last executing test programs: 11.192897733s ago: executing program 2 (id=373): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 5.255024102s ago: executing program 1 (id=386): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, &(0x7f0000000040)=0xffffffffffffffcb) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) socket(0x1d, 0x2, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x2, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.162903565s ago: executing program 2 (id=388): r0 = open(&(0x7f0000000580)='./file0\x00', 0xe040, 0x4) fcntl$setpipe(r0, 0x407, 0x10001) 5.011322919s ago: executing program 2 (id=389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000003c0)=""/208, 0xd0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x379080, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES64], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 4.942406201s ago: executing program 1 (id=391): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(r0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x60242, 0x0) 4.227014105s ago: executing program 3 (id=395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 4.106955299s ago: executing program 3 (id=396): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0xfffffffffffffffc, 0x12) unshare(0x2c020400) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) 4.04973459s ago: executing program 2 (id=397): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) mount$9p_rdma(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104600, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000006c0)=@generic={0x1, 0x4, 0x7}) 3.935314944s ago: executing program 0 (id=398): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x2, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.274179007s ago: executing program 2 (id=400): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x1}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r1, @ANYBLOB="a009b191ad8fc9db82ccd77be869850a18135a4d37ae76d15c920ff2fc5959e2049a081d881d14d4adcb199943862d4078037ccaf4f74b687445be860bb942db0fa2b4490664e0bb9227e251dd04600b44a200", @ANYRESHEX=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x2000c091}, 0x20000881) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x8000039c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$audio1(0xffffffffffffff9c, &(0x7f0000000400), 0x4acc80, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000140)) shutdown(r3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r3, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0xffff7ffe}, 0x1c) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r6, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x1, 0x4, 0xc08}}, 0xfffffdf0) read$FUSE(r7, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r7, &(0x7f0000000180), 0x4) write$UHID_INPUT(r7, &(0x7f0000000700)={0x8, {"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", 0x1000}}, 0x1006) accept4(r6, &(0x7f0000000280)=@l2, &(0x7f0000000300)=0x80, 0x80800) io_uring_enter(r2, 0x12c, 0x14, 0x17, 0x0, 0x0) 2.131439002s ago: executing program 0 (id=401): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000080000000000c7ab3e41addaf4b6e5ef8b90484eaf0b0000e3ff00000000000000fea4c467c221712e8ae7f9cc4a65e945206918c45791a9a3bbc1c2ae574d9efdba13757be4cd6dab490921ba"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) 2.094459563s ago: executing program 3 (id=402): userfaultfd(0x801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_adjtime(0x17, &(0x7f0000000000)={0x80ea33, 0x9, 0x3ff, 0x0, 0x9, 0x9, 0x8c, 0x3, 0x8001, 0x7, 0x6, 0x4, 0xb, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x2, 0x2, 0x7, 0x5, 0x1, 0x3, 0x7, 0x101, 0x40, 0x40009}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 1.974193557s ago: executing program 0 (id=403): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2718, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x891a, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]}) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xc2784) close_range(r4, r4, 0x0) 1.322245037s ago: executing program 0 (id=404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, 0x0, &(0x7f0000004880)=@udp=r0}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 1.207446941s ago: executing program 3 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a0a0108"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) 1.159867713s ago: executing program 0 (id=406): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) 1.141464553s ago: executing program 1 (id=407): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d", 0x9a}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094", 0xc0}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681", 0xb0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.011463887s ago: executing program 3 (id=408): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000000)={0x0, 0x16, 0x19, "ed8015bef2068bb1f62f3446d6734dde772f74543d126bd338"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 864.744282ms ago: executing program 1 (id=409): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x2, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 739.242326ms ago: executing program 1 (id=411): openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x502, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$loop(0x0, 0x2000008, 0x20040) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x16, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@multicast1, 0x4e21, 0x10001, 0x400001cb, 0x12d61}}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000083000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.648368ms ago: executing program 0 (id=412): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x110, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getsockopt$inet_buf(r4, 0x0, 0x27, &(0x7f00000001c0)=""/198, &(0x7f00000002c0)=0xc6) socket(0x2b, 0x1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) 0s ago: executing program 1 (id=413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000140)=""/110, 0x6e, 0x40000675, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 66.456618][ T5761] cgroup: Unknown subsys name 'net' [ 66.566436][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.072439][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.541192][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.553098][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.570911][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.579249][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.587538][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.601615][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.609689][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.617607][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.626026][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.633198][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.634882][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.648574][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.656114][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.664265][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.672337][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.681972][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.689279][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.697202][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.708092][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.715707][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.724477][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.732128][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.734408][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.740113][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.223490][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 70.258117][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 70.281292][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 70.347041][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 70.421956][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.430182][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.437406][ T5780] bridge_slave_0: entered allmulticast mode [ 70.446296][ T5780] bridge_slave_0: entered promiscuous mode [ 70.486891][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.494570][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.501798][ T5780] bridge_slave_1: entered allmulticast mode [ 70.509109][ T5780] bridge_slave_1: entered promiscuous mode [ 70.545299][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.552552][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.559825][ T5775] bridge_slave_0: entered allmulticast mode [ 70.566700][ T5775] bridge_slave_0: entered promiscuous mode [ 70.602103][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.611420][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.622061][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.629278][ T5775] bridge_slave_1: entered allmulticast mode [ 70.636076][ T5775] bridge_slave_1: entered promiscuous mode [ 70.667357][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.706223][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.716066][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.723267][ T5778] bridge_slave_0: entered allmulticast mode [ 70.730770][ T5778] bridge_slave_0: entered promiscuous mode [ 70.749558][ T5780] team0: Port device team_slave_0 added [ 70.766723][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.776556][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.783989][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.791662][ T5778] bridge_slave_1: entered allmulticast mode [ 70.799531][ T5778] bridge_slave_1: entered promiscuous mode [ 70.807397][ T5780] team0: Port device team_slave_1 added [ 70.823676][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.830959][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.838269][ T5772] bridge_slave_0: entered allmulticast mode [ 70.845590][ T5772] bridge_slave_0: entered promiscuous mode [ 70.855479][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.895124][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.902492][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.910398][ T5772] bridge_slave_1: entered allmulticast mode [ 70.917556][ T5772] bridge_slave_1: entered promiscuous mode [ 70.934382][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.941488][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.967477][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.983542][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.998250][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.033967][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.041037][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.067025][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.104610][ T5775] team0: Port device team_slave_0 added [ 71.122539][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.142720][ T5778] team0: Port device team_slave_0 added [ 71.154075][ T5780] hsr_slave_0: entered promiscuous mode [ 71.161003][ T5780] hsr_slave_1: entered promiscuous mode [ 71.169322][ T5775] team0: Port device team_slave_1 added [ 71.176844][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.197582][ T5778] team0: Port device team_slave_1 added [ 71.223193][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.229773][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.257367][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.264672][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.290938][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.323914][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.330947][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.358029][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.369792][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.376773][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.405516][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.430774][ T5772] team0: Port device team_slave_0 added [ 71.450532][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.457483][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.483670][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.512003][ T5772] team0: Port device team_slave_1 added [ 71.577254][ T5778] hsr_slave_0: entered promiscuous mode [ 71.583737][ T5778] hsr_slave_1: entered promiscuous mode [ 71.591180][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.599057][ T5778] Cannot create hsr debugfs directory [ 71.605090][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.612428][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.638601][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.650996][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.658031][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.684036][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.747590][ T5775] hsr_slave_0: entered promiscuous mode [ 71.753937][ T5775] hsr_slave_1: entered promiscuous mode [ 71.760271][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.767866][ T5775] Cannot create hsr debugfs directory [ 71.778245][ T5085] Bluetooth: hci3: command tx timeout [ 71.778261][ T5779] Bluetooth: hci2: command tx timeout [ 71.784078][ T5777] Bluetooth: hci1: command tx timeout [ 71.857891][ T5777] Bluetooth: hci0: command tx timeout [ 71.884340][ T5772] hsr_slave_0: entered promiscuous mode [ 71.891241][ T5772] hsr_slave_1: entered promiscuous mode [ 71.897358][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.904999][ T5772] Cannot create hsr debugfs directory [ 72.173600][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.190777][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.202259][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.211816][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.275127][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.289824][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.304355][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.314170][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.416751][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.451483][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.462226][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.474004][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.513304][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.531183][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.543816][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.560135][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.584898][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.591923][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.621859][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.629192][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.655806][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.662982][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.709805][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.793837][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.824246][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.831425][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.860973][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.868128][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.891166][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.945545][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.966239][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.985043][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.029278][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.036406][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.071955][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.079135][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.124389][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.131566][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.170367][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.177489][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.301906][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.452357][ T5780] veth0_vlan: entered promiscuous mode [ 73.480432][ T5780] veth1_vlan: entered promiscuous mode [ 73.493427][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.599556][ T5780] veth0_macvtap: entered promiscuous mode [ 73.633433][ T5780] veth1_macvtap: entered promiscuous mode [ 73.676038][ T5778] veth0_vlan: entered promiscuous mode [ 73.690884][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.710132][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.725130][ T5778] veth1_vlan: entered promiscuous mode [ 73.737174][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.752655][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.762285][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.772852][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.782588][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.858641][ T5777] Bluetooth: hci2: command tx timeout [ 73.862132][ T5779] Bluetooth: hci1: command tx timeout [ 73.864092][ T5777] Bluetooth: hci3: command tx timeout [ 73.910863][ T5778] veth0_macvtap: entered promiscuous mode [ 73.938066][ T5777] Bluetooth: hci0: command tx timeout [ 73.945447][ T5778] veth1_macvtap: entered promiscuous mode [ 73.992011][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.002926][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.013939][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.025045][ T5775] veth0_vlan: entered promiscuous mode [ 74.034976][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.051466][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.063117][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.080592][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.091447][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.102994][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.141610][ T5775] veth1_vlan: entered promiscuous mode [ 74.164203][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.173400][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.186627][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.195483][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.223216][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.235320][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.284283][ T5772] veth0_vlan: entered promiscuous mode [ 74.314166][ T5772] veth1_vlan: entered promiscuous mode [ 74.356834][ T5775] veth0_macvtap: entered promiscuous mode [ 74.398449][ T5775] veth1_macvtap: entered promiscuous mode [ 74.407059][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.422135][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.511104][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.527259][ T5772] veth0_macvtap: entered promiscuous mode [ 74.536440][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.547081][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.560210][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.570146][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.581177][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.592937][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.605472][ T5772] veth1_macvtap: entered promiscuous mode [ 74.625803][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.641846][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.651781][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.663263][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.675486][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.704613][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.716889][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.728030][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.740016][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.759354][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.770135][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 74.789002][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.801683][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.811999][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.827036][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.836226][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.849134][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.893403][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.914273][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.929793][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.942885][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.955173][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.972377][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.985268][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.030470][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.044811][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.055338][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.070019][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.183600][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.198946][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.212678][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.225557][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 75.240572][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 75.256426][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.280455][ T9] usb 1-1: config 0 descriptor?? [ 75.307960][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 75.317156][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 75.328332][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.341292][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.355705][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 