 88.715136][ T4508] team0: Port device team_slave_0 removed [ 88.760933][ T4508] team0: Port device team_slave_1 removed [ 88.767792][ T4508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.775623][ T4508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.821072][ T4508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.828711][ T4508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.963570][ T4355] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.065663][ T4525] loop3: detected capacity change from 0 to 64 [ 89.122959][ T4525] ======================================================= [ 89.122959][ T4525] WARNING: The mand mount option has been deprecated and [ 89.122959][ T4525] and is ignored by this kernel. Remove the mand [ 89.122959][ T4525] option from the mount to silence this warning. [ 89.122959][ T4525] ======================================================= [ 89.322468][ T4355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.354499][ T4355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.405321][ T4355] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 89.422472][ T4355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.454592][ T4355] usb 3-1: config 0 descriptor?? [ 89.551396][ T4541] netlink: 76 bytes leftover after parsing attributes in process `syz.0.76'. [ 89.782100][ T4270] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.944234][ T4355] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 89.961145][ T4355] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 89.963855][ T4381] attempt to access beyond end of device [ 89.963855][ T4381] loop3: rw=1, want=4169, limit=64 [ 89.979840][ T4355] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0002/input/input5 [ 89.997625][ T4381] attempt to access beyond end of device [ 89.997625][ T4381] loop3: rw=1, want=4170, limit=64 [ 90.009477][ T4381] Buffer I/O error on dev loop3, logical block 4169, lost async page write [ 90.019070][ T4381] attempt to access beyond end of device [ 90.019070][ T4381] loop3: rw=1, want=4171, limit=64 [ 90.031317][ T4381] Buffer I/O error on dev loop3, logical block 4170, lost async page write [ 90.041167][ T4381] attempt to access beyond end of device [ 90.041167][ T4381] loop3: rw=1, want=4173, limit=64 [ 90.052562][ T4270] usb 2-1: Using ep0 maxpacket: 16 [ 90.058160][ T4381] Buffer I/O error on dev loop3, logical block 4172, lost async page write [ 90.074250][ T4381] attempt to access beyond end of device [ 90.074250][ T4381] loop3: rw=1, want=4174, limit=64 [ 90.085564][ T4381] Buffer I/O error on dev loop3, logical block 4173, lost async page write [ 90.095951][ T4381] attempt to access beyond end of device [ 90.095951][ T4381] loop3: rw=1, want=4175, limit=64 [ 90.108254][ T4381] Buffer I/O error on dev loop3, logical block 4174, lost async page write [ 90.122497][ T4381] attempt to access beyond end of device [ 90.122497][ T4381] loop3: rw=1, want=4176, limit=64 [ 90.135260][ T4381] Buffer I/O error on dev loop3, logical block 4175, lost async page write [ 90.148161][ T4381] attempt to access beyond end of device [ 90.148161][ T4381] loop3: rw=1, want=4177, limit=64 [ 90.195381][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.212264][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.220800][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.237103][ T4556] device bridge_slave_0 left promiscuous mode [ 90.245267][ T4556] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.262065][ T4355] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 90.290000][ T4270] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.309919][ T4381] Buffer I/O error on dev loop3, logical block 4176, lost async page write [ 90.319210][ T4270] usb 2-1: config 0 has no interfaces? [ 90.335056][ T4556] device bridge_slave_1 left promiscuous mode [ 90.341464][ T4556] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.382096][ T4556] bond0: (slave bond_slave_0): Releasing backup interface [ 90.409189][ T4556] bond0: (slave bond_slave_1): Releasing backup interface [ 90.450752][ T4381] attempt to access beyond end of device [ 90.450752][ T4381] loop3: rw=1, want=4178, limit=64 [ 90.522100][ T4270] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 90.542172][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.550232][ T4270] usb 2-1: Product: syz [ 90.595651][ T4381] Buffer I/O error on dev loop3, logical block 4177, lost async page write [ 90.655933][ T4381] attempt to access beyond end of device [ 90.655933][ T4381] loop3: rw=1, want=4194, limit=64 [ 90.668515][ T4270] usb 2-1: Manufacturer: syz [ 90.708826][ T4270] usb 2-1: SerialNumber: syz [ 90.741862][ T4381] Buffer I/O error on dev loop3, logical block 4356, lost async page write [ 90.750619][ T4381] Buffer I/O error on dev loop3, logical block 4357, lost async page write [ 90.768533][ T4270] usb 2-1: config 0 descriptor?? [ 90.806754][ T4556] team0: Port device team_slave_0 removed [ 90.872268][ T4556] team0: Port device team_slave_1 removed [ 90.878917][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.886470][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.918241][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.925806][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.037313][ T4539] udc-core: couldn't find an available UDC or it's busy [ 91.053164][ T4539] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 91.065965][ T4539] udc-core: couldn't find an available UDC or it's busy [ 91.074276][ T4539] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 91.091848][ T1347] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 91.790969][ T4573] loop3: detected capacity change from 0 to 1024 [ 92.544007][ T4355] usb 3-1: USB disconnect, device number 4 [ 92.611086][ T23] usb 2-1: USB disconnect, device number 3 [ 92.731692][ T1347] usb 5-1: device descriptor read/64, error -71 [ 93.003613][ T1347] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 93.211699][ T1347] usb 5-1: device descriptor read/64, error -71 [ 93.301687][ T4354] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.333171][ T1347] usb usb5-port1: attempt power cycle [ 93.581720][ T4354] usb 3-1: Using ep0 maxpacket: 16 [ 93.631828][ T4270] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.731985][ T4354] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 93.751937][ T4354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.783453][ T4354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.802268][ T4354] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 93.826190][ T4354] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 93.932394][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.951210][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.960004][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.976639][ T4606] device bridge_slave_0 left promiscuous mode [ 93.984879][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.093437][ T4606] device bridge_slave_1 left promiscuous mode [ 94.100553][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.175636][ T4606] bond0: (slave bond_slave_0): Releasing backup interface [ 94.342995][ T4270] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 94.416079][ T4270] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 94.553191][ T4270] usb 4-1: Product: syz [ 94.738001][ T4354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.748722][ T4354] usb 3-1: config 0 descriptor?? [ 94.763992][ T4270] usb 4-1: SerialNumber: syz [ 94.773927][ T4606] bond0: (slave bond_slave_1): Releasing backup interface [ 94.809978][ T4270] usb 4-1: config 0 descriptor?? [ 94.830402][ T4606] team0: Port device team_slave_0 removed [ 94.891211][ T4606] team0: Port device team_slave_1 removed [ 94.898156][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.906465][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.931922][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.939493][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.064072][ T4270] hso 4-1:0.0: Failed to find BULK IN ep [ 