last executing test programs: 12.805826351s ago: executing program 1 (id=499): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) pipe(&(0x7f0000000380)) io_getevents(0x0, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x1, &(0x7f0000000780)="e0"}], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7.886375144s ago: executing program 1 (id=514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x2, @value=0x67}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8000008}, 0x0, {}, 0x67, 0x2, 0x2}) 7.532364297s ago: executing program 2 (id=516): ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000001c0)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x7f, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 7.418059498s ago: executing program 1 (id=519): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x1f, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x5}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0x1, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x80a0000, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x9}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0xddf8ffdb, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.796578892s ago: executing program 1 (id=530): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) pipe(&(0x7f0000000380)) io_getevents(0x0, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x1, &(0x7f0000000780)="e0"}], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x18, &(0x7f0000000480)={0x20, 0xf, 0x7}, 0x0, 0x0, 0x0, 0x0}) 6.661824193s ago: executing program 2 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000d80)="e0274239ed0d85df9774992f86dd", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r2 = dup(r1) ftruncate(r2, 0x3f3ffc) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8e408, 0x0, 0x0, 0x0, &(0x7f0000000140)) 6.218008336s ago: executing program 3 (id=522): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000600)) 6.026698027s ago: executing program 0 (id=523): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x18}}, 0x4001) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe1b, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 5.565988361s ago: executing program 3 (id=524): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1a18001, &(0x7f0000000640)={[{@gid}, {@type={'type', 0x3d, "5ed07ee6"}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@codepage={'codepage', 0x3d, 'koi8-u'}}]}, 0x2, 0x342, &(0x7f0000000100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000004180)=""/4105, 0x1009) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) recvmmsg(r1, &(0x7f0000009bc0), 0x1, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) socket(0x2, 0x80805, 0x0) 5.343162013s ago: executing program 0 (id=525): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0xb15}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x90) fsetxattr$security_capability(r2, &(0x7f0000000200), 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) listen(r0, 0x9) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r4, 0x5411, 0x0) 4.541799878s ago: executing program 3 (id=526): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0xabd, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 4.541568308s ago: executing program 4 (id=527): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="27030200590214000600002f", 0xc}, {&(0x7f0000000600)="d08a", 0x2}], 0x2}, 0x40084) 4.305680409s ago: executing program 2 (id=528): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 3.471107115s ago: executing program 4 (id=529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x2, @value=0x67}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8000008}, 0x0, {}, 0x67, 0x2, 0x2}) 3.264901947s ago: executing program 0 (id=531): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[]) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) 3.236715347s ago: executing program 3 (id=532): ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000001c0)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x7f, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 2.989947639s ago: executing program 4 (id=533): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2.641066271s ago: executing program 0 (id=534): ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000001c0)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x7f, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 2.624228031s ago: executing program 2 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x9, 0x80000) r3 = eventfd2(0x3, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x7, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000480)={{0x1000, 0xf000, 0x0, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x0, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x9, 0xf, 0x5, 0xee, 0x81}, {0x8000000, 0x0, 0x4, 0x8, 0xf0, 0x1, 0x8c, 0x6, 0x7, 0x99, 0x1, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0xfc, 0x5, 0x1, 0x7, 0x5, 0x2}, {0x10000, 0x80a0000, 0xa, 0xba, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0x9, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0x8}, {0xe6ef8000, 0x0, 0x0, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x5, 0x6, 0x7}, {0x10000, 0x8080000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x80a0000, 0x210002, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x0, 0xa]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x4, 0x42, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.565661352s ago: executing program 4 (id=536): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x1f, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x5}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0x1, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x80a0000, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x9}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0xddf8ffdb, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.368480823s ago: executing program 1 (id=537): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0xb15}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x90) fsetxattr$security_capability(r2, &(0x7f0000000200), 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) listen(r0, 0x9) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r3, 0x5411, 0x0) 2.185455534s ago: executing program 3 (id=538): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1a18001, &(0x7f0000000640)={[{@gid}, {@type={'type', 0x3d, "5ed07ee6"}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@codepage={'codepage', 0x3d, 'koi8-u'}}]}, 0x2, 0x342, &(0x7f0000000100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000004180)=""/4105, 0x1009) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x4) recvmmsg(r1, &(0x7f0000009bc0), 0x1, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) socket(0x2, 0x80805, 0x0) 1.989127746s ago: executing program 4 (id=539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.988484346s ago: executing program 2 (id=540): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) 1.606671918s ago: executing program 2 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000d80)="e0274239ed0d85df9774992f86dd", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) dup(r1) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x4, 0x2, 0x7}}, 0xa) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8e408, 0x0, 0x0, 0x0, &(0x7f0000000140)) 1.157540292s ago: executing program 3 (id=542): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0xb15}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x90) fsetxattr$security_capability(r2, &(0x7f0000000200), 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) listen(r0, 0x9) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r4, 0x5411, 0x0) 624.452455ms ago: executing program 0 (id=543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x2, @value=0x67}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8000008}, 0x0, {}, 0x67, 0x2, 0x2}) 441.478127ms ago: executing program 4 (id=544): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="27030200590214000600002f", 0xc}, {&(0x7f0000000600)="d08a", 0x2}], 0x2}, 0x40084) 124.217919ms ago: executing program 0 (id=545): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x10, 0x5, 0x7ba, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1000, 0x1, 0x1, 0x3, 0x103, 0x1000, 0x1a449, 0x9, 0x40000007, 0x89, 0xcaab, 0x0, 0x20001e58, 0xf, 0x8613, 0xfffffff8, 0x8, 0x19, 0x0, 0x1]}) 0s ago: executing program 1 (id=546): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Not using interface batadv_slave_0 (retrying later): interface not active [ 61.818866][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.826178][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.852224][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.886873][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.893934][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.921157][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.935566][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.942681][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.968645][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.024006][ T4265] device hsr_slave_0 entered promiscuous mode [ 62.031905][ T4265] device hsr_slave_1 entered promiscuous mode [ 62.038406][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.046248][ T4265] Cannot create hsr debugfs directory [ 62.091341][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 62.091350][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 62.091556][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 62.120835][ T4264] device hsr_slave_0 entered promiscuous mode [ 62.127395][ T4264] device hsr_slave_1 entered promiscuous mode [ 62.134343][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.142198][ T4264] Cannot create hsr debugfs directory [ 62.150643][ T4267] device hsr_slave_0 entered promiscuous mode [ 62.157350][ T4267] device hsr_slave_1 entered promiscuous mode [ 62.164352][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.171443][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 62.172094][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 62.184756][ T4267] Cannot create hsr debugfs directory [ 62.426005][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.448501][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.462856][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.472328][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.527124][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.545788][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.567197][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.583674][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.620834][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.652862][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.662066][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.690159][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.703812][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.740420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.749938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.775228][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.784475][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.793675][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.805810][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.824450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.833432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.843174][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.850409][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.873187][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.888553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.919288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.928727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.937594][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.944691][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.958195][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.988919][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.015136][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.025820][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.038855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.047689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.055496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.065185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.074143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.083886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.092585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.101598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.109881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.118412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.127744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.136917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.145421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.153331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.173271][ T4264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.185094][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.194013][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.203820][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.210954][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.218574][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.247893][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.260931][ T4264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.280408][ T4264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.290095][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.299431][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.308892][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.316064][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.324190][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.333570][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.364984][ T4264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.374604][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.389421][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.398076][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.410416][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.419405][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.429547][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.438554][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.446308][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.455004][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.467602][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.478926][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.490656][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.499504][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.519809][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.570945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.591865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.600427][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.607662][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.662484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.675968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.685909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.701664][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.708782][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.717651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.734725][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.749928][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.758641][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.779235][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.788341][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.802269][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.819713][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.840074][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.855193][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.867412][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.878485][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.887939][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.897336][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.906066][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.916323][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.925011][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.934058][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.967446][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.977619][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.003187][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.030891][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.038369][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.046565][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.061724][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.085047][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.113915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.124068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.133520][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.140648][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.148650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.157623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.166521][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.173623][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.181015][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 64.182354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.187021][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 64.195986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.201393][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 64.209661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.243884][ T4266] device veth0_vlan entered promiscuous mode [ 64.250882][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 64.251749][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 64.270192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.286108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.296317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.313073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.326339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.345787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.376798][ T4266] device veth1_vlan entered promiscuous mode [ 64.407396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.417328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.426326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.435207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.444254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.454085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.462773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.471415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.479924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.499360][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.508025][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.520095][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.543717][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.567374][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.576468][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.585534][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.594722][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.605521][ T4266] device veth0_macvtap entered promiscuous mode [ 64.622461][ T4266] device veth1_macvtap entered promiscuous mode [ 64.632879][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.641649][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.649566][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.665990][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.674164][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.692307][ T4269] device veth0_vlan entered promiscuous mode [ 64.704945][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.726598][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.735986][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.745513][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.754495][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.763541][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.776250][ T4269] device veth1_vlan entered promiscuous mode [ 64.786727][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.801354][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.809811][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.816936][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.827520][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.838264][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.866005][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.879706][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.889929][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.899337][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.908529][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.918910][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.926051][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.938550][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.957641][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.973558][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.984632][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.993583][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.020587][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.029583][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.039328][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.070108][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.079468][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.088693][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.096774][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.104744][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.113656][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.127942][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.137103][ T4269] device veth0_macvtap entered promiscuous mode [ 65.160827][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.169408][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.183566][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.196199][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.206862][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.218994][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.249518][ T4269] device veth1_macvtap entered promiscuous mode [ 65.265706][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.279786][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.298856][ T4265] device veth0_vlan entered promiscuous mode [ 65.316661][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.326227][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.340189][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.348935][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.366245][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.376775][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.384751][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.408955][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.420480][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.432544][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.443850][ T4265] device veth1_vlan entered promiscuous mode [ 65.463001][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.477054][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.490125][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.501637][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.517475][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.529035][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.566205][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.575405][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.586289][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.597727][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.607669][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.636912][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.645986][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.698555][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.736069][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.751520][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.765708][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.788600][ T4265] device veth0_macvtap entered promiscuous mode [ 65.802599][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.815119][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.846726][ T4265] device veth1_macvtap entered promiscuous mode [ 65.897259][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.900376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.916084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.921050][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.926115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.962111][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.972235][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.981318][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.992147][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.003151][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.017791][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.028477][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.046174][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.057165][ T4267] device veth0_vlan entered promiscuous mode [ 66.060970][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.073506][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.094343][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.103279][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.111559][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.120165][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.129401][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.143934][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.154945][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.165001][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.175960][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.186963][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.204767][ T4267] device veth1_vlan entered promiscuous mode [ 66.218702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.227157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.237124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.251693][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 66.253276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.257715][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 66.271320][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 66.279484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.303218][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.326152][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.331655][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 