75.373320][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 75.385217][ T9] usb 1-1: media controller created [ 75.395251][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.415076][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.426678][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.471774][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 75.486264][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 75.503897][ T5832] syz.0.1[5832]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.519095][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 75.567446][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.597334][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 75.604508][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.640600][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 75.802727][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 75.819178][ T9] dvb-usb: error while querying for an remote control event. [ 75.940122][ T5777] Bluetooth: hci1: command tx timeout [ 75.946378][ T5085] Bluetooth: hci2: command tx timeout [ 75.952071][ T5777] Bluetooth: hci3: command tx timeout [ 76.027926][ T5779] Bluetooth: hci0: command tx timeout [ 76.173709][ T5842] loop1: detected capacity change from 0 to 32768 [ 76.183335][ T5842] ======================================================= [ 76.183335][ T5842] WARNING: The mand mount option has been deprecated and [ 76.183335][ T5842] and is ignored by this kernel. Remove the mand [ 76.183335][ T5842] option from the mount to silence this warning. [ 76.183335][ T5842] ======================================================= [ 76.221842][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 76.228064][ T8] dvb-usb: error while querying for an remote control event. [ 76.302160][ T5842] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 76.566003][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 76.572146][ T9] dvb-usb: error while querying for an remote control event. [ 76.859450][ T28] audit: type=1800 audit(1781176057.289:2): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 77.036434][ T5842] syz.1.2 (5842) used greatest stack depth: 18768 bytes left [ 77.078270][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 77.126401][ T9] dvb-usb: error while querying for an remote control event. [ 77.328258][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 77.334062][ T8] dvb-usb: error while querying for an remote control event. [ 77.386205][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 77.393151][ T5853] loop3: detected capacity change from 0 to 736 [ 77.528857][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 77.550387][ T8] dvb-usb: error while querying for an remote control event. [ 77.866046][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 77.979220][ T8] dvb-usb: error while querying for an remote control event. [ 78.057751][ T5779] Bluetooth: hci2: command tx timeout [ 78.063400][ T5779] Bluetooth: hci3: command tx timeout [ 78.069091][ T5779] Bluetooth: hci1: command tx timeout [ 78.098204][ T5085] Bluetooth: hci0: command tx timeout [ 78.171114][ T5766] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.367367][ T5860] loop2: detected capacity change from 0 to 128 [ 78.387898][ T5836] dvb-usb: bulk message failed: -22 (1/0) [ 78.393676][ T5836] dvb-usb: error while querying for an remote control event. [ 78.492981][ T5862] loop3: detected capacity change from 0 to 128 [ 78.588204][ T5836] dvb-usb: bulk message failed: -22 (1/0) [ 78.593994][ T5836] dvb-usb: error while querying for an remote control event. [ 78.636910][ T9] usb 1-1: USB disconnect, device number 2 [ 78.641659][ T5862] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.784249][ T5862] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.142464][ T5878] loop0: detected capacity change from 0 to 64 [ 79.726081][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 80.032371][ T5885] sg_write: data in/out 406492/302 bytes for SCSI command 0xe9-- guessing data in; [ 80.032371][ T5885] program syz.1.15 not setting count and/or reply_len properly [ 80.120410][ T5887] loop2: detected capacity change from 0 to 8 [ 80.162840][ T5885] syz.1.15: attempt to access beyond end of device [ 80.162840][ T5885] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 80.248437][ T5885] XFS (nbd1): SB validate failed with error -5. [ 80.502261][ T5900] SQUASHFS error: Failed to read block 0x4de: -5 [ 80.511994][ T5900] SQUASHFS error: Failed to read block 0x4de: -5 [ 80.530595][ T5900] SQUASHFS error: Failed to read block 0x4de: -5 [ 80.539546][ T5900] SQUASHFS error: Failed to read block 0x4de: -5 [ 80.547280][ T5900] SQUASHFS error: Failed to read block 0x4de: -5 [ 80.555224][ T5900] SQUASHFS error: Failed to read block 0x4de: -5 [ 80.594279][ T28] audit: type=1800 audit(1781176060.999:3): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.17" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 80.718101][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.506341][ T5908] loop3: detected capacity change from 0 to 32768 [ 81.658401][ T5908] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 81.688068][ T787] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 81.890277][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.937388][ T787] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 81.961678][ T787] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 82.178100][ T28] audit: type=1800 audit(1781176062.599:4): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 82.589417][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.624610][ T787] usb 3-1: config 0 descriptor?? [ 82.667415][ T787] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 82.682867][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 82.716249][ T787] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 82.735933][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 82.753150][ T787] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 82.793023][ T787] usb 3-1: media controller created [ 82.819174][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.870429][ T787] dvb-usb: bulk message failed: -22 (6/0) [ 83.079258][ T787] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 83.098416][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 83.132949][ T787] dvb-usb: schedule remote query interval to 150 msecs. [ 83.170549][ T787] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 83.954915][ T1846] dvb-usb: bulk message failed: -22 (1/0) [ 83.993831][ T1846] dvb-usb: error while querying for an remote control event. [ 84.237693][ T1846] dvb-usb: bulk message failed: -22 (1/0) [ 84.243525][ T1846] dvb-usb: error while querying for an remote control event. [ 84.409075][ T9] usb 3-1: USB disconnect, device number 2 [ 84.479985][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 84.584146][ T5936] loop2: detected capacity change from 0 to 8 [ 84.889040][ T5934] loop3: detected capacity change from 0 to 32768 [ 84.920447][ T5934] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.28 (5934) [ 84.968687][ T5938] SQUASHFS error: Failed to read block 0x4de: -5 [ 84.976650][ T5938] SQUASHFS error: Failed to read block 0x4de: -5 [ 84.991466][ T5938] SQUASHFS error: Failed to read block 0x4de: -5 [ 84.999344][ T5938] SQUASHFS error: Failed to read block 0x4de: -5 [ 85.006475][ T5938] SQUASHFS error: Failed to read block 0x4de: -5 [ 85.013859][ T5938] SQUASHFS error: Failed to read block 0x4de: -5 [ 85.094003][ T28] audit: type=1800 audit(1781176065.449:5): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.29" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 85.545806][ T5932] loop0: detected capacity change from 0 to 32768 [ 85.611725][ T5932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.27 (5932) [ 85.670032][ T5934] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.736028][ T5934] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 85.769228][ T5932] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.783971][ T5934] BTRFS info (device loop3): using free space tree [ 85.812654][ T5932] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 85.852212][ T5932] BTRFS info (device loop0): force clearing of disk cache [ 85.886286][ T5932] BTRFS info (device loop0): allowing degraded mounts [ 85.926356][ T5932] BTRFS info (device loop0): enabling auto defrag [ 85.933791][ T5932] BTRFS info (device loop0): enabling ssd optimizations [ 85.944149][ T5932] BTRFS info (device loop0): using spread ssd allocation scheme [ 85.978371][ T5932] BTRFS info (device loop0): using free space tree [ 86.014050][ T5934] BTRFS info (device loop3): enabling ssd optimizations [ 86.039736][ T5934] BTRFS info (device loop3): auto enabling async discard [ 86.121290][ T5932] BTRFS info (device loop0): auto enabling async discard [ 86.135416][ T5932] BTRFS info (device loop0): rebuilding free space tree [ 86.462159][ T5780] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.585455][ T23] cfg80211: failed to load regulatory.db [ 86.610710][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.756165][ T5981] loop1: detected capacity change from 0 to 32768 [ 86.768037][ T5943] loop2: detected capacity change from 0 to 32768 [ 86.801508][ T5981] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 86.805206][ T5943] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.30 (5943) [ 86.949121][ T5786] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.397804][ T28] audit: type=1800 audit(1781176067.749:6): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.34" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 87.956932][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 88.360525][ T5995] loop2: detected capacity change from 0 to 8 [ 88.714660][ T6001] SQUASHFS error: Failed to read block 0x4de: -5 [ 88.723498][ T6001] SQUASHFS error: Failed to read block 0x4de: -5 [ 88.738996][ T6001] SQUASHFS error: Failed to read block 0x4de: -5 [ 88.746787][ T6001] SQUASHFS error: Failed to read block 0x4de: -5 [ 88.754852][ T6001] SQUASHFS error: Failed to read block 0x4de: -5 [ 88.762240][ T6001] SQUASHFS error: Failed to read block 0x4de: -5 [ 88.770046][ T28] audit: type=1800 audit(1781176069.199:7): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.39" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 88.794794][ T5814] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 89.682999][ T5814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.896831][ T5814] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 89.978347][ T5814] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 90.008405][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.038536][ T5814] usb 2-1: config 0 descriptor?? [ 90.201177][ T5814] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 90.238879][ T5814] dvb-usb: bulk message failed: -22 (3/0) [ 90.337554][ T5814] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 90.405735][ T5814] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 90.455169][ T5814] usb 2-1: media controller created [ 90.518337][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.028608][ T5814] dvb-usb: bulk message failed: -22 (6/0) [ 91.034516][ T5814] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 91.089930][ T5814] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 91.139810][ T5814] dvb-usb: schedule remote query interval to 150 msecs. [ 91.146797][ T5814] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 91.298084][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 91.337839][ T5814] dvb-usb: error while querying for an remote control event. [ 91.365313][ T6018] loop2: detected capacity change from 0 to 32768 [ 91.395471][ T6018] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 91.528159][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 91.559883][ T5814] dvb-usb: error while querying for an remote control event. [ 91.948861][ T28] audit: type=1800 audit(1781176072.319:8): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.45" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 92.345850][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 92.352430][ T5814] dvb-usb: error while querying for an remote control event. [ 92.438571][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 92.507453][ T5814] usb 2-1: USB disconnect, device number 2 [ 92.533389][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 92.558125][ T788] dvb-usb: error while querying for an remote control event. [ 92.619568][ T5814] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 92.758025][ T6020] loop3: detected capacity change from 0 to 32768 [ 92.798338][ T6020] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.46 (6020) [ 92.945510][ T6031] loop1: detected capacity change from 0 to 128 [ 93.022848][ T6020] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.037900][ T6031] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 93.063989][ T6020] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 93.073944][ T6020] BTRFS info (device loop3): force clearing of disk cache [ 93.081746][ T6031] hpfs: filesystem error: improperly stopped [ 93.103749][ T6031] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 93.107823][ T6020] BTRFS info (device loop3): allowing degraded mounts [ 93.126095][ T6031] hpfs: You really don't want any checks? You are crazy... [ 93.129109][ T6020] BTRFS info (device loop3): enabling auto defrag [ 93.145695][ T6031] hpfs: Code page index out of array [ 93.156407][ T6031] hpfs: code page support is disabled [ 93.157887][ T6020] BTRFS info (device loop3): enabling ssd optimizations [ 93.170199][ T6031] hpfs: hpfs_map_4sectors(): unaligned read [ 93.184027][ T6031] hpfs: hpfs_map_4sectors(): unaligned read [ 93.187942][ T6020] BTRFS info (device loop3): using spread ssd allocation scheme [ 93.197160][ T6031] hpfs: filesystem error: unable to find root dir [ 93.202009][ T6020] BTRFS info (device loop3): using free space tree [ 93.300203][ T6020] BTRFS info (device loop3): auto enabling async discard [ 93.322381][ T6020] BTRFS info (device loop3): rebuilding free space tree [ 93.493904][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.578169][ T6032] loop2: detected capacity change from 0 to 32768 [ 93.592052][ T6032] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.47 (6032) [ 93.700285][ T6032] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.747717][ T6032] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 93.757409][ T6032] BTRFS info (device loop2): using free space tree [ 93.858780][ T6032] BTRFS info (device loop2): enabling ssd optimizations [ 93.885427][ T6070] loop1: detected capacity change from 0 to 128 [ 93.893603][ T6032] BTRFS info (device loop2): auto enabling async discard [ 94.016059][ T5778] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.098399][ T6082] tmpfs: Bad value for 'mpol' [ 95.281456][ T6085] loop1: detected capacity change from 0 to 32768 [ 95.605097][ T6085] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 95.682799][ T6088] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 95.689990][ T6088] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 95.697169][ T6088] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 96.175793][ T28] audit: type=1800 audit(1781176076.629:9): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.58" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 96.613756][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 96.772515][ T6102] loop1: detected capacity change from 0 to 8 [ 97.120683][ T6105] SQUASHFS error: Failed to read block 0x4de: -5 [ 97.128706][ T6105] SQUASHFS error: Failed to read block 0x4de: -5 [ 97.196641][ T6107] SQUASHFS error: Failed to read block 0x4de: -5 [ 97.203306][ T6107] SQUASHFS error: Failed to read block 0x4de: -5 [ 97.209873][ T6107] SQUASHFS error: Failed to read block 0x4de: -5 [ 97.216378][ T6107] SQUASHFS error: Failed to read block 0x4de: -5 [ 97.252620][ T28] audit: type=1800 audit(1781176077.599:10): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.61" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 97.893078][ T6109] loop3: detected capacity change from 0 to 128 [ 97.936356][ T6109] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 97.967725][ T6109] hpfs: filesystem error: improperly stopped [ 97.991139][ T6109] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 98.016936][ T6109] hpfs: You really don't want any checks? You are crazy... [ 98.048191][ T6109] hpfs: Code page index out of array [ 98.053516][ T6109] hpfs: code page support is disabled [ 98.073364][ T6109] hpfs: hpfs_map_4sectors(): unaligned read [ 98.098194][ T6109] hpfs: hpfs_map_4sectors(): unaligned read [ 98.104160][ T6109] hpfs: filesystem error: unable to find root dir [ 98.436641][ T6111] loop1: detected capacity change from 0 to 32768 [ 98.458020][ T6111] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.63 (6111) [ 98.492643][ T6111] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.508519][ T6111] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 98.526513][ T6111] BTRFS info (device loop1): using free space tree [ 98.580968][ T6111] BTRFS info (device loop1): enabling ssd optimizations [ 98.594872][ T6111] BTRFS info (device loop1): auto enabling async discard [ 98.706202][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.644892][ T6156] autofs4:pid:6156:autofs_fill_super: called with bogus options [ 100.656307][ T6142] (syz.1.67,6142,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 100.700374][ T6155] loop3: detected capacity change from 0 to 8 [ 101.020605][ T6162] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.030006][ T6162] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.042737][ T28] audit: type=1800 audit(1781176081.499:11): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.72" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 101.098328][ T6164] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.104844][ T6164] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.111412][ T6164] SQUASHFS error: Failed to read block 0x4de: -5 [ 101.118312][ T6164] SQUASHFS error: Failed to read block 0x4de: -5 [ 102.276218][ T28] audit: type=1326 audit(1781176082.739:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.2.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 102.337133][ T28] audit: type=1326 audit(1781176082.739:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.2.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 102.423690][ T28] audit: type=1326 audit(1781176082.779:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.2.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 102.497686][ T28] audit: type=1326 audit(1781176082.779:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.2.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 102.581209][ T28] audit: type=1326 audit(1781176082.779:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.2.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 102.608261][ T28] audit: type=1326 audit(1781176082.859:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.2.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 102.639532][ T28] audit: type=1326 audit(1781176082.859:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.2.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 102.691039][ T28] audit: type=1326 audit(1781176082.859:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.2.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b40d5d68e code=0x7ffc0000 [ 102.927727][ T28] audit: type=1326 audit(1781176082.889:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.2.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b40d5d68e code=0x7ffc0000 [ 103.020088][ T28] audit: type=1326 audit(1781176082.889:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.2.76" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b40d5d68e code=0x7ffc0000 [ 103.514321][ T6199] autofs4:pid:6199:autofs_fill_super: called with bogus options [ 103.772117][ T6203] loop3: detected capacity change from 0 to 8 [ 104.120763][ T6208] (syz.3.87,6208,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 104.129273][ T6208] (syz.3.87,6208,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 104.203766][ T6207] SQUASHFS error: Failed to read block 0x4de: -5 [ 104.246468][ T6207] SQUASHFS error: Failed to read block 0x4de: -5 [ 105.131499][ T6209] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.649321][ T6217] loop2: detected capacity change from 0 to 32768 [ 105.703834][ T6217] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 106.883453][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 108.087982][ T6254] autofs4:pid:6254:autofs_fill_super: called with bogus options [ 109.274833][ T6271] syz.1.104 uses obsolete (PF_INET,SOCK_PACKET) [ 109.391813][ T6277] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 112.245006][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 112.591222][ T6315] Zero length message leads to an empty skb [ 115.316871][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.506881][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 115.515341][ T8] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 115.523734][ T8] usb 3-1: config 0 has no interface number 0 [ 115.530020][ T8] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 115.540278][ T5814] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.548054][ T8] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 115.564990][ T8] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 115.575197][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.583376][ T8] usb 3-1: Product: syz [ 115.587888][ T8] usb 3-1: Manufacturer: syz [ 115.592656][ T8] usb 3-1: SerialNumber: syz [ 115.604042][ T8] usb 3-1: config 0 descriptor?? [ 115.614895][ T6334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.625734][ T6334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.756840][ T5814] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 115.766032][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.795358][ T5814] usb 2-1: Product: syz [ 115.807679][ T5814] usb 2-1: Manufacturer: syz [ 115.817775][ T5814] usb 2-1: SerialNumber: syz [ 115.839191][ T5814] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 115.885785][ T6334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.907071][ T6334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.932061][ T788] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.331536][ T8] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 116.599536][ T1846] usb 2-1: USB disconnect, device number 3 [ 117.460861][ T788] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 117.469994][ T788] ath9k_htc: Failed to initialize the device [ 117.606660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.645407][ T6356] loop0: detected capacity change from 0 to 32768 [ 117.742345][ T1846] usb 2-1: ath9k_htc: USB layer deinitialized [ 120.395524][ T6356] JBD2: journal reset failed [ 120.400323][ T6356] (syz.0.127,6356,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 120.409180][ T6356] (syz.0.127,6356,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 120.460549][ T8] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 120.535959][ T6364] loop2: detected capacity change from 0 to 128 [ 120.560660][ T8] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 120.607058][ T8] asix: probe of 3-1:0.34 failed with error -71 [ 120.647257][ T8] usb 3-1: USB disconnect, device number 3 [ 122.578291][ T6387] netlink: 72 bytes leftover after parsing attributes in process `syz.1.138'. [ 122.915844][ T6390] loop0: detected capacity change from 0 to 32768 [ 122.962826][ T6394] loop2: detected capacity change from 0 to 128 [ 122.971069][ T6390] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 124.001048][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 124.001064][ T28] audit: type=1800 audit(1781176103.850:51): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.139" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 124.752795][ T5780] ocfs2: Unmounting device (7,0) on (node local) [ 125.776545][ T6423] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 126.401749][ T6429] loop1: detected capacity change from 0 to 128 [ 126.969096][ T6444] warning: `syz.2.156' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.196261][ T6458] loop3: detected capacity change from 0 to 128 [ 130.856379][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 131.294498][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.315596][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.522507][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.531623][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.543494][ T9] usb 1-1: config 0 descriptor?? [ 131.551822][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 131.558557][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 131.567306][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 132.373020][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 132.390593][ T9] usb 1-1: media controller created [ 132.397818][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.576992][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 132.582836][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 132.736584][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742919][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.836915][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 132.953931][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 133.008794][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 133.194119][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 133.232622][ T9] dvb-usb: error while querying for an remote control event. [ 133.297796][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 133.505825][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 133.811520][ T8] usb 4-1: config 8 has an invalid interface number: 97 but max is 0 [ 133.957120][ T8] usb 4-1: config 8 has no interface number 0 [ 134.009136][ T8] usb 4-1: config 8 interface 97 altsetting 9 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 134.045941][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 134.058432][ T788] dvb-usb: error while querying for an remote control event. [ 134.271802][ T8] usb 4-1: config 8 interface 97 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 134.299370][ T8] usb 4-1: config 8 interface 97 has no altsetting 0 [ 134.318831][ T8] usb 4-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 134.328365][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.351897][ T8] usb 4-1: Product: syz [ 134.358559][ T8] usb 4-1: Manufacturer: syz [ 134.363188][ T8] usb 4-1: SerialNumber: syz [ 134.408985][ T27] usb 1-1: USB disconnect, device number 3 [ 134.492565][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 135.185620][ T6526] loop2: detected capacity change from 0 to 32768 [ 135.227514][ T6526] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 135.915999][ T28] audit: type=1800 audit(1781176116.241:52): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.184" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 136.216974][ T8] hub 4-1:8.97: bad descriptor, ignoring hub [ 136.225405][ T8] hub: probe of 4-1:8.97 failed with error -5 [ 136.234060][ T8] sierra 4-1:8.97: Sierra USB modem converter detected [ 136.272825][ T8] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 136.313571][ T8] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 136.387451][ T8] usb 4-1: USB disconnect, device number 2 [ 136.408741][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 136.455264][ T8] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 136.508285][ T8] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 136.700353][ T8] sierra 4-1:8.97: device disconnected [ 136.885456][ T1764] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 137.253983][ T1764] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.358275][ T1764] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 137.374818][ T6535] Bluetooth: MGMT ver 1.22 [ 137.500808][ T1764] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 137.551504][ T1764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.742692][ T1764] usb 1-1: config 0 descriptor?? [ 138.019256][ T1764] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 138.089178][ T1764] dvb-usb: bulk message failed: -22 (3/0) [ 138.258391][ T1764] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 138.273667][ T1764] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 138.284238][ T1764] usb 1-1: media controller created [ 138.307169][ T1764] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.336291][ T1764] dvb-usb: bulk message failed: -22 (6/0) [ 138.342127][ T1764] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 138.396514][ T1764] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 138.419003][ T1764] dvb-usb: schedule remote query interval to 150 msecs. [ 138.442739][ T1764] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 138.480050][ T6545] loop3: detected capacity change from 0 to 128 [ 138.538716][ T6545] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 138.569319][ T6545] hpfs: filesystem error: improperly stopped [ 138.594310][ T6545] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 138.602213][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 138.609526][ T788] dvb-usb: error while querying for an remote control event. [ 138.625553][ T6545] hpfs: You really don't want any checks? You are crazy... [ 138.648252][ T6545] hpfs: Code page index out of array [ 138.653572][ T6545] hpfs: code page support is disabled [ 138.686003][ T6545] hpfs: hpfs_map_4sectors(): unaligned read [ 138.692371][ T6545] hpfs: hpfs_map_4sectors(): unaligned read [ 138.739841][ T6545] hpfs: filesystem error: unable to find root dir [ 138.800370][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 138.814847][ T788] dvb-usb: error while querying for an remote control event. [ 138.998920][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 139.004764][ T788] dvb-usb: error while querying for an remote control event. [ 139.186098][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 139.191900][ T788] dvb-usb: error while querying for an remote control event. [ 139.375921][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 139.393020][ T788] dvb-usb: error while querying for an remote control event. [ 139.750044][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 139.938011][ T8] dvb-usb: error while querying for an remote control event. [ 140.257523][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 140.306701][ T8] dvb-usb: error while querying for an remote control event. [ 140.449449][ T5085] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 140.575782][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 140.627495][ T5085] Bluetooth: hci1: Injecting HCI hardware error event [ 140.635956][ T788] dvb-usb: error while querying for an remote control event. [ 140.643458][ T5779] Bluetooth: hci1: hardware error 0x00 [ 140.795824][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 140.801600][ T788] dvb-usb: error while querying for an remote control event. [ 140.849238][ T788] usb 1-1: USB disconnect, device number 4 [ 140.889179][ T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 141.065505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 141.670829][ T6580] loop2: detected capacity change from 0 to 128 [ 141.713973][ T6580] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 141.738769][ T6580] hpfs: filesystem error: improperly stopped [ 141.747257][ T6580] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 141.755071][ T6580] hpfs: You really don't want any checks? You are crazy... [ 141.995579][ T6580] hpfs: Code page index out of array [ 142.001225][ T6580] hpfs: code page support is disabled [ 142.017252][ T6580] hpfs: hpfs_map_4sectors(): unaligned read [ 142.024915][ T6580] hpfs: hpfs_map_4sectors(): unaligned read [ 142.031626][ T6580] hpfs: filesystem error: unable to find root dir [ 142.735779][ T5779] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 142.845508][ T23] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 143.047281][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.070938][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 143.105274][ T23] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 143.175266][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.197661][ T23] usb 4-1: config 0 descriptor?? [ 143.212855][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 