95.245945][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.879647][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.886753][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.894672][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.901438][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.908481][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.915718][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.922707][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.930374][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.937413][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.944407][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.951246][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.970687][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.977746][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.984815][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.991776][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 95.998552][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.005892][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.012968][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.019716][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.027644][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.042027][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.060271][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.075511][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.104340][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.134747][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.161087][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.188732][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.198147][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.206473][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.214145][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.221079][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.228375][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.236355][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.243458][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.250388][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.259847][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.291751][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.319223][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.347371][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.389997][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.400012][ T4634] loop4: detected capacity change from 0 to 512 [ 96.413171][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.427781][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.444909][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.465988][ T4634] EXT4-fs (loop4): Ignoring removed orlov option [ 96.476517][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.499587][ T4634] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 96.509125][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.521872][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.529480][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.537389][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.549745][ T4634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 96.567201][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.580292][ T4634] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.100: corrupted in-inode xattr [ 96.602552][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.620869][ T4634] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.100: couldn't read orphan inode 15 (err -117) [ 96.634345][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.648611][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.676133][ T4634] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 96.702135][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.717098][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.725342][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.738643][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.778222][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.800647][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.813387][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.820251][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.840952][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.861334][ T4645] EXT4-fs error (device loop4): ext4_check_dx_root:2266: inode #2: comm syz.4.100: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 96.927424][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.956064][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.966868][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.978648][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 96.988533][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.000725][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.010616][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.023128][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.030041][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.042287][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.049433][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.079414][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.094327][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.117579][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.138547][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.161027][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.188431][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.210110][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.235307][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.252376][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.275347][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.296205][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.317354][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.338232][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.368369][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.406394][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.425995][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.626548][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.634006][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.640915][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.654013][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 97.720537][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.730831][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.738536][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.466332][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.473176][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.496860][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.504493][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.511253][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.518103][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.524885][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.532097][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.538852][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.545665][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.553249][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.560011][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.566885][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.573691][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.580524][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.588226][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.595120][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.601942][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.608792][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.615616][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.642762][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.649639][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.657169][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.667051][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.674194][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.680920][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.687731][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.695349][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.702255][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.709006][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.715823][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.722627][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