66.336210][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 66.347827][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.357822][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.386016][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.498858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.513375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.525845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.546784][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.547762][ T4267] device veth0_macvtap entered promiscuous mode [ 66.566886][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.578861][ T4267] device veth1_macvtap entered promiscuous mode [ 66.600253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.610150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.621072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.630274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.639815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.716174][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.727448][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.749510][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.767620][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.779732][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.792687][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.803452][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.815298][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.830730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.840803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.847509][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.926881][ T4387] Bluetooth: MGMT ver 1.22 [ 67.124432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.431520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.440532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 67.448879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 67.457220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 67.465557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 67.474342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 67.482679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 67.747202][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.777617][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.788490][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.807933][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.816778][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.828595][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.839221][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.849546][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.860715][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.870634][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.881676][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.893113][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.901961][ T4264] device veth0_vlan entered promiscuous mode [ 67.914170][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.923220][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.931300][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.939790][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.952599][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.954813][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.969515][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.969560][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.985992][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.994789][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.010005][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.023047][ T4264] device veth1_vlan entered promiscuous mode [ 68.147202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.165214][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.182564][ T4264] device veth0_macvtap entered promiscuous mode [ 68.198481][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.202626][ T4264] device veth1_macvtap entered promiscuous mode [ 68.211793][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.230173][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.238693][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.247059][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.266474][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.271156][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.274580][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.289884][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.302723][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.313217][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.323254][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.333792][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 68.340234][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.341412][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 68.351081][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.356825][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 68.373219][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.384808][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.394676][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.403481][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.411173][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 68.411952][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 68.424579][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.436268][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.447025][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.458408][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.468938][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.478764][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.489241][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.499249][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.509905][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.526422][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.535179][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.544368][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.556258][ T4264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.622631][ T4264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.641822][ T4264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.652144][ T4264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.822241][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.830258][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.849784][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.858972][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.871644][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.885665][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.214814][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.230612][ T2121] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.241281][ T4319] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.420791][ T4319] usb 2-1: Using ep0 maxpacket: 32 [ 71.430599][ T2121] usb 4-1: Using ep0 maxpacket: 8 [ 71.437668][ T4319] usb 2-1: config 0 has an invalid interface number: 241 but max is 0 [ 71.448731][ T2121] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 71.467857][ T2121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.476335][ T4319] usb 2-1: config 0 has no interface number 0 [ 71.483897][ T4319] usb 2-1: config 0 interface 241 has no altsetting 0 [ 71.493484][ T2121] usb 4-1: Product: syz [ 71.497273][ T4441] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.497646][ T2121] usb 4-1: Manufacturer: syz [ 71.519122][ T2121] usb 4-1: SerialNumber: syz [ 71.526570][ T4319] usb 2-1: New USB device found, idVendor=05ac, idProduct=3224, bcdDevice=f5.5f [ 71.548012][ T2121] usb 4-1: config 0 descriptor?? [ 71.553957][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.372683][ T2121] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 72.380404][ T4319] usb 2-1: Product: syz [ 72.385043][ T4319] usb 2-1: Manufacturer: syz [ 72.389698][ T4319] usb 2-1: SerialNumber: syz [ 72.397230][ T4319] usb 2-1: config 0 descriptor?? [ 72.619271][ T4319] ipheth 2-1:0.241: Unable to find alternate settings interface [ 72.644462][ T4319] usb 2-1: USB disconnect, device number 2 [ 73.677540][ T4461] loop0: detected capacity change from 0 to 8192 [ 73.723601][ T4461] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.826602][ T4461] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 73.897986][ T4461] REISERFS (device loop0): using ordered data mode [ 73.930699][ T4461] reiserfs: using flush barriers [ 73.958288][ T4461] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.975781][ T4461] REISERFS (device loop0): checking transaction log (loop0) [ 73.989800][ T4461] REISERFS (device loop0): Using r5 hash to sort names [ 74.661378][ T4461] REISERFS (device loop0): using 3.5.x disk format [ 74.669848][ T4461] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 75.186250][ T4461] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 75.243637][ T2121] gspca_sonixj: reg_w1 err -71 [ 75.248578][ T2121] sonixj: probe of 4-1:0.0 failed with error -71 [ 75.281616][ T2121] usb 4-1: USB disconnect, device number 2 [ 75.322342][ T4461] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 75.556436][ T4461] REISERFS (device loop0): Remounting filesystem read-only [ 75.699629][ T4461] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 76.343637][ T14] cfg80211: failed to load regulatory.db [ 76.680578][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.887262][ T7] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 76.914880][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.963160][ T7] usb 5-1: config 0 descriptor?? [ 77.030003][ T7] gspca_main: spca508-2.14.0 probing 8086:0110 [ 77.349713][ T7] gspca_spca508: reg_read err -32 [ 77.367948][ T7] gspca_spca508: reg_read err -32 [ 77.625657][ T7] gspca_spca508: reg_read err -71 [ 77.639206][ T7] gspca_spca508: reg_read err -71 [ 77.652974][ T4508] loop2: detected capacity change from 0 to 1024 [ 77.657720][ T7] gspca_spca508: reg write: error -71 [ 77.666475][ T4508] hfsplus: gid requires an argument [ 77.673795][ T4508] hfsplus: unable to parse mount options [ 77.761259][ T7] spca508: probe of 5-1:0.0 failed with error -71 [ 77.770007][ T7] usb 5-1: USB disconnect, device number 2 [ 79.455989][ T4532] loop0: detected capacity change from 0 to 512 [ 79.642107][ T4532] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 79.747697][ T4532] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 79.824570][ T4532] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.55: Failed to acquire dquot type 1 [ 79.908172][ T4532] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 79.969694][ T4532] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 79.989938][ T4542] 9pnet_fd: Insufficient options for proto=fd [ 80.001631][ T4533] loop1: detected capacity change from 0 to 8192 [ 80.025105][ T4532] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.55: Failed to acquire dquot type 1 [ 80.059025][ T4533] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.156470][ T4532] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.55: bg 0: block 248: padding at end of block bitmap is not set [ 80.188579][ T4533] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 80.237412][ T4533] REISERFS (device loop1): using ordered data mode [ 80.276940][ T4532] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 80.288883][ T4533] reiserfs: using flush barriers [ 80.326406][ T4533] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.355490][ T4532] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 80.397347][ T4532] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 80.418120][ T4533] REISERFS (device loop1): checking transaction log (loop1) [ 80.546487][ T4533] REISERFS (device loop1): Using r5 hash to sort names [ 80.570666][ T4533] REISERFS (device loop1): using 3.5.x disk format [ 80.615896][ T4532] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.55: Failed to acquire dquot type 1 [ 80.651967][ T4533] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 80.668389][ T4532] EXT4-fs (loop0): 1 orphan inode deleted [ 80.680931][ T4532] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 80.752057][ T4532] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.493029][ T4532] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 81.505425][ T4533] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 81.581156][ T4532] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 81.595764][ T4532] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.55: Failed to acquire dquot type 1 [ 81.618353][ T4533] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 81.642783][ T4532] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 81.664615][ T4532] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 81.675731][ T4532] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.55: Failed to acquire dquot type 1 [ 81.704585][ T4533] REISERFS (device loop1): Remounting filesystem read-only [ 81.737325][ T4533] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 81.737531][ T4558] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.55: Failed to acquire dquot type 1 [ 81.836597][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 84.289386][ T4581] Zero length message leads to an empty skb [ 85.793220][ T4591] 9pnet_fd: Insufficient options for proto=fd [ 85.908810][ T4595] loop2: detected capacity change from 0 to 