143.326605][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 143.386564][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 143.413257][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 143.445346][ T23] usb 4-1: media controller created [ 143.496672][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.525651][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 143.549444][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 143.578865][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 143.622008][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 143.716240][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 143.915247][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 143.921084][ T23] dvb-usb: error while querying for an remote control event. [ 144.101726][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 144.111807][ T5811] dvb-usb: error while querying for an remote control event. [ 144.326206][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 144.332744][ T23] dvb-usb: error while querying for an remote control event. [ 144.505262][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 144.522471][ T5811] dvb-usb: error while querying for an remote control event. [ 144.735296][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 144.751947][ T23] dvb-usb: error while querying for an remote control event. [ 144.945222][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 144.954335][ T27] dvb-usb: error while querying for an remote control event. [ 145.135298][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 145.145616][ T27] dvb-usb: error while querying for an remote control event. [ 145.325169][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 145.331324][ T27] dvb-usb: error while querying for an remote control event. [ 145.509017][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 145.524973][ T27] dvb-usb: error while querying for an remote control event. [ 145.685193][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 145.691100][ T27] dvb-usb: error while querying for an remote control event. [ 145.725908][ T6626] loop2: detected capacity change from 0 to 128 [ 145.764547][ T6626] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 145.793179][ T6626] hpfs: filesystem error: improperly stopped [ 145.818924][ T6626] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 145.845163][ T6626] hpfs: You really don't want any checks? You are crazy... [ 145.862627][ T6626] hpfs: Code page index out of array [ 145.872740][ T6626] hpfs: code page support is disabled [ 145.876085][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 145.895340][ T27] dvb-usb: error while querying for an remote control event. [ 145.903512][ T6626] hpfs: hpfs_map_4sectors(): unaligned read [ 145.923534][ T6626] hpfs: hpfs_map_4sectors(): unaligned read [ 145.942163][ T788] usb 4-1: USB disconnect, device number 3 [ 145.952574][ T6626] hpfs: filesystem error: unable to find root dir [ 146.029294][ T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 148.366982][ T6651] Malformed UNC in devname [ 148.366982][ T6651] [ 148.388327][ T6651] CIFS: VFS: Malformed UNC in devname [ 148.533305][ T6653] loop0: detected capacity change from 0 to 128 [ 148.560734][ T6653] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 148.599007][ T6653] hpfs: filesystem error: improperly stopped [ 148.935547][ T6653] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 149.110409][ T6653] hpfs: You really don't want any checks? You are crazy... [ 149.122009][ T6653] hpfs: Code page index out of array [ 149.149979][ T6653] hpfs: code page support is disabled [ 149.170286][ T6653] hpfs: hpfs_map_4sectors(): unaligned read [ 149.188112][ T6653] hpfs: hpfs_map_4sectors(): unaligned read [ 149.205551][ T6653] hpfs: filesystem error: unable to find root dir [ 150.496592][ T5779] Bluetooth: hci3: command tx timeout [ 153.037818][ T6691] loop2: detected capacity change from 0 to 128 [ 153.067955][ T6691] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 153.204913][ T6691] hpfs: filesystem error: improperly stopped [ 153.259759][ T6691] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 153.371551][ T6691] hpfs: You really don't want any checks? You are crazy... [ 153.439742][ T6691] hpfs: Code page index out of array [ 153.499076][ T6691] hpfs: code page support is disabled [ 153.546628][ T6691] hpfs: hpfs_map_4sectors(): unaligned read [ 153.606877][ T6691] hpfs: hpfs_map_4sectors(): unaligned read [ 153.638779][ T6691] hpfs: filesystem error: unable to find root dir [ 155.943817][ T6701] loop0: detected capacity change from 0 to 32768 [ 155.952814][ T6701] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.242 (6701) [ 155.990961][ T6701] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.013112][ T6701] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 156.032974][ T6701] BTRFS info (device loop0): force clearing of disk cache [ 156.078815][ T6701] BTRFS info (device loop0): allowing degraded mounts [ 156.102039][ T6701] BTRFS info (device loop0): enabling auto defrag [ 156.118047][ T6701] BTRFS info (device loop0): enabling ssd optimizations [ 156.140891][ T6701] BTRFS info (device loop0): using spread ssd allocation scheme [ 156.163957][ T6701] BTRFS info (device loop0): using free space tree [ 156.295505][ T6701] BTRFS info (device loop0): auto enabling async discard [ 156.390157][ T6701] BTRFS info (device loop0): rebuilding free space tree [ 156.886398][ T5780] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.044422][ T6735] loop3: detected capacity change from 0 to 128 [ 157.107272][ T6735] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 157.171079][ T6735] hpfs: filesystem error: improperly stopped [ 157.199452][ T6735] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 157.224470][ T6735] hpfs: You really don't want any checks? You are crazy... [ 157.231732][ T6735] hpfs: Code page index out of array [ 157.264929][ T6735] hpfs: code page support is disabled [ 157.287706][ T6735] hpfs: hpfs_map_4sectors(): unaligned read [ 157.293777][ T6735] hpfs: hpfs_map_4sectors(): unaligned read [ 157.324547][ T6735] hpfs: filesystem error: unable to find root dir [ 163.249693][ T1764] IPVS: starting estimator thread 0... [ 163.645695][ T6769] loop3: detected capacity change from 0 to 736 [ 163.806105][ T6767] IPVS: using max 21 ests per chain, 50400 per kthread [ 164.089623][ T6774] loop2: detected capacity change from 0 to 128 [ 165.439959][ T6774] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 165.473972][ T6774] hpfs: filesystem error: improperly stopped [ 165.504604][ T6774] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 165.512437][ T6774] hpfs: You really don't want any checks? You are crazy... [ 165.544085][ T6774] hpfs: Code page index out of array [ 165.552018][ T6774] hpfs: code page support is disabled [ 165.586509][ T6774] hpfs: hpfs_map_4sectors(): unaligned read [ 165.757507][ T6774] hpfs: hpfs_map_4sectors(): unaligned read [ 165.776998][ T6774] hpfs: filesystem error: unable to find root dir [ 165.823056][ T6790] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 167.838919][ T6813] loop0: detected capacity change from 0 to 736 [ 169.854932][ T6841] loop1: detected capacity change from 0 to 128 [ 169.870736][ T6841] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 169.888985][ T6841] hpfs: filesystem error: improperly stopped [ 169.911032][ T6841] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 169.919444][ T6841] hpfs: You really don't want any checks? You are crazy... [ 169.927313][ T6841] hpfs: Code page index out of array [ 169.932633][ T6841] hpfs: code page support is disabled [ 169.939819][ T6841] hpfs: hpfs_map_4sectors(): unaligned read [ 169.944726][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 169.951051][ T6841] hpfs: hpfs_map_4sectors(): unaligned read [ 169.959366][ T6841] hpfs: filesystem error: unable to find root dir [ 169.969006][ T6843] netlink: 'syz.2.278': attribute type 1 has an invalid length. [ 170.093959][ T6843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.142529][ T6845] vlan2: entered allmulticast mode [ 170.144377][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 170.163087][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 170.176596][ T9] usb 4-1: config 0 has no interface number 0 [ 170.182836][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 170.193347][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 170.203804][ T6845] bond1: entered allmulticast mode [ 170.230791][ T6843] bond1: (slave geneve2): making interface the new active one [ 170.239066][ T6843] geneve2: entered allmulticast mode [ 170.253885][ T6843] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 170.421751][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 170.431090][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.439204][ T9] usb 4-1: Product: syz [ 170.444146][ T9] usb 4-1: Manufacturer: syz [ 170.448791][ T9] usb 4-1: SerialNumber: syz [ 170.457664][ T9] usb 4-1: config 0 descriptor?? [ 170.463482][ T6839] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.473822][ T6839] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.075935][ T6853] loop2: detected capacity change from 0 to 736 [ 171.185766][ T6839] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.193067][ T6839] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.418899][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 171.709566][ T6839] process 'syz.3.276' launched './file0' with NULL argv: empty string added [ 171.743671][ T1764] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 171.830617][ T6839] input: syz1 as /devices/virtual/input/input12 [ 171.867562][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 171.878315][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 171.890891][ T9] asix: probe of 4-1:0.34 failed with error -61 [ 171.938925][ T1764] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 171.952557][ T1764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.965222][ T1764] usb 3-1: Product: syz [ 171.969488][ T1764] usb 3-1: Manufacturer: syz [ 171.974822][ T1764] usb 3-1: SerialNumber: syz [ 171.992128][ T1764] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 172.016182][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 172.468557][ T1764] usb 3-1: USB disconnect, device number 4 [ 173.054285][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 173.061411][ T9] ath9k_htc: Failed to initialize the device [ 173.094557][ T1764] usb 3-1: ath9k_htc: USB layer deinitialized [ 173.232717][ T23] usb 4-1: USB disconnect, device number 4 [ 173.337332][ T6880] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 174.070349][ T6893] loop2: detected capacity change from 0 to 736 [ 174.101862][ T6895] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 174.101862][ T6895] The task syz.3.289 (6895) triggered the