.729384][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.736194][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.742976][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.749699][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.756456][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.763238][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.769979][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.776769][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.783650][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.790379][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.798471][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.805322][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.812159][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.818910][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.825711][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.832583][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.839335][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.846092][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.852893][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.859631][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.866551][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.873392][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.880303][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.887126][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.894826][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.901767][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.908602][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.915470][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.922614][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.929453][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.936282][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.943109][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.949842][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.956704][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 98.963474][ T4354] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 99.014335][ T4272] usb 4-1: USB disconnect, device number 4 [ 99.034779][ T4354] kye 0003:0458:5013.0003: hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 99.048627][ T4354] kye 0003:0458:5013.0003: tablet-enabling feature report not found [ 99.058775][ T4354] kye 0003:0458:5013.0003: tablet enabling failed [ 99.112002][ T4354] usb 3-1: USB disconnect, device number 5 [ 99.301805][ T4351] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.541145][ T4662] fido_id[4662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 99.657341][ T4272] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.157591][ T4668] loop4: detected capacity change from 0 to 1024 [ 100.462265][ T4272] usb 4-1: config 7 descriptor has 1 excess byte, ignoring [ 100.473220][ T4272] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 100.662085][ T4272] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 100.679044][ T4272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.688144][ T4272] usb 4-1: Product: syz [ 100.704657][ T4272] usb 4-1: Manufacturer: syz [ 100.714280][ T4272] usb 4-1: SerialNumber: syz [ 100.795413][ T4272] rndis_wlan 4-1:7.0: skipping garbage [ 100.814047][ T4272] usb 4-1: bad CDC descriptors [ 100.841135][ T4272] rndis_host 4-1:7.0: skipping garbage [ 100.858328][ T4272] usb 4-1: bad CDC descriptors [ 100.876430][ T4272] option 4-1:7.0: GSM modem (1-port) converter detected [ 100.978518][ T4665] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.986209][ T4665] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.999363][ T4193] usb 4-1: USB disconnect, device number 5 [ 101.016086][ T4193] option 4-1:7.0: device disconnected [ 101.831471][ T4687] capability: warning: `syz.3.117' uses 32-bit capabilities (legacy support in use) [ 101.972359][ T4691] loop3: detected capacity change from 0 to 512 [ 102.005480][ T4691] EXT4-fs (loop3): Ignoring removed orlov option [ 102.025648][ T4691] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 102.039649][ T4665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.056981][ T4691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 102.097229][ T4691] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.119: corrupted in-inode xattr [ 102.110186][ T4691] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.119: couldn't read orphan inode 15 (err -117) [ 102.135825][ T4691] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 102.158008][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.207006][ T4665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.283539][ T4694] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.119: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 102.831786][ T4325] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.252187][ T4325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.343295][ T4325] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 103.616634][ T4325] usb 5-1: string descriptor 0 read error: -22 [ 103.627397][ T4325] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 103.647240][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.715017][ T4325] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 103.922159][ T4325] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 103.930951][ T4325] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 104.143441][ T4325] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 104.431157][ T4325] usb 5-1: USB disconnect, device number 7 [ 104.929825][ T4367] udevd[4367]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.341194][ T4723] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.364576][ T4723] Zero length message leads to an empty skb [ 105.394805][ T4665] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.408610][ T4665] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.419690][ T4665] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.437392][ T4665] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.753904][ T4677] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 105.764867][ T26] audit: type=1800 audit(1777824897.736:2): pid=4677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.109" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 105.796810][ T4677] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 105.821756][ T4677] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 105.941818][ T4325] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.174215][ T4772] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.462093][ T4325] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 107.251910][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 107.259995][ T4325] usb 4-1: Product: syz [ 107.264304][ T4325] usb 4-1: SerialNumber: syz [ 107.271280][ T4325] usb 4-1: config 0 descriptor?? [ 107.444447][ T4794] loop0: detected capacity change from 0 to 64 [ 107.453816][ T4792] loop4: detected capacity change from 0 to 2048 [ 107.548449][ T4792] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.593535][ T4325] hso 4-1:0.0: Failed to find BULK IN ep [ 107.812135][ T4325] usb 4-1: USB disconnect, device number 6 [ 107.930981][ T4797] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 107.940162][ T4797] ±ÿþ€: renamed from team_slave_1 [ 108.010538][ T4799] loop2: detected capacity change from 0 to 512 [ 108.175729][ T4799] EXT4-fs (loop2): Ignoring removed orlov option [ 108.266501][ T4799] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 108.475075][ T4799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 108.613725][ T4799] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.141: corrupted in-inode xattr [ 108.768521][ T4799] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.141: couldn't read orphan inode 15 (err -117) [ 108.908417][ T4799] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 109.109543][ T4799] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.141: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 109.270896][ T26] audit: type=1326 audit(1777824901.246:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.0.148" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed3adffdd9 code=0x0 [ 110.195513][ T4830] netlink: 44 bytes leftover