64 [ 85.937308][ T4597] loop1: detected capacity change from 0 to 512 [ 85.994771][ T4594] loop3: detected capacity change from 0 to 8192 [ 86.049589][ T4597] __quota_error: 2 callbacks suppressed [ 86.049603][ T4597] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 86.065952][ T4594] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.080216][ T4597] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 86.091318][ T4597] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.76: Failed to acquire dquot type 1 [ 86.104447][ T4597] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 86.115223][ T4597] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 86.125255][ T4597] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.76: Failed to acquire dquot type 1 [ 86.200833][ T4594] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 86.240311][ T4594] REISERFS (device loop3): using ordered data mode [ 86.250764][ T4594] reiserfs: using flush barriers [ 86.301798][ T4597] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.76: bg 0: block 248: padding at end of block bitmap is not set [ 86.320865][ T4594] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.337459][ T4597] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 86.430866][ T2121] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.506618][ T4597] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 86.526968][ T4594] REISERFS (device loop3): checking transaction log (loop3) [ 86.697217][ T2121] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 86.968149][ T2121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.992876][ T2121] usb 1-1: config 0 descriptor?? [ 87.002554][ T4594] REISERFS (device loop3): Using r5 hash to sort names [ 87.009456][ T4594] REISERFS (device loop3): using 3.5.x disk format [ 87.018273][ T2121] cp210x 1-1:0.0: cp210x converter detected [ 87.050696][ T4597] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 87.058359][ T4594] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 87.073556][ T4597] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.76: Failed to acquire dquot type 1 [ 87.136084][ T4597] EXT4-fs (loop1): 1 orphan inode deleted [ 87.153505][ T4597] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.196823][ T4597] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.296964][ T4594] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 87.351178][ T4594] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 87.370281][ T4597] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 87.391719][ T4597] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 87.401302][ T4594] REISERFS (device loop3): Remounting filesystem read-only [ 87.430490][ T4594] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 87.692436][ T4597] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.76: Failed to acquire dquot type 1 [ 87.853227][ T4597] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 87.988767][ T4597] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 88.039834][ T4597] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.76: Failed to acquire dquot type 1 [ 88.096414][ T4618] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.76: Failed to acquire dquot type 1 [ 88.278043][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 88.346301][ T2121] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 88.607064][ T2121] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 88.618413][ T2121] usb 1-1: cp210x converter now attached to ttyUSB0 [ 88.643292][ T2121] usb 1-1: USB disconnect, device number 2 [ 89.722806][ T2121] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 89.769996][ T2121] cp210x 1-1:0.0: device disconnected [ 92.633292][ T4645] 9pnet_fd: Insufficient options for proto=fd [ 94.653632][ T4662] loop4: detected capacity change from 0 to 64 [ 96.653637][ T4681] loop0: detected capacity change from 0 to 64 [ 98.018939][ T4681] sched: RT throttling activated [ 98.772098][ T4691] loop3: detected capacity change from 0 to 8 [ 98.936377][ T4691] SQUASHFS error: Failed to read block 0x4e8: -5 [ 98.957406][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.166702][ T4695] loop1: detected capacity change from 0 to 32768 [ 99.181769][ T4695] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.97 (4695) [ 99.205355][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.213229][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.267024][ T4695] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.278532][ T4695] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 99.287612][ T4695] BTRFS info (device loop1): using free space tree [ 99.582821][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 99.582863][ T27] audit: type=1800 audit(1762276544.584:2): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.95" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 99.836341][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.843156][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.849597][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.856286][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.862689][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.869049][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.875410][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.881807][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.888156][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.895109][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.901488][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.907847][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.914261][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.920644][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.926976][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.933388][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.939723][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.946143][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.952502][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.958915][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.965297][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.971684][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.978045][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.984462][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.990861][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 99.997531][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 100.004505][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 100.011254][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 100.017604][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 100.024006][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 100.030351][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 100.036736][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 100.043098][ T4691] SQUASHFS error: Failed to read block 0x4de: -5 [ 100.084366][ T27] audit: type=1800 audit(1762276544.844:3): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.95" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 101.459491][ T4695] BTRFS info (device loop1): enabling ssd optimizations [ 101.517131][ T4733] 9pnet_fd: Insufficient options for proto=fd [ 103.128345][ T4741] 9pnet_fd: Insufficient options for proto=fd [ 103.337431][ T4266] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 105.512561][ T4765] loop1: detected capacity change from 0 to 64 [ 105.535717][ T4763] 9pnet_fd: Insufficient options for proto=fd [ 110.014845][ T4777] loop1: detected capacity change from 0 to 8192 [ 110.079607][ T4777] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.140691][ T4777] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 110.187692][ T4777] REISERFS (device loop1): using ordered data mode [ 110.254374][ T4777] reiserfs: using flush barriers [ 110.286651][ T4777] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.340957][ T4777] REISERFS (device loop1): checking transaction log (loop1) [ 110.405221][ T4769] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.435573][ T4777] REISERFS (device loop1): Using r5 hash to sort names [ 110.459675][ T4798] loop4: detected capacity change from 0 to 64 [ 110.534625][ T4777] REISERFS (device loop1): using 3.5.x disk format [ 110.569476][ T4777] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 110.681656][ T4769] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.576118][ T4769] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.585591][ T4769] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.646111][ T4769] device geneve2 entered promiscuous mode [ 111.681758][ T4794] loop0: detected capacity change from 0 to 40427 [ 111.729498][ T4794] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 111.794540][ T4794] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 111.877280][ T4794] F2FS-fs (loop0): invalid crc value [ 111.915868][ T4794] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.073620][ T4794] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 112.090709][ T4277] Bluetooth: hci4: command 0x0405 tx timeout [ 112.106072][ T4794] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.888567][ T4811] loop1: detected capacity change from 0 to 8192 [ 112.984253][ T4819] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 113.230030][ T4811] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.783132][ T4823] device syzkaller0 entered promiscuous mode [ 113.981397][ T4811] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 114.011310][ T4811] REISERFS (device loop1): using ordered data mode [ 114.017867][ T4811] reiserfs: using flush barriers [ 114.114267][ T4811] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.206125][ T4811] REISERFS (device loop1): checking transaction log (loop1) [ 114.230536][ T4811] REISERFS (device loop1): Using r5 hash to sort names [ 114.237442][ T4811] REISERFS (device loop1): using 3.5.x disk format [ 114.244382][ T4811] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 114.350006][ T4833] 9pnet_fd: Insufficient options for proto=fd [ 114.361219][ T4811] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 114.410592][ T4811] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 114.482200][ T4811] REISERFS (device loop1): Remounting filesystem read-only [ 114.494863][ T4811] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 116.471566][ T4845] 9pnet_fd: Insufficient options for proto=fd [ 117.075640][ T4852] loop3: detected capacity change from 0 to 64 [ 117.469172][ T4857] 9pnet_fd: Insufficient options for proto=fd [ 119.374030][ T4871] loop3: detected capacity change from 0 to 40427 [ 119.382282][ T4871] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 119.390062][ T4871] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.399990][ T4871] F2FS-fs (loop3): invalid crc value [ 119.545460][ T4875] 9pnet_fd: Insufficient options for proto=fd [ 119.563716][ T4871] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.235771][ T4868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 120.269254][ T4871] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 120.276939][ T4871] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.162371][ T4891] loop4: detected capacity change from 0 to 8 [ 121.233638][ T4893] 9pnet_fd: Insufficient options for proto=fd [ 121.291588][ T4891] SQUASHFS error: Failed to read block 0x4e8: -5 [ 121.330829][ T4891] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.340247][ T4891] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.373686][ T4891] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.405167][ T27] audit: type=1800 audit(1762276566.424:4): pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.140" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 121.455048][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.463268][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.469640][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.476012][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.482423][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.488775][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.495161][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.501835][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.508197][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.514571][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.521024][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.527417][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.533981][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.540321][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.546715][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.553655][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.560212][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.566635][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.573046][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.579409][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.585812][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.592206][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.598549][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.605337][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.611741][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.618118][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.624536][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.631623][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.637994][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.644492][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.650886][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.657244][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.663681][ T4896] SQUASHFS error: Failed to read block 0x4de: -5 [ 121.726328][ T27] audit: type=1800 audit(1762276566.454:5): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.140" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 123.413007][ T4904] loop4: detected capacity change from 0 to 8192 [ 123.425244][ T4911] loop3: detected capacity change from 0 to 64 [ 123.518063][ T4904] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.701073][ T4904] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 123.731241][ T4904] REISERFS (device loop4): using ordered data mode [ 123.739328][ T4904] reiserfs: using flush barriers [ 124.490391][ T4904] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.600686][ T4904] REISERFS (device loop4): checking transaction log (loop4) [ 124.660025][ T4904] REISERFS (device loop4): Using r5 hash to sort names [ 124.695304][ T4904] REISERFS (device loop4): using 3.5.x disk format [ 124.981737][ T4904] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 125.501851][ T4904] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 125.581673][ T4904] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 125.640610][ T4904] REISERFS (device loop4): Remounting filesystem read-only [ 125.647884][ T4904] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 126.381190][ T4939] loop2: detected capacity change from 0 to 64 [ 127.322540][ T4933] netlink: 64 bytes leftover after parsing attributes in process `syz.3.153'. [ 127.756080][ T4952] 9pnet_fd: Insufficient options for proto=fd [ 128.022811][ T4954] loop0: detected capacity change from 0 to 8 [ 128.912854][ T4954] SQUASHFS error: Failed to read block 0x4e8: -5 [ 129.310734][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.330311][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.337282][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.373682][ T27] audit: type=1800 audit(1762276574.394:6): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.159" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 129.425096][ T27] audit: type=1800 audit(1762276574.424:7): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.159" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 129.444981][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.453132][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.459503][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.465999][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.472462][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.478861][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.485332][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.492176][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.498530][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.504952][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.511320][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.517664][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.524075][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.530435][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.536838][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.543262][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.549598][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.556020][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.562472][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.568867][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.576110][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.582597][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.589754][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.596444][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.602882][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.609227][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.615619][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.622036][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.628386][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.634761][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.641151][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.647501][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 129.653884][ T4954] SQUASHFS error: Failed to read block 0x4de: -5 [ 130.762228][ T4973] loop2: detected capacity change from 0 to 64 [ 132.340536][ T4982] loop2: detected capacity change from 0 to 32768 [ 132.391996][ T4982] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.166 (4982) [ 132.412314][ T4982] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.422650][ T4982] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 132.431389][ T4982] BTRFS info (device loop2): using free space tree [ 132.653771][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.925270][ T4998] loop3: detected capacity change from 0 to 8192 [ 132.931956][ T4982] BTRFS info (device loop2): enabling ssd optimizations [ 133.021655][ T4998] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.115710][ T4998] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 133.154613][ T4998] REISERFS (device loop3): using ordered data mode [ 133.367528][ T4998] reiserfs: using flush barriers [ 133.524790][ T4998] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.621355][ T5018] 9pnet_fd: Insufficient options for proto=fd [ 133.649737][ T4998] REISERFS (device loop3): checking transaction log (loop3) [ 133.679960][ T4998] REISERFS (device loop3): Using r5 hash to sort names [ 133.721847][ T4998] REISERFS (device loop3): using 3.5.x disk format [ 133.752956][ T5020] loop0: detected capacity change from 0 to 64 [ 133.759649][ T4998] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 134.222006][ T4264] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.911954][ T5052] loop2: detected capacity change from 0 to 8 [ 137.671975][ T5052] SQUASHFS error: Failed to read block 0x4e8: -5 [ 137.699635][ T5052] SQUASHFS error: Failed to read block 0x4de: -5 [ 137.806039][ T5052] SQUASHFS error: Failed to read block 0x4de: -5 [ 137.895682][ T5052] SQUASHFS error: Failed to read block 0x4de: -5 [ 137.932839][ T27] audit: type=1800 audit(1762276582.954:8): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.175" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 138.023918][ T27] audit: type=1800 audit(1762276582.974:9): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.175" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 138.407600][ T5055] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.470830][ T4268] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.573318][ T5055] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.586188][ T5055] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.598403][ T5055] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.613965][ T5073] 9pnet_fd: Insufficient options for proto=fd [ 138.623085][ T5055] device geneve2 entered promiscuous mode [ 138.671655][ T4268] usb 3-1: Using ep0 maxpacket: 16 [ 138.689781][ T4268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 138.714747][ T4268] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 139.530391][ T4268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.538842][ T4268] usb 3-1: Product: syz [ 139.556058][ T4268] usb 3-1: Manufacturer: syz [ 139.562961][ T4268] usb 3-1: SerialNumber: syz [ 139.589387][ T4268] usb 3-1: config 0 descriptor?? [ 139.599137][ T4268] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 139.704934][ T4268] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 139.981513][ T5081] device syzkaller0 entered promiscuous mode [ 140.292260][ T4268] em28xx 3-1:0.0: chip ID is em2765 [ 140.407203][ T5086] loop4: detected capacity change from 0 to 64 [ 141.206345][ T4268] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 141.361032][ T4268] em28xx 3-1:0.0: board has no eeprom [ 141.531098][ T5091] loop3: detected capacity change from 0 to 8192 [ 141.611294][ T5069] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 141.713872][ T5094] loop4: detected capacity change from 0 to 32768 [ 141.744054][ T5094] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.190 (5094) [ 141.759902][ T5094] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.770177][ T5094] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 141.779508][ T5094] BTRFS info (device loop4): using free space tree [ 141.801810][ T5091] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 141.850593][ T4268] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 141.880898][ T5091] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 141.890286][ T5091] REISERFS (device loop3): using ordered data mode [ 141.890570][ T4268] em28xx 3-1:0.0: dvb set to bulk mode. [ 141.896934][ T5091] reiserfs: using flush barriers [ 141.931798][ T5091] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.941327][ T4268] em28xx 3-1:0.0: Binding DVB extension [ 141.981439][ T5091] REISERFS (device loop3): checking transaction log (loop3) [ 142.004056][ T5091] REISERFS (device loop3): Using r5 hash to sort names [ 142.020618][ T5091] REISERFS (device loop3): using 3.5.x disk format [ 142.029478][ T5091] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 142.171983][ T5094] BTRFS info (device loop4): enabling ssd optimizations [ 143.081495][ T7] usb 3-1: USB disconnect, device number 2 [ 143.089654][ T7] em28xx 3-1:0.0: Disconnecting em28xx [ 144.793053][ T4268] em28xx 3-1:0.0: Registering input extension [ 144.799759][ T7] em28xx 3-1:0.0: Closing input extension [ 144.859114][ T5143] 9pnet_fd: Insufficient options for proto=fd [ 144.900129][ T7] em28xx 3-1:0.0: Freeing device [ 144.937381][ T4267] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.401877][ T5158] loop4: detected capacity change from 0 to 8192 [ 146.421989][ T5158] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.450314][ T5158] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 146.469849][ T5158] REISERFS (device loop4): using ordered data mode [ 146.480845][ T5158] reiserfs: using flush barriers [ 146.491578][ T5158] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.546599][ T5158] REISERFS (device loop4): checking transaction log (loop4) [ 146.555407][ T5158] REISERFS (device loop4): Using r5 hash to sort names [ 146.562513][ T5158] REISERFS (device loop4): using 3.5.x disk format [ 146.569462][ T5158] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 149.541647][ T5190] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 149.800360][ T5196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 149.846754][ T5198] 9pnet_fd: Insufficient options for proto=fd [ 149.923516][ T5185] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.965375][ T5185] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.010602][ T5185] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.030989][ T5185] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.041854][ T5185] device geneve2 entered promiscuous mode [ 151.255717][ T5209] loop3: detected capacity change from 0 to 8192 [ 151.313430][ T5209] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 151.335620][ T5211] hub 1-0:1.0: USB hub found [ 151.368849][ T5211] hub 1-0:1.0: 1 port detected [ 151.379243][ T5209] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 151.428184][ T5209] REISERFS (device loop3): using ordered data mode [ 151.454541][ T5209] reiserfs: using flush barriers [ 151.473314][ T5209] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.527738][ T5209] REISERFS (device loop3): checking transaction log (loop3) [ 151.544200][ T5209] REISERFS (device loop3): Using r5 hash to sort names [ 151.557122][ T5209] REISERFS (device loop3): using 3.5.x disk format [ 151.565439][ T5209] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 151.632105][ T5209] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 152.151830][ T5209] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 152.701111][ T5209] REISERFS (device loop3): Remounting filesystem read-only [ 152.749037][ T5209] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 158.475956][ T5275] loop0: detected capacity change from 0 to 64 [ 159.477783][ T5276] loop4: detected capacity change from 0 to 8192 [ 159.557166][ T5276] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.635298][ T5276] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 159.681659][ T5276] REISERFS (device loop4): using ordered data mode [ 159.688867][ T5276] reiserfs: using flush barriers [ 159.705902][ T5276] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.736158][ T5276] REISERFS (device loop4): checking transaction log (loop4) [ 159.792119][ T5276] REISERFS (device loop4): Using r5 hash to sort names [ 159.810803][ T5276] REISERFS (device loop4): using 3.5.x disk format [ 159.830888][ T5276] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 159.891641][ T5276] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 159.917450][ T5276] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 159.933932][ T5276] REISERFS (device loop4): Remounting filesystem read-only [ 159.945373][ T5276] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 160.198706][ T5290] loop1: detected capacity change from 0 to 64 [ 160.233548][ T5295] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 162.916950][ T5308] loop0: detected capacity change from 0 to 8192 [ 163.006179][ T5308] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.020755][ T5308] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 163.056268][ T5308] REISERFS (device loop0): using ordered data mode [ 163.549427][ T5308] reiserfs: using flush