difference, watch for misbehavior. [ 174.267609][ T6855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.389830][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 174.485830][ T6903] tmpfs: Bad value for 'mpol' [ 174.643246][ T6909] Bluetooth: hci0: service_discovery: too big uuid_count value 32772 [ 176.128766][ T6921] loop3: detected capacity change from 0 to 736 [ 176.185304][ T5786] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.393553][ T5814] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 177.586401][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.627194][ T5814] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 177.651739][ T5814] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 177.677529][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.709315][ T5814] usb 4-1: config 0 descriptor?? [ 177.743660][ T5814] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 177.757179][ T5814] dvb-usb: bulk message failed: -22 (3/0) [ 177.781225][ T5814] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 177.798997][ T5814] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 177.818349][ T5814] usb 4-1: media controller created [ 177.835145][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.891919][ T5814] dvb-usb: bulk message failed: -22 (6/0) [ 177.919359][ T5814] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 177.961136][ T5814] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 178.021339][ T5814] dvb-usb: schedule remote query interval to 150 msecs. [ 178.055847][ T5814] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 178.070421][ T28] audit: type=1326 audit(1781176158.543:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.2.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 178.115763][ T28] audit: type=1326 audit(1781176158.583:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.2.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 178.139639][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.179730][ T28] audit: type=1326 audit(1781176158.583:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.2.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 178.203595][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.231411][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 178.238548][ T5814] dvb-usb: error while querying for an remote control event. [ 178.263436][ T28] audit: type=1326 audit(1781176158.583:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.2.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 178.287288][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.296149][ T28] audit: type=1326 audit(1781176158.583:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.2.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3b40d9ce59 code=0x7ffc0000 [ 178.319977][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.385342][ T28] audit: type=1326 audit(1781176158.653:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.2.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b40d5d68e code=0x7ffc0000 [ 178.413649][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 178.421064][ T5814] dvb-usb: error while querying for an remote control event. [ 178.473411][ T28] audit: type=1326 audit(1781176158.693:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.2.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b40d5d68e code=0x7ffc0000 [ 178.526684][ T28] audit: type=1326 audit(1781176158.703:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.2.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b40d5d68e code=0x7ffc0000 [ 178.553458][ T28] audit: type=1326 audit(1781176158.713:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.2.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b40d5d68e code=0x7ffc0000 [ 178.583454][ T28] audit: type=1326 audit(1781176158.713:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.2.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b40d5d68e code=0x7ffc0000 [ 178.607264][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.623424][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 178.640636][ T5814] dvb-usb: error while querying for an remote control event. [ 178.930702][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 178.945273][ T5814] dvb-usb: error while querying for an remote control event. [ 179.463260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 179.513324][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 179.519117][ T5814] dvb-usb: error while querying for an remote control event. [ 179.693540][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 179.699337][ T5814] dvb-usb: error while querying for an remote control event. [ 179.780601][ T6963] loop2: detected capacity change from 0 to 736 [ 179.916967][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 179.932999][ T5814] dvb-usb: error while querying for an remote control event. [ 180.040980][ T6937] loop3: detected capacity change from 0 to 32768 [ 180.054261][ T6937] gfs2: Unknown parameter '' [ 180.072545][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 181.554410][ T5811] usb 4-1: USB disconnect, device number 5 [ 181.893013][ C0] sched: RT throttling activated [ 181.893115][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 181.912079][ T5814] dvb-usb: error while querying for an remote control event. [ 182.378853][ T6974] pimreg: entered allmulticast mode [ 182.451869][ T6974] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 182.463662][ T6974] Cannot find add_set index 0 as target [ 182.932832][ T5811] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 187.143385][ T5811] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 187.421061][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.431334][ T5811] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 187.444838][ T5811] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 187.459740][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.501789][ T5811] usb 2-1: config 0 descriptor?? [ 187.583444][ T5811] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 187.590771][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 187.639110][ T5811] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 187.655541][ T5811] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 187.686999][ T5811] usb 2-1: media controller created [ 187.713562][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.737117][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 187.743064][ T5811] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 187.798486][ T5811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 187.847561][ T5811] dvb-usb: schedule remote query interval to 150 msecs. [ 187.867824][ T5811] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 188.023101][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 188.053151][ T5811] dvb-usb: error while querying for an remote control event. [ 188.125331][ T7013] loop9: detected capacity change from 0 to 4096 [ 188.182134][ C0] I/O error, dev loop9, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.193410][ C0] I/O error, dev loop9, sector 3968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.203169][ C0] Buffer I/O error on dev loop9, logical block 496, async page read [ 188.262775][ T1846] dvb-usb: bulk message failed: -22 (1/0) [ 188.283541][ T1846] dvb-usb: error while querying for an remote control event. [ 188.482814][ T1846] dvb-usb: bulk message failed: -22 (1/0) [ 188.490322][ T1846] dvb-usb: error while querying for an remote control event. [ 188.663587][ T1846] dvb-usb: bulk message failed: -22 (1/0) [ 188.705380][ T1846] dvb-usb: error while querying for an remote control event. [ 189.165800][ T1846] dvb-usb: bulk message failed: -22 (1/0) [ 189.172107][ T1846] dvb-usb: error while querying for an remote control event. [ 189.455826][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 189.461614][ T27] dvb-usb: error while querying for an remote control event. [ 189.650820][ T6999] loop1: detected capacity change from 0 to 32768 [ 189.683770][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 189.689983][ T27] dvb-usb: error while querying for an remote control event. [ 189.697613][ T6999] gfs2: Unknown parameter '' [ 189.765517][ T5766] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.893623][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 189.919697][ T27] dvb-usb: error while querying for an remote control event. [ 190.122750][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 190.379874][ T5811] dvb-usb: error while querying for an remote control event. [ 190.542756][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 190.548675][ T27] dvb-usb: error while querying for an remote control event. [ 190.770359][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 190.796696][ T5811] dvb-usb: error while querying for an remote control event. [ 190.812969][ T27] usb 2-1: USB disconnect, device number 4 [ 190.947455][ T7040] loop1: detected capacity change from 0 to 736 [ 191.078963][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 191.593749][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.603103][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.574413][ T7061] loop1: detected capacity change from 0 to 128 [ 192.599204][ T7061] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 192.627934][ T7061] hpfs: filesystem error: improperly stopped [ 192.641471][ T7061] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 192.652018][ T7061] hpfs: You really don't want any checks? You are crazy... [ 192.662333][ T7061] hpfs: Code page index out of array [ 192.670456][ T7061] hpfs: code page support is disabled [ 192.680576][ T7061] hpfs: hpfs_map_4sectors(): unaligned read [ 192.689037][ T7061] hpfs: hpfs_map_4sectors(): unaligned read [ 192.697726][ T7061] hpfs: filesystem error: unable to find root dir [ 193.829325][ T7074] loop1: detected capacity change from 0 to 736 [ 194.104274][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.110955][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.124536][ T7024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.335066][ T7024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.594400][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 196.600553][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 196.606627][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 197.637460][ T7099] loop1: detected capacity change from 0 to 128 [ 197.661631][ T7099] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 197.691741][ T7099] hpfs: filesystem error: improperly stopped [ 197.712268][ T7099] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 197.735838][ T7099] hpfs: You really don't want any checks? You are crazy... [ 197.761091][ T7099] hpfs: Code page index out of array [ 197.802895][ T7099] hpfs: code page support is disabled [ 197.808472][ T7099] hpfs: hpfs_map_4sectors(): unaligned