after parsing attributes in process `syz.2.150'. [ 110.216017][ T4832] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 110.535645][ T4840] device syzkaller0 entered promiscuous mode [ 110.634237][ T4847] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.674552][ T4834] syz.3.143 (4834) used greatest stack depth: 18296 bytes left [ 113.330637][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.341923][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.349493][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.269098][ T4872] loop0: detected capacity change from 0 to 512 [ 114.376709][ T4872] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.421055][ T4872] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.515106][ T4872] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.544533][ T4872] EXT4-fs (loop0): 1 truncate cleaned up [ 114.559852][ T4872] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 114.601781][ T4352] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 114.851829][ T4352] usb 5-1: Using ep0 maxpacket: 8 [ 114.972094][ T4352] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.051213][ T4352] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.181423][ T4352] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 115.328801][ T4352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.554504][ T4352] hub 5-1:1.0: bad descriptor, ignoring hub [ 115.591047][ T4904] comedi: valid board names for 8255 driver are: [ 115.628610][ T4352] hub: probe of 5-1:1.0 failed with error -5 [ 115.667408][ T4904] 8255 [ 115.693586][ T4904] comedi: valid board names for vmk80xx driver are: [ 115.739321][ T4206] Bluetooth: hci4: Unknown advertising packet type: 0x700 [ 115.814123][ T4904] vmk80xx [ 115.824810][ T4904] comedi: valid board names for usbduxsigma driver are: [ 115.832619][ T4904] usbduxsigma [ 115.836152][ T4904] comedi: valid board names for usbduxfast driver are: [ 115.843132][ T4904] usbduxfast [ 115.846540][ T4904] comedi: valid board names for usbdux driver are: [ 115.853473][ T4904] usbdux [ 115.856445][ T4904] comedi: valid board names for ni6501 driver are: [ 115.863096][ T4904] ni6501 [ 115.866918][ T4904] comedi: valid board names for dt9812 driver are: [ 115.869345][ T4352] usb 5-1: USB disconnect, device number 8 [ 115.873796][ T4904] dt9812 [ 115.873844][ T4904] comedi: valid board names for ni_labpc_cs driver are: [ 115.873856][ T4904] ni_labpc_cs [ 115.873865][ T4904] comedi: valid board names for ni_daq_700 driver are: [ 115.873876][ T4904] ni_daq_700 [ 115.873883][ T4904] comedi: valid board names for labpc_pci driver are: [ 115.910933][ T4904] labpc_pci [ 115.914323][ T4904] comedi: valid board names for adl_pci9118 driver are: [ 115.921383][ T4904] pci9118dg [ 115.924736][ T4904] pci9118hg [ 115.927969][ T4904] pci9118hr [ 115.931197][ T4904] comedi: valid board names for 8255_pci driver are: [ 115.938491][ T4904] 8255_pci [ 115.942396][ T4904] comedi: valid board names for s526 driver are: [ 115.948885][ T4904] s526 [ 115.951747][ T4904] comedi: valid board names for multiq3 driver are: [ 115.958378][ T4904] multiq3 [ 115.974068][ T4904] comedi: valid board names for pcmuio driver are: [ 115.980642][ T4904] pcmuio48 [ 115.990995][ T4904] pcmuio96 [ 116.002605][ T4904] comedi: valid board names for pcmmio driver are: [ 116.019527][ T4904] pcmmio [ 116.023253][ T4904] comedi: valid board names for pcmda12 driver are: [ 116.040261][ T4904] pcmda12 [ 116.049471][ T4904] comedi: valid board names for pcmad driver are: [ 116.086932][ T4904] pcmad12 [ 116.090194][ T4904] pcmad16 [ 116.111764][ T4904] comedi: valid board names for ni_labpc driver are: [ 116.147840][ T4904] lab-pc-1200 [ 116.151468][ T4904] lab-pc-1200ai [ 116.174271][ T4904] lab-pc+ [ 116.202634][ T4904] comedi: valid board names for atmio16 driver are: [ 116.227648][ T4904] atmio16 [ 116.239206][ T4904] atmio16d [ 116.270574][ T4904] comedi: valid board names for ni_at_ao driver are: [ 116.338602][ T4904] at-ao-6 [ 116.442926][ T4904] at-ao-10 [ 116.502381][ T4904] comedi: valid board names for ni_at_a2150 driver are: [ 116.631595][ T4904] ni_at_a2150 [ 116.673903][ T4904] comedi: valid board names for adq12b driver are: [ 116.740664][ T4904] adq12b [ 116.757619][ T4904] comedi: valid board names for mpc624 driver are: [ 116.787520][ T4904] mpc624 [ 116.790561][ T4904] comedi: valid board names for c6xdigio driver are: [ 116.857768][ T4904] c6xdigio [ 116.861083][ T4904] comedi: valid board names for aio_iiro_16 driver are: [ 116.960143][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.974187][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.982784][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.241540][ C0] sched: RT throttling activated [ 117.257610][ T4904] aio_iiro_16 [ 117.261052][ T4904] comedi: valid board names for aio_aio12_8 driver are: [ 117.303011][ T4904] aio_aio12_8 [ 117.348997][ T4904] aio_ai12_8 [ 117.515167][ T4904] aio_ao12_4 [ 117.594071][ T4904] comedi: valid board names for fl512 driver are: [ 117.768791][ T4904] fl512 [ 117.781647][ T4904] comedi: valid board names for dmm32at driver are: [ 117.814237][ T4904] dmm32at [ 117.817537][ T4904] comedi: valid board names for dt282x driver are: [ 117.824210][ T4904] dt2821 [ 117.827194][ T4904] dt2821-f [ 117.830329][ T4904] dt2821-g [ 117.833523][ T4904] dt2823 [ 117.836485][ T4904] dt2824-pgh [ 117.840421][ T4904] dt2824-pgl [ 117.843827][ T4904] dt2825 [ 117.846790][ T4904] dt2827 [ 117.849880][ T4904] dt2828 [ 117.852908][ T4904] dt2829 [ 117.855884][ T4904] dt21-ez [ 117.858990][ T4904] dt23-ez [ 117.862122][ T4904] dt24-ez [ 117.865171][ T4904] dt24-ez-pgl [ 117.868577][ T4904] comedi: valid board names for dt2817 driver are: [ 117.875371][ T4904] dt2817 [ 117.878344][ T4904] comedi: valid board names for dt2815 driver are: [ 117.891600][ T4904] dt2815 [ 117.894615][ T4904] comedi: valid board names for dt2814 driver are: [ 117.947608][ T4904] dt2814 [ 117.950640][ T4904] comedi: valid board names for dt2811 driver are: [ 117.987827][ T4904] dt2811-pgh [ 117.991325][ T4904] dt2811-pgl [ 118.009156][ T4904] comedi: valid board names for dt2801 driver are: [ 118.029411][ T4904] dt2801 [ 118.044440][ T4904] comedi: valid board names for das6402 driver are: [ 118.061400][ T4904] das6402-12 [ 118.083105][ T4904] das6402-16 [ 118.101784][ T4904] comedi: valid board names for das1800 driver are: [ 118.108448][ T4904] das-1701st [ 118.130271][ T4904] das-1701st-da [ 118.134074][ T4904] das-1702st [ 118.137402][ T4904] das-1702st-da [ 118.140980][ T4904] das-1702hr [ 118.183080][ T4904] das-1702hr-da [ 118.186801][ T4904] das-1701ao [ 118.190133][ T4904] das-1702ao [ 118.208529][ T4904] das-1801st [ 118.212074][ T4904] das-1801st-da [ 118.225949][ T4904] das-1802st [ 118.235351][ T4904] das-1802st-da [ 118.242469][ T4904] das-1802hr [ 118.245946][ T4904] das-1802hr-da [ 118.282208][ T4904] das-1801hc [ 118.295037][ T4904] das-1802hc [ 118.326608][ T4904] das-1801ao [ 118.359036][ T4904] das-1802ao [ 118.391276][ T4904] comedi: valid board names for das800 driver are: [ 118.472100][ T4904] das-800 [ 118.507661][ T4904] cio-das800 [ 118.550360][ T4904] das-801 [ 118.608708][ T4904] cio-das801 [ 118.652446][ T4904] das-802 [ 118.691302][ T4904] cio-das802 [ 118.729682][ T4904] cio-das802/16 [ 118.775701][ T4904] comedi: valid board names for isa-das08 driver are: [ 118.851767][ T4904] isa-das08 [ 118.895950][ T4904] das08-pgm [ 118.936633][ T4904] das08-pgh [ 118.979425][ T4904] das08-pgl [ 119.018615][ T4904] das08-aoh [ 119.065637][ T4904] das08-aol [ 119.069554][ T4904] das08-aom [ 119.073008][ T4904] das08/jr-ao [ 119.076418][ T4904] das08jr-16-ao [ 119.079993][ T4904] pc104-das08 [ 119.083522][ T4904] das08jr/16 [ 119.086882][ T4904] comedi: valid board names for das16m1 driver are: [ 119.093808][ T4904] das16m1 [ 119.096950][ T4904] comedi: valid board names for dac02 driver are: [ 119.103828][ T4904] dac02 [ 119.106742][ T4904] comedi: valid board names for rti802 driver are: [ 119.113353][ T4904] rti802 [ 119.116342][ T4904] comedi: valid board names for rti800 driver are: [ 119.122998][ T4904] rti800 [ 119.125971][ T4904] rti815 [ 119.129220][ T4904] comedi: valid board names for pcm3724 driver are: [ 119.136085][ T4904] pcm3724 [ 119.139153][ T4904] comedi: valid board names for pcl818 driver are: [ 