read [ 197.826119][ T7099] hpfs: hpfs_map_4sectors(): unaligned read [ 197.832057][ T7099] hpfs: filesystem error: unable to find root dir [ 197.883154][ T7105] loop0: detected capacity change from 0 to 736 [ 199.772978][ T7024] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.781974][ T7024] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.795363][ T7024] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.804522][ T7024] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.371639][ T7145] Bluetooth: MGMT ver 1.22 [ 205.061820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 205.816575][ T7160] loop1: detected capacity change from 0 to 32768 [ 205.936975][ T7160] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 206.223310][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 206.223325][ T28] audit: type=1800 audit(1781176186.705:130): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.370" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 206.466860][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 214.894250][ T8] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 214.914199][ T8] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 214.941831][ T8] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 214.949272][ T8] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 214.976572][ T8] hid-generic 0006:0008:0001.0001: item fetching failed at offset 8/17 [ 214.992983][ T8] hid-generic: probe of 0006:0008:0001.0001 failed with error -22 [ 215.775029][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.405'. [ 216.181329][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 216.378077][ T7291] IPVS: set_ctl: invalid protocol: 22 172.30.1.2:20003 [ 216.384397][ T23] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 216.427102][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.450161][ T23] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 216.459744][ T23] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 216.471282][ T23] usb 4-1: Manufacturer: syz [ 216.523657][ T23] usb 4-1: config 0 descriptor?? [ 217.135058][ T23] rc_core: IR keymap rc-hauppauge not found [ 217.142543][ T23] Registered IR keymap rc-empty [ 217.150381][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 217.162902][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 217.176636][ T23] ------------[ cut here ]------------ [ 217.182209][ T23] usb 4-1: BOGUS control dir, pipe 80000680 doesn't match bRequestType 10 [ 217.191600][ T23] WARNING: CPU: 1 PID: 23 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10ac/0x17d0 [ 217.201200][ T23] Modules linked in: [ 217.205153][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 217.212545][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 217.222775][ T23] Workqueue: usb_hub_wq hub_event [ 217.227863][ T23] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 217.233603][ T23] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 217.253967][ T23] RSP: 0018:ffffc900001d6e00 EFLAGS: 00010246 [ 217.260047][ T23] RAX: 01f542aea7596700 RBX: ffff8880264cf000 RCX: 0000000000100000 [ 217.268333][ T23] RDX: ffffc90017d21000 RSI: 0000000000063fff RDI: 0000000000064000 [ 217.276397][ T23] RBP: 1ffff11005f0b748 R08: ffffc900001d6a07 R09: 1ffff9200003ad40 [ 217.284451][ T23] R10: dffffc0000000000 R11: fffff5200003ad41 R12: dffffc0000000000 [ 217.292707][ T23] R13: ffff88802f85ba40 R14: 0000000080000680 R15: ffff888077009fa0 [ 217.300723][ T23] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 217.309725][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.316682][ T23] CR2: 00007f2355d9fd58 CR3: 000000002e670000 CR4: 00000000003506e0 [ 217.324727][ T23] Call Trace: [ 217.328073][ T23] [ 217.331098][ T23] igorplugusb_probe+0x812/0xc60 [ 217.336087][ T23] usb_probe_interface+0x5c9/0xb20 [ 217.341354][ T23] ? usb_register_driver+0x3d0/0x3d0 [ 217.346661][ T23] really_probe+0x25b/0xb20 [ 217.351950][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 217.357206][ T23] __driver_probe_device+0x1ef/0x390 [ 217.362703][ T23] driver_probe_device+0x4f/0x420 [ 217.367779][ T23] __device_attach_driver+0x2ca/0x510 [ 217.373302][ T23] bus_for_each_drv+0x252/0x2e0 [ 217.378205][ T23] ? coredump_store+0x90/0x90 [ 217.382956][ T23] ? bus_find_device+0x300/0x300 [ 217.387938][ T23] __device_attach+0x2c2/0x420 [ 217.392802][ T23] ? device_attach+0x20/0x20 [ 217.397455][ T23] bus_probe_device+0x180/0x260 [ 217.402396][ T23] device_add+0x88e/0xc50 [ 217.406797][ T23] usb_set_configuration+0x1a79/0x20c0 [ 217.412386][ T23] usb_generic_driver_probe+0x8d/0x150 [ 217.417934][ T23] usb_probe_device+0x13d/0x270 [ 217.422873][ T23] ? usb_register_device_driver+0x230/0x230 [ 217.428821][ T23] really_probe+0x25b/0xb20 [ 217.433525][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 217.438784][ T23] __driver_probe_device+0x1ef/0x390 [ 217.444169][ T23] driver_probe_device+0x4f/0x420 [ 217.449266][ T23] __device_attach_driver+0x2ca/0x510 [ 217.455538][ T23] bus_for_each_drv+0x252/0x2e0 [ 217.460666][ T23] ? coredump_store+0x90/0x90 [ 217.465533][ T23] ? bus_find_device+0x300/0x300 [ 217.470610][ T23] __device_attach+0x2c2/0x420 [ 217.475529][ T23] ? device_attach+0x20/0x20 [ 217.480189][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 217.485487][ T23] bus_probe_device+0x180/0x260 [ 217.490399][ T23] device_add+0x88e/0xc50 [ 217.494913][ T23] usb_new_device+0xa3c/0x1660 [ 217.499769][ T23] ? usb_disconnect+0x8a0/0x8a0 [ 217.504743][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.510009][ T23] ? lockdep_hardirqs_on+0x98/0x150 [ 217.515348][ T23] hub_event+0x29bf/0x49f0 [ 217.519892][ T23] ? hub_post_resume+0x120/0x120 [ 217.524948][ T23] ? read_lock_is_recursive+0x20/0x20 [ 217.530397][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.535721][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 217.541535][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 217.547313][ T23] process_scheduled_works+0xa5d/0x15d0 [ 217.553026][ T23] ? worker_attach_to_pool+0x380/0x380 [ 217.559287][ T23] ? assign_work+0x3d2/0x5d0 [ 217.564130][ T23] worker_thread+0xa55/0xfc0 [ 217.568847][ T23] kthread+0x2fa/0x390 [ 217.573037][ T23] ? pr_cont_work+0x560/0x560 [ 217.577776][ T23] ? kthread_blkcg+0xd0/0xd0 [ 217.582468][ T23] ret_from_fork+0x48/0x80 [ 217.586945][ T23] ? kthread_blkcg+0xd0/0xd0 [ 217.591657][ T23] ret_from_fork_asm+0x11/0x20 [ 217.596515][ T23] [ 217.599607][ T23] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.606944][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 217.614258][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 217.624359][ T23] Workqueue: usb_hub_wq hub_event [ 217.629452][ T23] Call Trace: [ 217.632776][ T23] [ 217.635738][ T23] dump_stack_lvl+0x18c/0x250 [ 217.640462][ T23] ? show_regs_print_info+0x20/0x20 [ 217.645704][ T23] ? load_image+0x420/0x420 [ 217.650257][ T23] panic+0x2dc/0x730 [ 217.654223][ T23] ? bpf_jit_dump+0xd0/0xd0 [ 217.658786][ T23] ? ret_from_fork_asm+0x11/0x20 [ 217.663754][ T23] __warn+0x2e0/0x470 [ 217.667754][ T23] ? usb_submit_urb+0x10ac/0x17d0 [ 217.672801][ T23] ? usb_submit_urb+0x10ac/0x17d0 [ 217.677842][ T23] report_bug+0x2be/0x4f0 [ 217.682185][ T23] ? usb_submit_urb+0x10ac/0x17d0 [ 217.687224][ T23] ? usb_submit_urb+0x10ac/0x17d0 [ 217.692272][ T23] ? usb_submit_urb+0x10ae/0x17d0 [ 217.697343][ T23] handle_bug+0xcf/0x120 [ 217.701613][ T23] exc_invalid_op+0x1a/0x50 [ 217.706156][ T23] asm_exc_invalid_op+0x1a/0x20 [ 217.711032][ T23] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 217.716684][ T23] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 217.736390][ T23] RSP: 0018:ffffc900001d6e00 EFLAGS: 00010246 [ 217.742475][ T23] RAX: 01f542aea7596700 RBX: ffff8880264cf000 RCX: 0000000000100000 [ 217.750460][ T23] RDX: ffffc90017d21000 RSI: 0000000000063fff RDI: 0000000000064000 [ 217.758439][ T23] RBP: 1ffff11005f0b748 R08: ffffc900001d6a07 R09: 1ffff9200003ad40 [ 217.766440][ T23] R10: dffffc0000000000 R11: fffff5200003ad41 R12: dffffc0000000000 [ 217.774553][ T23] R13: ffff88802f85ba40 R14: 0000000080000680 R15: ffff888077009fa0 [ 217.782558][ T23] igorplugusb_probe+0x812/0xc60 [ 217.787518][ T23] usb_probe_interface+0x5c9/0xb20 [ 217.792666][ T23] ? usb_register_driver+0x3d0/0x3d0 [ 217.797966][ T23] really_probe+0x25b/0xb20 [ 217.802493][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 217.807708][ T23] __driver_probe_device+0x1ef/0x390 [ 217.813009][ T23] driver_probe_device+0x4f/0x420 [ 217.818051][ T23] __device_attach_driver+0x2ca/0x510 [ 217.823441][ T23] bus_for_each_drv+0x252/0x2e0 [ 217.828304][ T23] ? coredump_store+0x90/0x90 [ 217.833004][ T23] ? bus_find_device+0x300/0x300 [ 217.837964][ T23] __device_attach+0x2c2/0x420 [ 217.842752][ T23] ? device_attach+0x20/0x20 [ 217.847362][ T23] bus_probe_device+0x180/0x260 [ 217.852231][ T23] device_add+0x88e/0xc50 [ 217.856676][ T23] usb_set_configuration+0x1a79/0x20c0 [ 217.862193][ T23] usb_generic_driver_probe+0x8d/0x150 [ 217.867686][ T23] usb_probe_device+0x13d/0x270 [ 217.872558][ T23] ? usb_register_device_driver+0x230/0x230 [ 217.878465][ T23] really_probe+0x25b/0xb20 [ 217.882992][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 217.888223][ T23] __driver_probe_device+0x1ef/0x390 [ 217.893527][ T23] driver_probe_device+0x4f/0x420 [ 217.898576][ T23] __device_attach_driver+0x2ca/0x510 [ 217.903975][ T23] bus_for_each_drv+0x252/0x2e0 [ 217.908840][ T23] ? coredump_store+0x90/0x90 [ 217.913528][ T23] ? bus_find_device+0x300/0x300 [ 217.918486][ T23] __device_attach+0x2c2/0x420 [ 217.923269][ T23] ? device_attach+0x20/0x20 [ 217.927887][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 217.933109][ T23] bus_probe_device+0x180/0x260 [ 217.937973][ T23] device_add+0x88e/0xc50 [ 217.942328][ T23] usb_new_device+0xa3c/0x1660 [ 217.947117][ T23] ? usb_disconnect+0x8a0/0x8a0 [ 217.951993][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.957215][ T23] ? lockdep_hardirqs_on+0x98/0x150 [ 217.962449][ T23] hub_event+0x29bf/0x49f0 [ 217.966957][ T23] ? hub_post_resume+0x120/0x120 [ 217.971933][ T23] ? read_lock_is_recursive+0x20/0x20 [ 217.977338][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.982568][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 217.988317][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 217.994063][ T23] process_scheduled_works+0xa5d/0x15d0 [ 217.999651][ T23] ? worker_attach_to_pool+0x380/0x380 [ 218.005146][ T23] ? assign_work+0x3d2/0x5d0 [ 218.009766][ T23] worker_thread+0xa55/0xfc0 [ 218.014394][ T23] kthread+0x2fa/0x390 [ 218.018473][ T23] ? pr_cont_work+0x560/0x560 [ 218.023168][ T23] ? kthread_blkcg+0xd0/0xd0 [ 218.027859][ T23] ret_from_fork+0x48/0x80 [ 218.032301][ T23] ? kthread_blkcg+0xd0/0xd0 [ 218.036912][ T23] ret_from_fork_asm+0x11/0x20 [ 218.041706][ T23] [ 218.045296][ T23] Kernel Offset: disabled [ 218.049696][ T23] Rebooting in 86400 seconds..