119.145785][ T4904] pcl818l [ 119.148853][ T4904] pcl818h [ 119.151988][ T4904] pcl818hd [ 119.155376][ T4904] pcl818hg [ 119.158681][ T4904] pcl818 [ 119.161882][ T4904] pcl718 [ 119.164853][ T4904] pcm3718 [ 119.167922][ T4904] comedi: valid board names for pcl816 driver are: [ 119.177311][ T4904] pcl816 [ 119.180411][ T4904] pcl814b [ 119.183585][ T4904] comedi: valid board names for pcl812 driver are: [ 119.190135][ T4904] pcl812 [ 119.193194][ T4904] pcl812pg [ 119.196346][ T4904] acl8112pg [ 119.199606][ T4904] acl8112dg [ 119.202919][ T4904] acl8112hg [ 119.206172][ T4904] a821pgl [ 119.209363][ T4904] a821pglnda [ 119.212865][ T4904] a821pgh [ 119.216355][ T4904] a822pgl [ 119.219416][ T4904] a822pgh [ 119.222535][ T4904] a823pgl [ 119.225591][ T4904] a823pgh [ 119.228713][ T4904] pcl813 [ 119.231787][ T4904] pcl813b [ 119.234832][ T4904] acl8113 [ 119.237864][ T4904] iso813 [ 119.240829][ T4904] acl8216 [ 119.243996][ T4904] a826pg [ 119.246969][ T4904] comedi: valid board names for pcl730 driver are: [ 119.253678][ T4904] pcl730 [ 119.256917][ T4904] iso730 [ 119.259886][ T4904] acl7130 [ 119.267903][ T4904] pcm3730 [ 119.273933][ T4904] pcl725 [ 119.276925][ T4904] p8r8dio [ 119.279979][ T4904] acl7225b [ 119.309001][ T4904] p16r16dio [ 119.316413][ T4904] pcl733 [ 119.319421][ T4904] pcl734 [ 119.328834][ T4904] opmm-1616-xt [ 119.332675][ T4904] pearl-mm-p [ 119.336002][ T4904] ir104-pbf [ 119.339419][ T4904] comedi: valid board names for pcl726 driver are: [ 119.371730][ T4904] pcl726 [ 119.386172][ T4904] pcl727 [ 119.389228][ T4904] pcl728 [ 119.406481][ T4904] acl6126 [ 119.409681][ T4904] acl6128 [ 119.426098][ T4904] comedi: valid board names for pcl724 driver are: [ 119.454655][ T4904] pcl724 [ 119.457671][ T4904] pcl722 [ 119.470967][ T4904] pcl731 [ 119.481104][ T4904] acl7122 [ 119.491229][ T4904] acl7124 [ 119.501390][ T4904] pet48dio [ 119.512212][ T4904] pcmio48 [ 119.515328][ T4904] onyx-mm-dio [ 119.518742][ T4904] comedi: valid board names for pcl711 driver are: [ 119.551599][ T4904] pcl711 [ 119.554728][ T4904] pcl711b [ 119.557778][ T4904] acl8112hg [ 119.560995][ T4904] acl8112dg [ 119.574973][ T4904] comedi: valid board names for amplc_pc263 driver are: [ 119.603244][ T4904] pc263 [ 119.606216][ T4904] comedi: valid board names for amplc_pc236 driver are: [ 119.623092][ T4904] pc36at [ 119.631766][ T4904] comedi: valid board names for amplc_dio200 driver are: [ 119.638987][ T4904] pc212e [ 119.659250][ T4904] pc214e [ 119.669365][ T4904] pc215e [ 119.679493][ T4904] pc218e [ 119.689620][ T4904] pc272e [ 119.699915][ T4904] comedi: valid board names for comedi_parport driver are: [ 119.717658][ T4904] comedi_parport [ 119.731648][ T4904] comedi: valid board names for comedi_test driver are: [ 119.738652][ T4904] comedi_test [ 119.760567][ T4904] comedi: valid board names for comedi_bond driver are: [ 119.771607][ T4270] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 119.822633][ T4904] comedi_bond [ 119.872811][ T4935] loop3: detected capacity change from 0 to 512 [ 119.894385][ T4935] EXT4-fs (loop3): Ignoring removed orlov option [ 119.912730][ T4935] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 119.955080][ T4935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 120.013444][ T4935] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.182: corrupted in-inode xattr [ 120.054104][ T4935] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.182: couldn't read orphan inode 15 (err -117) [ 120.068062][ T4935] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 120.168524][ T4935] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.182: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 120.232960][ T4270] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.251431][ T4270] usb 1-1: config 0 has no interface number 0 [ 120.492094][ T4270] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 120.516216][ T4270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.548469][ T4270] usb 1-1: Product: syz [ 120.561420][ T4270] usb 1-1: Manufacturer: syz [ 120.574084][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.584492][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.592219][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.638326][ T4270] usb 1-1: SerialNumber: syz [ 120.677715][ T4270] usb 1-1: config 0 descriptor?? [ 120.938480][ T4270] usb 1-1: selecting invalid altsetting 1 [ 121.125847][ T4270] dvb_ttusb_budget: ttusb_init_controller: error [ 121.335481][ T4951] mmap: syz.4.181 (4951) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 121.348441][ T4951] 9pnet: Insufficient options for proto=fd [ 121.531743][ T4270] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 121.781718][ T4961] binder: 4952:4961 ioctl c018620c 200000000280 returned -1 [ 122.009849][ T4270] DVB: Unable to find symbol stv0299_attach() [ 122.605433][ T4270] DVB: Unable to find symbol tda8083_attach() [ 122.612188][ T4270] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 122.643801][ T4270] usb 1-1: USB disconnect, device number 4 [ 122.951267][ T4972] loop4: detected capacity change from 0 to 32768 [ 123.185870][ T4972] XFS (loop4): Mounting V5 Filesystem [ 123.299889][ T4972] XFS (loop4): Ending clean mount [ 123.320746][ T4972] XFS (loop4): Quotacheck needed: Please wait. [ 124.108724][ T4972] XFS (loop4): Quotacheck: Done. [ 124.322426][ T26] audit: type=1800 audit(1777824916.296:4): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.193" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 124.364095][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.600535][ T4960] loop3: detected capacity change from 0 to 40427 [ 124.663080][ T4203] XFS (loop4): Unmounting Filesystem [ 130.244855][ T5021] loop0: detected capacity change from 0 to 32768 [ 130.380479][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.400665][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.409288][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.888266][ T5021] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.206 (5021) [ 131.153012][ T5021] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 131.161793][ T5021] BTRFS info (device loop0): using free space tree [ 131.168339][ T5021] BTRFS info (device loop0): has skinny extents [ 131.433293][ T5036] loop3: detected capacity change from 0 to 4096 [ 132.148365][ T5036] EXT4-fs (loop3): Test dummy encryption mode enabled [ 132.158126][ T5036] EXT4-fs (loop3): Ignoring removed orlov option [ 132.167355][ T5036] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 132.262651][ T5021] BTRFS info (device loop0): enabling ssd optimizations [ 133.612063][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.618490][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.671013][ T5067] netlink: 'syz.1.213': attribute type 3 has an invalid length. [ 134.000801][ T5056] loop2: detected capacity change from 0 to 131072 [ 134.098865][ T5056] F2FS-fs (loop2): Test dummy encryption mode enabled [ 134.120966][ T5056] F2FS-fs (loop2): invalid crc value [ 134.162150][ T5056] F2FS-fs (loop2): Found nat_bits in checkpoint [ 134.213120][ T5056] F2FS-fs (loop2): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 134.235200][ T5056] F2FS-fs (loop2): Failed to read root inode [ 134.341390][ T5074] loop3: detected capacity change from 0 to 256 [ 135.587098][ T5074] FAT-fs (loop3): Directory bread(block 64) failed [ 135.624768][ T5074] FAT-fs (loop3): Directory bread(block 65) failed [ 135.682771][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.700178][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.708846][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.724716][ T5085] device bridge_slave_0 left promiscuous mode [ 135.731709][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.995053][ T5074] FAT-fs (loop3): Directory bread(block 66) failed [ 136.516809][ T5074] FAT-fs (loop3): Directory bread(block 67) failed [ 136.532348][ T5074] FAT-fs (loop3): Directory bread(block 68) failed [ 136.541375][ T5074] FAT-fs (loop3): Directory bread(block 69) failed [ 136.543991][ T5085] device bridge_slave_1 left promiscuous mode [ 136.554544][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.560261][ T5074] FAT-fs (loop3): Directory bread(block 70) failed [ 136.582707][ T5085] bond0: (slave bond_slave_0): Releasing backup interface [ 136.600782][ T5085] bond0: (slave bond_slave_1): Releasing backup interface [ 136.631759][ T5074] FAT-fs (loop3): Directory bread(block 71) failed [ 136.651044][ T5085] team0: Port device team_slave_0 removed [ 136.690988][ T5085] team0: Port device team_slave_1 removed [ 136.697766][ T5085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.705403][ T5085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.771005][ T5085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.778792][ T5085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.851778][ T5082] netlink: 52 bytes leftover after parsing attributes in process `syz.0.212'. [ 136.863337][ T5074] FAT-fs (loop3): Directory bread(block 72) failed [ 136.870034][ T5074] FAT-fs (loop3): Directory bread(block 73) failed [ 139.637028][ T5111] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 139.893536][ T5103] loop1: detected capacity change from 0 to 32768 [ 140.057441][ T5103] XFS (loop1): Mounting V5 Filesystem [ 140.077347][ T5122] loop0: detected capacity change from 0 to 8 [ 140.178333][ T5122] SQUASHFS error: Unable to read inode 0x127 [ 140.358428][ T5103] XFS (loop1): Ending clean mount [ 140.553562][ T5131] device bridge_slave_0 left promiscuous mode [ 140.561755][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.161384][ T5106] loop3: detected capacity change from 0 to 32768 [ 141.170106][ T5131] device bridge_slave_1 left promiscuous mode [ 141.176620][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.188407][ T5131] bond0: (slave bond_slave_0): Releasing backup interface [ 141.197939][ T5131] bond0: (slave bond_slave_1): Releasing backup interface [ 141.211744][ T5131] team0: Port device team_slave_0 removed [ 141.221055][ T5131] team0: Port device 26±ÿþ€ removed [ 141.226966][ T5131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.235559][ T5131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.593361][ T5134] loop2: detected capacity change from 0 to 32768 [ 141.662019][ T5134] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.230 (5134) [ 141.679969][ T5134] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 141.689169][ T5134] BTRFS info (device loop2): turning on async discard [ 141.696103][ T5134] BTRFS info (device loop2): metadata ratio 0 [ 141.702861][ T5134] BTRFS info (device loop2): setting nodatasum [ 141.709097][ T5134] BTRFS info (device loop2): using free space tree [ 141.715787][ T5134] BTRFS info (device loop2): has skinny extents [ 141.797357][ T4190] XFS (loop1): Unmounting Filesystem [ 141.806417][ T5113] loop4: detected capacity change from 0 to 32768 [ 141.826141][ T5106] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 141.891700][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.958572][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.966740][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.971117][ T5106] JBD2: Ignoring recovery information on journal [ 142.053680][ T5113] [ 142.053680][ T5113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.053680][ T5113] [ 142.226831][ T5134] BTRFS info (device loop2): enabling ssd optimizations [ 142.336250][ T26] audit: type=1800 audit(1777824934.306:5): pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.230" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 142.409675][ T5113] ERROR: (device loop4): diWrite: ixpxd invalid [ 142.409675][ T5113] [ 142.444130][ T5106] JBD2: recovery failed [ 142.464034][ T5106] (syz.3.224,5106,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 142.520382][ T5113] ERROR: (device loop4): remounting filesystem as read-only [ 142.529869][ T5106] (syz.3.224,5106,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 142.559660][ T5113] ERROR: (device loop4): txCommit: [ 142.559660][ T5113] [ 142.570229][ T5106] (syz.3.224,5106,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 142.586536][ T5106] (syz.3.224,5106,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 142.727672][ T5106] (syz.3.224,5106,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 146.721637][ T5191] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.972328][ T5191] usb 2-1: Using ep0 maxpacket: 16 [ 147.101862][ T5191] usb 2-1: config 1 has too many interfaces: 129, using maximum allowed: 32 [ 147.120934][ T5191] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 129 [ 147.150817][ T5191] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.198906][ T5191] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 147.243006][ T5191] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 147.267121][ T5212] loop2: detected capacity change from 0 to 32768 [ 147.280383][ T5191] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.369344][ T5191] usb 2-1: config 1 interface 0 has no altsetting 0 [ 147.416051][ T5212] read_mapping_page failed! [ 147.432665][ T5212] ERROR: (device loop2): txCommit: [ 147.432665][ T5212] [ 147.491746][ T5191] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 147.547714][ T5191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.560458][ T5191] usb 2-1: SerialNumber: syz [ 147.625964][ T5216] loop4: detected capacity change from 0 to 1764 [ 147.632817][ T5209] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.667665][ T5209] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.712679][ T5191] usb 2-1: bad CDC descriptors [ 147.881871][ T5216] netlink: 'syz.4.244': attribute type 3 has an invalid length. [ 147.956900][ T5209] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.002043][ T5209] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.079468][ T5218] loop2: detected capacity change from 0 to 512 [ 148.102105][ T5191] cdc_subset 2-1:1.0 usb0: register 'cdc_subset' at usb-dummy_hcd.1-1, Linux Device, 06:e5:72:96:2f:fc [ 148.218789][ T5218] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 148.233780][ T4352] usb 2-1: USB disconnect, device number 5 [ 148.244610][ T4352] cdc_subset 2-1:1.0 usb0: unregister 'cdc_subset' usb-dummy_hcd.1-1, Linux Device [ 148.273784][ T5218] System zones: 1-12 [ 148.314989][ T5218] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.245: missing EA_INODE flag [ 148.600478][ T5227] loop4: detected capacity change from 0 to 32768 [ 148.615737][ T5227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.247 (5227) [ 148.690973][ T5218] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.245: error while reading EA inode 12 err=-117 [ 148.713420][ T5227] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 148.722442][ T5227] BTRFS info (device loop4): turning on async discard [ 148.729310][ T5227] BTRFS info (device loop4): metadata ratio 0 [ 148.735481][ T5227] BTRFS info (device loop4): setting nodatasum [ 148.741705][ T5227] BTRFS info (device loop4): using free space tree [ 148.748462][ T5227] BTRFS info (device loop4): has skinny extents [ 148.771878][ T5218] EXT4-fs (loop2): 1 orphan inode deleted [ 148.777680][ T5218] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 150.855810][ T5242] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 150.873223][ T5242] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 151.034419][ T5227] BTRFS info (device loop4): enabling ssd optimizations [ 151.700173][ T26] audit: type=1800 audit(1777824943.586:6): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.247" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 153.395187][ T5292] loop0: detected capacity change from 0 to 4096 [ 153.430503][ T5292] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 153.549411][ T5292] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 153.563687][ T5301] kvm [5299]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 153.584188][ T5301] kvm [5299]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 153.627473][ T5301] kvm [5299]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 153.666398][ T5301] kvm [5299]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 153.724791][ T5301] kvm [5299]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 153.740681][ T5301] kvm [5299]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 153.752623][ T5301] kvm [5299]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 153.805120][ T5301] kvm [5299]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 153.879064][ T5301] kvm [5299]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 153.891085][ T5301] kvm [5299]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 154.480116][ T4202] Bluetooth: Frame is too long (len 16, expected len 7) [ 154.654725][ T5322] loop4: detected capacity change from 0 to 256 [ 154.825485][ T5322] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 154.920765][ T26] audit: type=1800 audit(1777824946.896:7): pid=5322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.274" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 155.021723][ T4353] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.033334][ T5310] loop1: detected capacity change from 0 to 32768 [ 155.341730][ T4353] usb 1-1: Using ep0 maxpacket: 32 [ 155.523015][ T4353] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 155.578000][ T4353] usb 1-1: config 0 has no interface number 0 [ 155.706254][ T4353] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 156.026076][ T4353] usb 1-1: config 0 interface 89 has no altsetting 0 [ 156.432311][ T4353] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 156.441451][ T4353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.461289][ T4353] usb 1-1: Product: syz [ 156.466283][ T4353] usb 1-1: Manufacturer: syz [ 156.471147][ T4353] usb 1-1: SerialNumber: syz [ 156.498706][ T4353] usb 1-1: config 0 descriptor?? [ 156.553373][ T4353] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 156.591129][ T4353] em28xx 1-1:0.89: Video interface 89 found: [ 156.790286][ T5359] netlink: 'syz.1.286': attribute type 3 has an invalid length. [ 157.251861][ T4353] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 158.009611][ T5374] loop3: detected capacity change from 0 to 256 [ 158.113068][ T5374] exfat: Deprecated parameter 'utf8' [ 158.121708][ T5374] exfat: Unknown parameter 'keep_last_dots' [ 158.421740][ T4353] em28xx 1-1:0.89: AC97 command still being executed: not handled properly! [ 158.807825][ T4353] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 158.966032][ T4353] em28xx 1-1:0.89: board has no eeprom [ 159.282393][ T4353] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 159.289707][ T4353] em28xx 1-1:0.89: analog set to bulk mode. [ 159.321816][ T4353] usb 1-1: USB disconnect, device number 5 [ 159.332467][ T4353] em28xx 1-1:0.89: Disconnecting em28xx [ 160.081061][ T4352] em28xx 1-1:0.89: Registering V4L2 extension [ 160.242982][ T4352] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 160.271411][ T4352] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 160.296327][ T5380] syz.1.291 (5380): drop_caches: 2 [ 160.305782][ T4352] em28xx 1-1:0.89: No AC97 audio processor [ 160.348185][ T4352] usb 1-1: Decoder not found [ 160.366937][ T4352] em28xx 1-1:0.89: failed to create media graph [ 160.397635][ T4352] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 160.434780][ T4352] em28xx 1-1:0.89: Registering snapshot button... [ 160.491998][ T4352] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input6 [ 160.533372][ T4352] em28xx 1-1:0.89: Remote control support is not available for this card. [ 160.562233][ T4353] em28xx 1-1:0.89: Closing input extension [ 160.573445][ T4353] em28xx 1-1:0.89: Deregistering snapshot button [ 160.738059][ T4353] em28xx 1-1:0.89: Freeing device [ 161.406088][ T5400] loop3: detected capacity change from 0 to 32768 [ 161.653158][ T5400] (syz.3.297,5400,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 161.983485][ T5400] (syz.3.297,5400,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 162.281821][ T5400] JBD2: Ignoring recovery information on journal [ 162.458656][ T5400] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 162.989236][ T5400] [ 162.991644][ T5400] ====================================================== [ 162.998702][ T5400] WARNING: possible circular locking dependency detected [ 163.005769][ T5400] syzkaller #0 Not tainted [ 163.010216][ T5400] ------------------------------------------------------ [ 163.017258][ T5400] syz.3.297/5400 is trying to acquire lock: [ 163.023179][ T5400] ffff8880766e1488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 163.034190][ T5400] [ 163.034190][ T5400] but task is already holding lock: [ 163.041583][ T5400] ffff88805881ea20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x691/0x4a20 [ 163.052167][ T5400] [ 163.052167][ T5400] which lock already depends on the new lock. [ 163.052167][ T5400] [ 163.062598][ T5400] [ 163.062598][ T5400] the existing dependency chain (in reverse order) is: [ 163.071651][ T5400] [ 163.071651][ T5400] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 163.080505][ T5400] down_read+0x44/0x2e0 [ 163.085307][ T5400] ocfs2_read_virt_blocks+0x237/0x8d0 [ 163.091269][ T5400] ocfs2_find_entry+0x3ca/0x2060 [ 163.097137][ T5400] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 163.103171][ T5400] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 163.109296][ T5400] ocfs2_get_system_file_inode+0x32b/0x7f0 [ 163.115661][ T5400] ocfs2_init_global_system_inodes+0x2f3/0x6d0 [ 163.122511][ T5400] ocfs2_fill_super+0x4060/0x50f0 [ 163.128107][ T5400] mount_bdev+0x287/0x3c0 [ 163.133101][ T5400] legacy_get_tree+0xe6/0x180 [ 163.138471][ T5400] vfs_get_tree+0x88/0x270 [ 163.143462][ T5400] do_new_mount+0x24a/0xa40 [ 163.148531][ T5400] __se_sys_mount+0x2e3/0x3d0 [ 163.153784][ T5400] do_syscall_64+0x4c/0xa0 [ 163.158853][ T5400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.165340][ T5400] [ 163.165340][ T5400] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 163.173734][ T5400] __lock_acquire+0x2c42/0x7d10 [ 163.179153][ T5400] lock_acquire+0x19e/0x400 [ 163.184243][ T5400] __mutex_lock_common+0x1e3/0x2400 [ 163.190010][ T5400] mutex_lock_nested+0x17/0x20 [ 163.195342][ T5400] ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 163.202061][ T5400] ocfs2_reserve_suballoc_bits+0x12b/0x44d0 [ 163.208536][ T5400] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 163.215157][ T5166] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.215438][ T5400] ocfs2_extend_dir+0xcc9/0x4a20 [ 163.228441][ T5400] ocfs2_prepare_dir_for_insert+0x2fc2/0x53c0 [ 163.235161][ T5400] ocfs2_symlink+0xbf2/0x27e0 [ 163.240417][ T5400] vfs_symlink+0x247/0x3d0 [ 163.245450][ T5400] do_symlinkat+0x1ab/0x6b0 [ 163.250526][ T5400] __x64_sys_symlink+0x7a/0x90 [ 163.255860][ T5400] do_syscall_64+0x4c/0xa0 [ 163.260838][ T5400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.267326][ T5400] [ 163.267326][ T5400] other info that might help us debug this: [ 163.267326][ T5400] [ 163.278298][ T5400] Possible unsafe locking scenario: [ 163.278298][ T5400] [ 163.285784][ T5400] CPU0 CPU1 [ 163.291181][ T5400] ---- ---- [ 163.296573][ T5400] lock(&ocfs2_file_ip_alloc_sem_key); [ 163.302157][ T5400] lock(&osb->system_file_mutex); [ 163.309825][ T5400] lock(&ocfs2_file_ip_alloc_sem_key); [ 163.317925][ T5400] lock(&osb->system_file_mutex); [ 163.323073][ T5400] [ 163.323073][ T5400] *** DEADLOCK *** [ 163.323073][ T5400] [ 163.331242][ T5400] 3 locks held by syz.3.297/5400: [ 163.336337][ T5400] #0: ffff888025f3a460 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 163.345639][ T5400] #1: ffff88805881ed88 (&type->i_mutex_dir_key#17/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 163.356442][ T5400] #2: ffff88805881ea20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x691/0x4a20 [ 163.367471][ T5400] [ 163.367471][ T5400] stack backtrace: [ 163.373397][ T5400] CPU: 0 PID: 5400 Comm: syz.3.297 Not tainted syzkaller #0 [ 163.380749][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.390843][ T5400] Call Trace: [ 163.394155][ T5400] [ 163.397117][ T5400] dump_stack_lvl+0x188/0x250 [ 163.401846][ T5400] ? load_image+0x400/0x400 [ 163.406389][ T5400] ? show_regs_print_info+0x20/0x20 [ 163.411625][ T5400] ? print_circular_bug+0x12b/0x1a0 [ 163.416903][ T5400] check_noncircular+0x296/0x330 [ 163.421878][ T5400] ? add_chain_block+0x940/0x940 [ 163.426845][ T5400] ? lockdep_lock+0xf1/0x1f0 [ 163.431475][ T5400] ? __lock_acquire+0x13bc/0x7d10 [ 163.436539][ T5400] ? mark_lock+0x94/0x320 [ 163.440899][ T5400] __lock_acquire+0x2c42/0x7d10 [ 163.445797][ T5400] ? verify_lock_unused+0x140/0x140 [ 163.451030][ T5400] ? mark_lock+0x94/0x320 [ 163.455387][ T5400] ? __lock_acquire+0x13bc/0x7d10 [ 163.460471][ T5400] lock_acquire+0x19e/0x400 [ 163.465013][ T5400] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 163.471122][ T5400] ? __might_sleep+0xf0/0xf0 [ 163.475744][ T5400] ? mark_lock+0x94/0x320 [ 163.480106][ T5400] ? read_lock_is_recursive+0x10/0x10 [ 163.485524][ T5400] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 163.491543][ T5400] __mutex_lock_common+0x1e3/0x2400 [ 163.496778][ T5400] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 163.502796][ T5400] ? add_chain_block+0x940/0x940 [ 163.507769][ T5400] ? ocfs2_get_system_file_inode+0x156/0x7f0 [ 163.513790][ T5400] ? mutex_lock_io_nested+0x60/0x60 [ 163.519131][ T5400] ? __rwlock_init+0x140/0x140 [ 163.524187][ T5400] ? do_raw_spin_unlock+0x11d/0x230 [ 163.529434][ T5400] mutex_lock_nested+0x17/0x20 [ 163.534245][ T5400] ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 163.540144][ T5400] ? ocfs2_fast_symlink_readpage+0x3f0/0x3f0 [ 163.546221][ T5400] ? __bfs+0x2a3/0x5c0 [ 163.550333][ T5400] ? verify_lock_unused+0x140/0x140 [ 163.555582][ T5400] ocfs2_reserve_suballoc_bits+0x12b/0x44d0 [ 163.561528][ T5400] ? __lock_acquire+0x7d10/0x7d10 [ 163.566616][ T5400] ? mark_lock+0x94/0x320 [ 163.570980][ T5400] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 163.576996][ T5400] ? lock_chain_count+0x20/0x20 [ 163.581892][ T5400] ? __rwlock_init+0x140/0x140 [ 163.586697][ T5400] ? ocfs2_block_group_search+0x470/0x470 [ 163.592454][ T5400] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 163.598387][ T5400] ? lockdep_hardirqs_on+0x94/0x140 [ 163.603634][ T5400] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 163.609566][ T5400] ? _raw_spin_unlock+0x40/0x40 [ 163.614503][ T5400] ? stack_trace_save+0xa6/0xf0 [ 163.619435][ T5400] ? stack_trace_snprint+0xf0/0xf0 [ 163.624619][ T5400] ? add_lock_to_list+0x18d/0x280 [ 163.631771][ T5400] ? stack_depot_save+0x404/0x440 [ 163.636858][ T5400] ? __kasan_kmalloc+0xcc/0xf0 [ 163.641694][ T5400] ? __kasan_kmalloc+0xb5/0xf0 [ 163.646614][ T5400] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 163.653175][ T5400] ? ocfs2_extend_dir+0xcc9/0x4a20 [ 163.658418][ T5400] ? ocfs2_prepare_dir_for_insert+0x2fc2/0x53c0 [ 163.664699][ T5400] ? ocfs2_symlink+0xbf2/0x27e0 [ 163.669644][ T5400] ? vfs_symlink+0x247/0x3d0 [ 163.674413][ T5400] ? do_symlinkat+0x1ab/0x6b0 [ 163.679135][ T5400] ? __x64_sys_symlink+0x7a/0x90 [ 163.684117][ T5400] ? do_syscall_64+0x4c/0xa0 [ 163.688749][ T5400] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.694960][ T5400] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 163.701339][ T5400] ? ocfs2_init_steal_slots+0x150/0x150 [ 163.707022][ T5400] ? rwsem_write_trylock+0x135/0x1c0 [ 163.712350][ T5400] ? clear_nonspinnable+0x60/0x60 [ 163.717605][ T5400] ? check_path+0x21/0x40 [ 163.722011][ T5400] ? check_noncircular+0x189/0x330 [ 163.727178][ T5400] ocfs2_extend_dir+0xcc9/0x4a20 [ 163.732270][ T5400] ? __lock_acquire+0x13bc/0x7d10 [ 163.737347][ T5400] ? ocfs2_dx_dir_name_hash+0xbb0/0xbb0 [ 163.742945][ T5400] ? ocfs2_allocate_extend_trans+0x5d0/0x5d0 [ 163.748969][ T5400] ? verify_lock_unused+0x140/0x140 [ 163.754209][ T5400] ? mark_lock+0x94/0x320 [ 163.758577][ T5400] ? __lock_acquire+0x12e8/0x7d10 [ 163.763649][ T5400] ? ocfs2_buffer_cached+0x370/0x860 [ 163.768990][ T5400] ? __lock_acquire+0x7d10/0x7d10 [ 163.774058][ T5400] ? do_raw_spin_lock+0x128/0x2f0 [ 163.779131][ T5400] ? ocfs2_read_blocks+0x108e/0x1450 [ 163.784458][ T5400] ? ocfs2_set_buffer_uptodate+0xab/0x1120 [ 163.790375][ T5400] ? ocfs2_dx_dir_name_hash+0xa01/0xbb0 [ 163.795968][ T5400] ? ocfs2_prepare_dir_for_insert+0x53c0/0x53c0 [ 163.802395][ T5400] ? ocfs2_buffer_cached+0x370/0x860 [ 163.808228][ T5400] ocfs2_prepare_dir_for_insert+0x2fc2/0x53c0 [ 163.814356][ T5400] ? ocfs2_set_buffer_uptodate+0xab/0x1120 [ 163.820208][ T5400] ? __might_sleep+0xf0/0xf0 [ 163.824844][ T5400] ? ocfs2_fill_new_dir_el+0xf20/0xf20 [ 163.830489][ T5400] ? rcu_is_watching+0x11/0xa0 [ 163.835318][ T5400] ? ocfs2_search_dirblock+0x324/0x770 [ 163.840831][ T5400] ? ocfs2_read_dir_block_direct+0x4b0/0x4b0 [ 163.846870][ T5400] ? __brelse+0x55/0x90 [ 163.851063][ T5400] ? ocfs2_find_entry+0xe36/0x2060 [ 163.856213][ T5400] ? add_chain_block+0x940/0x940 [ 163.861250][ T5400] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 163.867448][ T5400] ? ocfs2_read_blocks_sync+0xb40/0xb40 [ 163.873042][ T5400] ? ocfs2_inode_lock_full_nested+0x147/0x1bb0 [ 163.879243][ T5400] ? ocfs2_read_inode_block+0x120/0x190 [ 163.884836][ T5400] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 163.890869][ T5400] ? do_raw_spin_unlock+0x11d/0x230 [ 163.896106][ T5400] ? ocfs2_inode_lock_full_nested+0xcdb/0x1bb0 [ 163.902309][ T5400] ? ocfs2_downconvert_lock+0x530/0x530 [ 163.907907][ T5400] ? ocfs2_check_dir_for_entry+0x246/0x3d0 [ 163.913759][ T5400] ? ocfs2_lookup_ino_from_name+0xf0/0xf0 [ 163.919570][ T5400] ? __lock_acquire+0x13bc/0x7d10 [ 163.924640][ T5400] ocfs2_symlink+0xbf2/0x27e0 [ 163.929362][ T5400] ? ocfs2_unlink+0x1990/0x1990 [ 163.934258][ T5400] ? verify_lock_unused+0x140/0x140 [ 163.939501][ T5400] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.945717][ T5400] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 163.951663][ T5400] ? __lock_acquire+0x7d10/0x7d10 [ 163.956723][ T5400] ? __rwlock_init+0x140/0x140 [ 163.961701][ T5400] ? do_raw_spin_unlock+0x11d/0x230 [ 163.966936][ T5400] ? put_pid+0xda/0x120 [ 163.971131][ T5400] ? ocfs2_permission+0x113/0x1e0 [ 163.976198][ T5400] ? ocfs2_getattr+0x360/0x360 [ 163.981005][ T5400] ? make_kgid+0x660/0x660 [ 163.985541][ T5400] ? apparmor_path_symlink+0x1ac/0x230 [ 163.991038][ T5400] ? HAS_UNMAPPED_ID+0x1d3/0x230 [ 163.996015][ T5400] ? ocfs2_getattr+0x360/0x360 [ 164.000838][ T5400] ? inode_permission+0xef/0x480 [ 164.005824][ T5400] ? bpf_lsm_inode_symlink+0x5/0x10 [ 164.011093][ T5400] ? security_inode_symlink+0xb2/0x100 [ 164.016600][ T5400] vfs_symlink+0x247/0x3d0 [ 164.021063][ T5400] do_symlinkat+0x1ab/0x6b0 [ 164.025615][ T5400] ? vfs_symlink+0x3d0/0x3d0 [ 164.030246][ T5400] ? getname_flags+0x1fe/0x500 [ 164.035047][ T5400] __x64_sys_symlink+0x7a/0x90 [ 164.039852][ T5400] do_syscall_64+0x4c/0xa0 [ 164.044313][ T5400] ? clear_bhb_loop+0x30/0x80 [ 164.049026][ T5400] ? clear_bhb_loop+0x30/0x80 [ 164.053747][ T5400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.059705][ T5400] RIP: 0033:0x7fe8cdc99dd9 [ 164.064150][ T5400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.083788][ T5400] RSP: 002b:00007fe8cbef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 164.092251][ T5400] RAX: ffffffffffffffda RBX: 00007fe8cdf12fa0 RCX: 00007fe8cdc99dd9 [ 164.100263][ T5400] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000940 [ 164.108269][ T5400] RBP: 00007fe8cdd2fd69 R08: 0000000000000000 R09: 0000000000000000 [ 164.116282][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.124299][ T5400] R13: 00007fe8cdf13038 R14: 00007fe8cdf12fa0 R15: 00007ffe65c57e88 [ 164.132329][ T5400] [ 164.453898][ T5166] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 164.463556][ T5166] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 164.474993][ T5166] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 164.485616][ T5166] usb 2-1: config 220 has no interface number 2 [ 164.494302][ T5166] usb 2-1: config 220 interface 1 altsetting 5 has an invalid endpoint with address 0x21, skipping [ 164.511039][ T5166] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 164.526871][ T5166] usb 2-1: config 220 interface 0 has no altsetting 0 [ 164.534826][ T5166] usb 2-1: config 220 interface 76 has no altsetting 0 [ 164.544168][ T5166] usb 2-1: config 220 interface 1 has no altsetting 0 [ 164.564668][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 164.701740][ T5166] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 164.710964][ T5166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.719350][ T5166] usb 2-1: Product: syz [ 164.724501][ T5166] usb 2-1: Manufacturer: syz [ 164.729201][ T5166] usb 2-1: SerialNumber: syz [ 165.102479][ T5166] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 165.111917][ T5166] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 165.118293][ T5166] usb 2-1: No valid video chain found. [ 165.123901][ T5166] usb 2-1: selecting invalid altsetting 0 [ 165.203055][ T5166] usb 2-1: selecting invalid altsetting 0 [ 165.208859][ T5166] usbtest: probe of 2-1:220.1 failed with error -22 [ 165.219233][ T5166] usb 2-1: USB disconnect, device number 6