barriers [ 163.577043][ T5308] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.680904][ T5308] REISERFS (device loop0): checking transaction log (loop0) [ 163.750996][ T5308] REISERFS (device loop0): Using r5 hash to sort names [ 164.090439][ T5308] REISERFS (device loop0): using 3.5.x disk format [ 164.341846][ T5308] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 164.412281][ T5308] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 164.430724][ T5308] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 164.457417][ T5308] REISERFS (device loop0): Remounting filesystem read-only [ 164.497138][ T5308] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 165.331855][ T5339] device syzkaller0 entered promiscuous mode [ 165.436307][ T5342] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.386246][ T5352] netlink: 64 bytes leftover after parsing attributes in process `syz.2.251'. [ 167.840636][ T4341] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.360548][ T4341] usb 2-1: Using ep0 maxpacket: 16 [ 168.379886][ T4341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 168.459106][ T4341] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 168.513660][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.572661][ T4341] usb 2-1: Product: syz [ 168.602885][ T4341] usb 2-1: Manufacturer: syz [ 168.629774][ T4341] usb 2-1: SerialNumber: syz [ 168.658035][ T4341] usb 2-1: config 0 descriptor?? [ 168.668170][ T5374] loop4: detected capacity change from 0 to 64 [ 168.710098][ T4341] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 168.877861][ T4341] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 170.381373][ T4341] em28xx 2-1:0.0: chip ID is em2765 [ 170.575145][ T5384] loop3: detected capacity change from 0 to 8192 [ 170.675161][ T5384] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.768101][ T5384] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 170.800794][ T5384] REISERFS (device loop3): using ordered data mode [ 170.807456][ T5384] reiserfs: using flush barriers [ 170.828153][ T5384] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.844882][ T5384] REISERFS (device loop3): checking transaction log (loop3) [ 170.854143][ T5384] REISERFS (device loop3): Using r5 hash to sort names [ 170.864567][ T5384] REISERFS (device loop3): using 3.5.x disk format [ 170.881199][ T5384] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 171.386733][ T4341] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 171.395743][ T4341] em28xx 2-1:0.0: board has no eeprom [ 171.404006][ T5392] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 171.420855][ T5392] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 171.436180][ T5392] REISERFS (device loop3): Remounting filesystem read-only [ 171.443772][ T5392] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 171.588253][ T5393] netlink: 'syz.1.256': attribute type 1 has an invalid length. [ 171.680597][ T4341] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 171.688536][ T4341] em28xx 2-1:0.0: dvb set to bulk mode. [ 171.817061][ T5395] loop0: detected capacity change from 0 to 64 [ 171.831163][ T4318] em28xx 2-1:0.0: Binding DVB extension [ 171.957111][ T5397] device syzkaller0 entered promiscuous mode [ 172.811667][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 173.918961][ T4268] usb 2-1: USB disconnect, device number 3 [ 173.941149][ T4268] em28xx 2-1:0.0: Disconnecting em28xx [ 174.155579][ T4318] em28xx 2-1:0.0: Registering input extension [ 174.517636][ T4268] em28xx 2-1:0.0: Closing input extension [ 174.780725][ T4268] em28xx 2-1:0.0: Freeing device [ 176.315116][ T5437] loop0: detected capacity change from 0 to 8192 [ 176.404256][ T5437] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.480198][ T5437] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 176.583174][ T5437] REISERFS (device loop0): using ordered data mode [ 176.620417][ T5437] reiserfs: using flush barriers [ 176.699819][ T5437] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.798485][ T5437] REISERFS (device loop0): checking transaction log (loop0) [ 176.879476][ T5437] REISERFS (device loop0): Using r5 hash to sort names [ 176.898175][ T5437] REISERFS (device loop0): using 3.5.x disk format [ 176.919318][ T5437] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 177.015089][ T5437] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 177.080683][ T5437] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 177.132311][ T5437] REISERFS (device loop0): Remounting filesystem read-only [ 177.139581][ T5437] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 177.256717][ T5449] loop2: detected capacity change from 0 to 64 [ 177.479370][ T5451] device syzkaller0 entered promiscuous mode [ 179.009918][ T5459] loop2: detected capacity change from 0 to 8192 [ 179.291994][ T5459] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 179.305428][ T5459] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 179.315276][ T5459] REISERFS (device loop2): using ordered data mode [ 179.322225][ T5459] reiserfs: using flush barriers [ 179.912423][ T5459] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.930945][ T5459] REISERFS (device loop2): checking transaction log (loop2) [ 180.067707][ T5459] REISERFS (device loop2): Using r5 hash to sort names [ 180.105807][ T5459] REISERFS (device loop2): using 3.5.x disk format [ 180.715231][ T5459] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 180.800659][ T5035] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 180.931769][ T5459] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 180.967610][ T5459] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 181.000180][ T5459] REISERFS (device loop2): Remounting filesystem read-only [ 181.020431][ T5459] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 181.050665][ T5035] usb 4-1: Using ep0 maxpacket: 16 [ 181.057968][ T5035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 181.119718][ T5035] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 181.155822][ T5035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.176304][ T5035] usb 4-1: Product: syz [ 181.187016][ T5035] usb 4-1: Manufacturer: syz [ 181.192832][ T5035] usb 4-1: SerialNumber: syz [ 181.215138][ T5035] usb 4-1: config 0 descriptor?? [ 181.233241][ T5035] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 181.259532][ T5035] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 181.845883][ T5035] em28xx 4-1:0.0: chip ID is em2765 [ 182.570291][ T5487] netlink: 64 bytes leftover after parsing attributes in process `syz.0.280'. [ 183.025068][ T5035] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 183.272003][ T5035] em28xx 4-1:0.0: board has no eeprom [ 183.341385][ T5503] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 183.505077][ T5506] loop1: detected capacity change from 0 to 64 [ 183.511463][ T5035] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 183.555809][ T5035] em28xx 4-1:0.0: dvb set to bulk mode. [ 183.675727][ T5037] em28xx 4-1:0.0: Binding DVB extension [ 184.734728][ T5035] usb 4-1: USB disconnect, device number 3 [ 184.802918][ T5035] em28xx 4-1:0.0: Disconnecting em28xx [ 185.790836][ T5037] em28xx 4-1:0.0: Registering input extension [ 185.799598][ T5035] em28xx 4-1:0.0: Closing input extension [ 185.831881][ T5035] em28xx 4-1:0.0: Freeing device [ 185.901161][ T5526] device syzkaller0 entered promiscuous mode [ 185.994201][ T5524] hub 1-0:1.0: USB hub found [ 186.023308][ T5524] hub 1-0:1.0: 1 port detected [ 186.410872][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 186.411714][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 186.424267][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 186.490581][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 188.387973][ T5541] loop3: detected capacity change from 0 to 8192 [ 188.413148][ T5541] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.440929][ T5541] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 188.540703][ T5541] REISERFS (device loop3): using ordered data mode [ 188.547249][ T5541] reiserfs: using flush barriers [ 188.570044][ T5557] loop1: detected capacity change from 0 to 64 [ 188.581798][ T5541] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.661166][ T5541] REISERFS (device loop3): checking transaction log (loop3) [ 188.771763][ T5541] REISERFS (device loop3): Using r5 hash to sort names [ 188.811905][ T5541] REISERFS (device loop3): using 3.5.x disk format [ 188.818731][ T5541] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 189.581736][ T5541] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 190.292826][ T5541] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 190.415048][ T5541] REISERFS (device loop3): Remounting filesystem read-only [ 190.450691][ T5541] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 191.870561][ T4268] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 191.882366][ T5573] device syzkaller0 entered promiscuous mode [ 192.070676][ T4268] usb 5-1: Using ep0 maxpacket: 16 [ 192.079287][ T4268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.246552][ T4268] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.272273][ T4268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.930556][ T4268] usb 5-1: Product: syz [ 192.934865][ T4268] usb 5-1: Manufacturer: syz [ 192.939474][ T4268] usb 5-1: SerialNumber: syz [ 192.945751][ T4268] usb 5-1: config 0 descriptor?? [ 192.956906][ T4268] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.007073][ T4268] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 193.973080][ T4268] em28xx 5-1:0.0: chip ID is em2765 [ 194.100765][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.588493][ T4268] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 194.596561][ T4268] em28xx 5-1:0.0: board has no eeprom [ 195.621981][ T5568] em28xx 5-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 195.690632][ T4268] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 195.698515][ T4268] em28xx 5-1:0.0: dvb set to bulk mode. [ 195.706537][ T4268] usb 5-1: USB disconnect, device number 3 [ 195.713294][ T4268] em28xx 5-1:0.0: Disconnecting em28xx [ 195.719376][ T4341] em28xx 5-1:0.0: Binding DVB extension [ 195.769598][ T4341] em28xx 5-1:0.0: Registering input extension [ 195.776592][ T4268] em28xx 5-1:0.0: Closing input extension [ 195.787712][ T4268] em28xx 5-1:0.0: Freeing device [ 196.162162][ T5604] loop2: detected capacity change from 0 to 64 [ 197.717540][ T5608] loop1: detected capacity change from 0 to 8192 [ 197.758985][ T5616] hub 1-0:1.0: USB hub found [ 197.764215][ T5623] netlink: 64 bytes leftover after parsing attributes in process `syz.4.313'. [ 197.785656][ T5608] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 197.814479][ T5616] hub 1-0:1.0: 1 port detected [ 197.830644][ T5608] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 197.839898][ T5608] REISERFS (device loop1): using ordered data mode [ 197.900215][ T5608] reiserfs: using flush barriers [ 197.976324][ T5608] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.040846][ T5608] REISERFS (device loop1): checking transaction log (loop1) [ 198.069549][ T5608] REISERFS (device loop1): Using r5 hash to sort names [ 198.094590][ T5608] REISERFS (device loop1): using 3.5.x disk format [ 198.115126][ T5608] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 198.241744][ T5608] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 198.280917][ T5608] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 198.345829][ T5608] REISERFS (device loop1): Remounting filesystem read-only [ 198.373625][ T5608] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 198.864799][ T5636] device syzkaller0 entered promiscuous mode [ 201.685809][ T5034] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 202.160597][ T5034] usb 2-1: Using ep0 maxpacket: 16 [ 202.401171][ T5034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 202.414751][ T5034] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 202.424156][ T5034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.432256][ T5034] usb 2-1: Product: syz [ 202.436531][ T5034] usb 2-1: Manufacturer: syz [ 202.441197][ T5034] usb 2-1: SerialNumber: syz [ 202.450926][ T5034] usb 2-1: config 0 descriptor?? [ 202.459801][ T5034] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 202.469513][ T5034] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 202.750402][ T5670] loop2: detected capacity change from 0 to 64 [ 203.076449][ T5034] em28xx 2-1:0.0: chip ID is em2765 [ 204.537581][ T5034] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 204.546591][ T5034] em28xx 2-1:0.0: board has no eeprom [ 205.621287][ T5651] em28xx 2-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 205.690722][ T5034] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 205.698803][ T5034] em28xx 2-1:0.0: dvb set to bulk mode. [ 205.770282][ T5038] em28xx 2-1:0.0: Binding DVB extension [ 205.940737][ T5034] usb 2-1: USB disconnect, device number 4 [ 206.234724][ T5696] device syzkaller0 entered promiscuous mode [ 206.494477][ T5034] em28xx 2-1:0.0: Disconnecting em28xx [ 206.630274][ T5038] em28xx 2-1:0.0: Registering input extension [ 206.637373][ T5034] em28xx 2-1:0.0: Closing input extension [ 206.647791][ T5034] em28xx 2-1:0.0: Freeing device [ 206.682154][ T5687] loop0: detected capacity change from 0 to 8192 [ 206.768511][ T5687] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 206.811477][ T5687] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 206.821172][ T5687] REISERFS (device loop0): using ordered data mode [ 206.827716][ T5687] reiserfs: using flush barriers [ 206.870617][ T5687] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.947451][ T5687] REISERFS (device loop0): checking transaction log (loop0) [ 207.073095][ T5687] REISERFS (device loop0): Using r5 hash to sort names [ 207.108322][ T5687] REISERFS (device loop0): using 3.5.x disk format [ 207.185573][ T5687] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 207.252929][ T5721] loop4: detected capacity change from 0 to 64 [ 207.349103][ T5722] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 207.637256][ T5722] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 208.233998][ T5722] REISERFS (device loop0): Remounting filesystem read-only [ 208.253687][ T5722] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 209.849923][ T5751] kvm: pic: non byte write [ 209.870773][ T5745] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 210.987783][ T5766] loop3: detected capacity change from 0 to 64 [ 211.016182][ T5770] device syzkaller0 entered promiscuous mode [ 212.220507][ T4341] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 212.486457][ T5778] loop4: detected capacity change from 0 to 8192 [ 212.536757][ T5778] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 212.570650][ T4341] usb 2-1: Using ep0 maxpacket: 16 [ 212.595841][ T4341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 212.638803][ T5778] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 212.665754][ T4341] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 212.720747][ T5778] REISERFS (device loop4): using ordered data mode [ 212.732045][ T5778] reiserfs: using flush barriers [ 212.746351][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.767770][ T5778] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.783813][ T4341] usb 2-1: Product: syz [ 212.843050][ T4341] usb 2-1: Manufacturer: syz [ 212.879403][ T5778] REISERFS (device loop4): checking transaction log (loop4) [ 212.891906][ T4341] usb 2-1: SerialNumber: syz [ 212.937525][ T5778] REISERFS (device loop4): Using r5 hash to sort names [ 212.951152][ T4341] usb 2-1: config 0 descriptor?? [ 212.990200][ T5778] REISERFS (device loop4): using 3.5.x disk format [ 213.001323][ T4341] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 213.018776][ T5778] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 213.060894][ T4341] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 213.301251][ T5778] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 213.318923][ T5778] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 213.350255][ T5778] REISERFS (device loop4): Remounting filesystem read-only [ 213.370944][ T5778] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 213.600668][ T4341] em28xx 2-1:0.0: chip ID is em2765 [ 214.733431][ T4341] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 214.755179][ T4341] em28xx 2-1:0.0: board has no eeprom [ 215.545725][ T5814] loop3: detected capacity change from 0 to 64 [ 216.535241][ T5759] em28xx 2-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 216.604656][ T4341] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 216.620521][ T4341] em28xx 2-1:0.0: dvb set to bulk mode. [ 216.626613][ T4751] em28xx 2-1:0.0: Binding DVB extension [ 216.739316][ T5034] usb 2-1: USB disconnect, device number 5 [ 216.795234][ T5824] device syzkaller0 entered promiscuous mode [ 216.829996][ T5034] em28xx 2-1:0.0: Disconnecting em28xx [ 216.868751][ T4751] em28xx 2-1:0.0: Registering input extension [ 216.889057][ T5034] em28xx 2-1:0.0: Closing input extension [ 217.133244][ T5034] em28xx 2-1:0.0: Freeing device [ 219.616928][ T5852] loop3: detected capacity change from 0 to 8192 [ 219.647858][ T5852] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 219.672655][ T5852] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 219.703359][ T5852] REISERFS (device loop3): using ordered data mode [ 219.709911][ T5852] reiserfs: using flush barriers [ 219.733110][ T5852] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.749895][ T5852] REISERFS (device loop3): checking transaction log (loop3) [ 219.782507][ T5852] REISERFS (device loop3): Using r5 hash to sort names [ 219.789421][ T5852] REISERFS (device loop3): using 3.5.x disk format [ 219.806482][ T5852] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 219.840853][ T5873] loop0: detected capacity change from 0 to 64 [ 219.872598][ T5852] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 220.017456][ T5852] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 220.087742][ T5852] REISERFS (device loop3): Remounting filesystem read-only [ 220.095687][ T5852] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 221.581091][ T5888] device syzkaller0 entered promiscuous mode [ 221.595463][ T5891] loop0: detected capacity change from 0 to 64 [ 224.942603][ T5928] loop0: detected capacity change from 0 to 8192 [ 225.031441][ T5928] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 225.057389][ T5928] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 225.092833][ T5928] REISERFS (device loop0): using ordered data mode [ 225.099392][ T5928] reiserfs: using flush barriers [ 225.163614][ T5928] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.188734][ T5945] loop1: detected capacity change from 0 to 64 [ 225.198424][ T5928] REISERFS (device loop0): checking transaction log (loop0) [ 225.281889][ T5928] REISERFS (device loop0): Using r5 hash to sort names [ 225.390999][ T5928] REISERFS (device loop0): using 3.5.x disk format [ 225.469865][ T5928] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 225.696830][ T5928] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 225.769136][ T5928] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 225.821946][ T5928] REISERFS (device loop0): Remounting filesystem read-only [ 225.876317][ T5928] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 226.417454][ T5965] loop2: detected capacity change from 0 to 512 [ 226.543976][ T5965] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 226.585272][ T5965] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 226.595662][ T5965] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.413: Failed to acquire dquot type 1 [ 226.609435][ T5965] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 226.623436][ T5965] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 226.633999][ T5965] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.413: Failed to acquire dquot type 1 [ 226.669319][ T5965] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.413: bg 0: block 248: padding at end of block bitmap is not set [ 226.730986][ T5965] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 226.777041][ T5965] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 226.800450][ T5978] device syzkaller0 entered promiscuous mode [ 226.807772][ T5965] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 226.830897][ T5965] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.413: Failed to acquire dquot type 1 [ 226.854924][ T5965] EXT4-fs (loop2): 1 orphan inode deleted [ 226.864970][ T5965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 226.875406][ T5965] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.984936][ T5965] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 227.016625][ T5965] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 227.041868][ T5965] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.413: Failed to acquire dquot type 1 [ 227.607757][ T5965] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 227.669194][ T5965] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 227.746299][ T5965] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.413: Failed to acquire dquot type 1 [ 228.201405][ T5989] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.413: Failed to acquire dquot type 1 [ 228.647227][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 228.677581][ T6005] loop4: detected capacity change from 0 to 8192 [ 228.728343][ T6005] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 228.762555][ T6005] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 228.798668][ T6005] REISERFS (device loop4): using ordered data mode [ 228.836873][ T6005] reiserfs: using flush barriers [ 228.856876][ T6011] loop2: detected capacity change from 0 to 64 [ 229.001356][ T6005] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 229.190133][ T6005] REISERFS (device loop4): checking transaction log (loop4) [ 229.376966][ T6005] REISERFS (device loop4): Using r5 hash to sort names [ 229.390778][ T6005] REISERFS (device loop4): using 3.5.x disk format [ 229.421046][ T6005] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 229.461737][ T6005] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 229.558059][ T6005] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 229.733520][ T6005] REISERFS (device loop4): Remounting filesystem read-only [ 229.878236][ T6005] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 230.566058][ T6028] device syzkaller0 entered promiscuous mode [ 231.730861][ T5035] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 231.990638][ T5035] usb 3-1: Using ep0 maxpacket: 16 [ 232.007758][ T5035] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 232.230302][ T5035] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 232.239529][ T6051] loop3: detected capacity change from 0 to 512 [ 232.339703][ T6051] __quota_error: 2 callbacks suppressed [ 232.339718][ T6051] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 232.436232][ T5035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.444687][ T5035] usb 3-1: Product: syz [ 232.448880][ T5035] usb 3-1: Manufacturer: syz [ 232.452640][ T6051] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 232.456147][ T5035] usb 3-1: SerialNumber: syz [ 232.469709][ T5035] usb 3-1: config 0 descriptor?? [ 232.482052][ T5035] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 232.495970][ T5035] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 232.504542][ T6051] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.436: Failed to acquire dquot type 1 [ 232.550665][ T6051] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 232.563427][ T6051] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 232.567585][ T6058] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.574210][ T6051] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.436: Failed to acquire dquot type 1 [ 232.604060][ T6051] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.436: bg 0: block 248: padding at end of block bitmap is not set [ 232.618939][ T6051] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 232.635489][ T6051] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 232.646162][ T6051] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 232.658202][ T6051] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.436: Failed to acquire dquot type 1 [ 232.670037][ T6051] EXT4-fs (loop3): 1 orphan inode deleted [ 232.676088][ T6051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 232.686346][ T6051] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.784982][ T6051] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 232.795805][ T6051] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 232.806499][ T6051] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.436: Failed to acquire dquot type 1 [ 232.820164][ T6063] loop0: detected capacity change from 0 to 64 [ 232.843537][ T6051] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 232.854099][ T6051] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 232.866541][ T6051] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.436: Failed to acquire dquot type 1 [ 232.916281][ T6051] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.436: Failed to acquire dquot type 1 [ 233.091011][ T5035] em28xx 3-1:0.0: chip ID is em2765 [ 233.103508][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 233.719029][ T5035] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 233.790008][ T5035] em28xx 3-1:0.0: board has no eeprom [ 234.104322][ T6085] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 234.240618][ T5035] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 234.246897][ T6083] loop0: detected capacity change from 0 to 8192 [ 234.249467][ T5035] em28xx 3-1:0.0: dvb set to bulk mode. [ 234.694658][ T2121] em28xx 3-1:0.0: Binding DVB extension [ 234.713575][ T6083] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.864074][ T6083] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 234.907145][ T6083] REISERFS (device loop0): using ordered data mode [ 234.914163][ T6083] reiserfs: using flush barriers [ 234.988556][ T6083] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.852127][ T2121] em28xx 3-1:0.0: Registering input extension [ 235.866931][ T6083] REISERFS (device loop0): checking transaction log (loop0) [ 235.871873][ T4268] usb 3-1: USB disconnect, device number 3 [ 235.888723][ T4268] em28xx 3-1:0.0: Disconnecting em28xx [ 235.905048][ T4268] em28xx 3-1:0.0: Closing input extension [ 235.921742][ T6083] REISERFS (device loop0): Using r5 hash to sort names [ 235.928680][ T6083] REISERFS (device loop0): using 3.5.x disk format [ 235.949669][ T4268] em28xx 3-1:0.0: Freeing device [ 235.961528][ T6083] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 236.054213][ T6083] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 236.059070][ T6098] device syzkaller0 entered promiscuous mode [ 236.145485][ T6083] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 236.227127][ T6083] REISERFS (device loop0): Remounting filesystem read-only [ 236.247689][ T6083] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 237.547803][ T6119] loop1: detected capacity change from 0 to 64 [ 237.624756][ T6126] loop4: detected capacity change from 0 to 512 [ 237.889167][ T6126] __quota_error: 2 callbacks suppressed [ 237.889184][ T6126] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 237.911199][ T6126] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 237.926110][ T6126] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.455: Failed to acquire dquot type 1 [ 237.964805][ T6126] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 237.979928][ T6126] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 237.996215][ T6126] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.455: Failed to acquire dquot type 1 [ 238.008753][ T6126] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.455: bg 0: block 248: padding at end of block bitmap is not set [ 238.033532][ T6126] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 238.048258][ T6126] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 238.069190][ T6126] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 238.081503][ T6126] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.455: Failed to acquire dquot type 1 [ 238.098528][ T6126] EXT4-fs (loop4): 1 orphan inode deleted [ 238.115649][ T6126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 238.125840][ T6126] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.240031][ T6126] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 238.260792][ T6126] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 238.271762][ T6126] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.455: Failed to acquire dquot type 1 [ 238.300993][ T6126] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 238.319595][ T6126] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 238.342507][ T6126] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.455: Failed to acquire dquot type 1 [ 238.495513][ T6142] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.455: Failed to acquire dquot type 1 [ 238.770558][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 240.332543][ T6154] device syzkaller0 entered promiscuous mode [ 240.630729][ T5037] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 240.920571][ T5037] usb 1-1: Using ep0 maxpacket: 16 [ 240.939198][ T5037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 241.007844][ T5037] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 241.159354][ T5037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.234214][ T5037] usb 1-1: Product: syz [ 241.265562][ T5037] usb 1-1: Manufacturer: syz [ 241.277646][ T5037] usb 1-1: SerialNumber: syz [ 241.310100][ T5037] usb 1-1: config 0 descriptor?? [ 241.344090][ T5037] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 241.358691][ T5037] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 241.736258][ T6172] loop1: detected capacity change from 0 to 8192 [ 241.776576][ T6172] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 241.813650][ T6172] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 241.830728][ T6172] REISERFS (device loop1): using ordered data mode [ 241.837276][ T6172] reiserfs: using flush barriers [ 241.860694][ T6172] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 241.881227][ T6172] REISERFS (device loop1): checking transaction log (loop1) [ 241.909925][ T6172] REISERFS (device loop1): Using r5 hash to sort names [ 241.940292][ T6172] REISERFS (device loop1): using 3.5.x disk format [ 241.950391][ T5037] em28xx 1-1:0.0: chip ID is em2765 [ 241.957373][ T6172] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 242.051046][ T6186] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 242.145819][ T6186] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 242.167271][ T6186] REISERFS (device loop1): Remounting filesystem read-only [ 242.187475][ T6186] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 242.297932][ T6191] loop3: detected capacity change from 0 to 64 [ 242.865364][ T5037] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 242.901298][ T5037] em28xx 1-1:0.0: board has no eeprom [ 243.229187][ T6206] netlink: 'syz.0.464': attribute type 1 has an invalid length. [ 243.370647][ T5037] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 243.390374][ T5037] em28xx 1-1:0.0: dvb set to bulk mode. [ 243.547779][ T5037] em28xx 1-1:0.0: Binding DVB extension [ 243.889995][ T6212] device syzkaller0 entered promiscuous mode [ 243.951794][ T6213] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 244.577123][ T4751] usb 1-1: USB disconnect, device number 3 [ 244.641774][ T4751] em28xx 1-1:0.0: Disconnecting em28xx [ 244.865276][ T6225] loop4: detected capacity change from 0 to 64 [ 244.918215][ T5037] em28xx 1-1:0.0: Registering input extension [ 244.925355][ T4751] em28xx 1-1:0.0: Closing input extension [ 244.962504][ T4751] em28xx 1-1:0.0: Freeing device [ 245.674215][ T6238] loop3: detected capacity change from 0 to 8192 [ 245.948147][ T6238] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 246.129905][ T6238] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 246.139205][ T6238] REISERFS (device loop3): using ordered data mode [ 246.146236][ T6238] reiserfs: using flush barriers [ 246.371870][ T6238] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 246.410700][ T6238] REISERFS (device loop3): checking transaction log (loop3) [ 246.512328][ T6238] REISERFS (device loop3): Using r5 hash to sort names [ 246.628533][ T6238] REISERFS (device loop3): using 3.5.x disk format [ 246.682435][ T6238] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 246.695365][ T6249] loop4: detected capacity change from 0 to 64 [ 246.711654][ T6238] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3717, free_space(entry_count) 2 [ 246.732872][ T6238] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 246.745906][ T6238] REISERFS (device loop3): Remounting filesystem read-only [ 246.753232][ T6238] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 247.006599][ T6257] device syzkaller0 entered promiscuous mode [ 248.100595][ T4319] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 248.300619][ T4319] usb 2-1: Using ep0 maxpacket: 16 [ 248.349146][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 248.524828][ T4319] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 248.646025][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.723007][ T4319] usb 2-1: Product: syz [ 248.727259][ T4319] usb 2-1: Manufacturer: syz [ 248.760129][ T4319] usb 2-1: SerialNumber: syz [ 248.823873][ T4319] usb 2-1: config 0 descriptor?? [ 248.873306][ T4319] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 248.926946][ T4319] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 249.511726][ T4319] em28xx 2-1:0.0: chip ID is em2765 [ 250.125380][ T4319] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 250.153191][ T4319] em28xx 2-1:0.0: board has no eeprom [ 250.247432][ T6300] loop3: detected capacity change from 0 to 8192 [ 250.289699][ T6300] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 250.310811][ T6300] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 250.346656][ T6300] REISERFS (device loop3): using ordered data mode [ 250.400743][ T6300] reiserfs: using flush barriers [ 250.431169][ T6300] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 250.499996][ T6302] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 250.531002][ T6300] REISERFS (device loop3): checking transaction log (loop3) [ 250.559056][ T6300] REISERFS (device loop3): Using r5 hash to sort names [ 250.571359][ T6300] REISERFS (device loop3): using 3.5.x disk format [ 250.590959][ T6300] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 250.640575][ T4319] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 250.648483][ T4319] em28xx 2-1:0.0: dvb set to bulk mode. [ 250.689639][ T6300] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3717, free_space(entry_count) 2 [ 250.709799][ T4319] em28xx 2-1:0.0: Binding DVB extension [ 250.767579][ T6300] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 250.816729][ T6300] REISERFS (device loop3): Remounting filesystem read-only [ 250.861076][ T6300] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 251.036603][ T6313] loop0: detected capacity change from 0 to 64 [ 251.233248][ T6315] loop2: detected capacity change from 0 to 64 [ 251.428718][ T6319] device syzkaller0 entered promiscuous mode [ 251.923154][ T4333] usb 2-1: USB disconnect, device number 6 [ 251.932508][ T4333] em28xx 2-1:0.0: Disconnecting em28xx [ 252.695864][ T4319] em28xx 2-1:0.0: Registering input extension [ 252.717773][ T4333] em28xx 2-1:0.0: Closing input extension [ 252.756465][ T4333] em28xx 2-1:0.0: Freeing device [ 253.811579][ T6358] loop3: detected capacity change from 0 to 2048 [ 253.906927][ T6359] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.010602][ T4333] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 254.056857][ T6359] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 254.090543][ T6359] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 254.115634][ T6359] Remounting filesystem read-only [ 254.211153][ T4333] usb 2-1: Using ep0 maxpacket: 16 [ 254.222096][ T4333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 254.233895][ T4265] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 254.244795][ T4333] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.280686][ T4333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.288779][ T4333] usb 2-1: Product: syz [ 254.307230][ T4333] usb 2-1: Manufacturer: syz [ 254.334426][ T4333] usb 2-1: SerialNumber: syz [ 254.361567][ T4333] usb 2-1: config 0 descriptor?? [ 254.387343][ T4333] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 254.777000][ T4333] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 254.781157][ T6361] loop2: detected capacity change from 0 to 8192 [ 254.936495][ T6361] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.975685][ T6361] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 254.998072][ T6372] loop3: detected capacity change from 0 to 64 [ 255.086027][ T6361] REISERFS (device loop2): using ordered data mode [ 255.142483][ T4333] em28xx 2-1:0.0: chip ID is em2765 [ 255.313400][ T6361] reiserfs: using flush barriers [ 255.331917][ T6361] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 255.411935][ T6361] REISERFS (device loop2): checking transaction log (loop2) [ 255.474980][ T6361] REISERFS (device loop2): Using r5 hash to sort names [ 255.507644][ T6361] REISERFS (device loop2): using 3.5.x disk format [ 255.537936][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.587670][ T6361] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 255.662985][ T6361] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3717, free_space(entry_count) 2 [ 255.692353][ T6361] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 255.752202][ T4333] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 255.766619][ T6361] REISERFS (device loop2): Remounting filesystem read-only [ 255.779406][ T4333] em28xx 2-1:0.0: board has no eeprom [ 255.814245][ T6361] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 256.001229][ T6379] device syzkaller0 entered promiscuous mode [ 256.094987][ T6382] loop3: detected capacity change from 0 to 2048 [ 256.155529][ T6357] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 256.288069][ T4333] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 256.342223][ T6385] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.862412][ T4333] em28xx 2-1:0.0: dvb set to bulk mode. [ 256.892914][ T4319] em28xx 2-1:0.0: Binding DVB extension [ 256.905411][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 256.905423][ T27] audit: type=1800 audit(1762276701.924:10): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.526" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 257.201666][ T6385] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 257.240526][ T6385] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 257.289320][ T6385] Remounting filesystem read-only [ 257.321976][ T4265] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 257.456345][ T4341] usb 2-1: USB disconnect, device number 7 [ 257.491270][ T4341] em28xx 2-1:0.0: Disconnecting em28xx [ 257.656217][ T4319] em28xx 2-1:0.0: Registering input extension [ 257.669437][ T4341] em28xx 2-1:0.0: Closing input extension [ 257.697371][ T4341] em28xx 2-1:0.0: Freeing device [ 258.384684][ T6418] loop3: detected capacity change from 0 to 64 [ 259.772297][ T6428] loop2: detected capacity change from 0 to 8192 [ 259.807575][ T6428] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 259.840567][ T6428] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 259.860384][ T6428] REISERFS (device loop2): using ordered data mode [ 259.867043][ T6428] reiserfs: using flush barriers [ 259.880953][ T6428] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.897520][ T6428] REISERFS (device loop2): checking transaction log (loop2) [ 259.915039][ T6428] REISERFS (device loop2): Using r5 hash to sort names [ 259.947968][ T6428] REISERFS (device loop2): using 3.5.x disk format [ 259.965735][ T6428] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 260.398356][ T6440] device syzkaller0 entered promiscuous mode [ 260.458174][ T6443] comedi comedi3: c6xdigio: I/O port conflict (0x10,3) [ 260.476269][ T6443] ------------[ cut here ]------------ [ 260.482214][ T6443] Unexpected driver unregister! [ 260.505361][ T6443] WARNING: CPU: 1 PID: 6443 at drivers/base/driver.c:270 driver_unregister+0x8e/0xa0 [ 260.515200][ T6443] Modules linked in: [ 260.519136][ T6443] CPU: 1 PID: 6443 Comm: syz.0.545 Not tainted syzkaller #0 [ 260.526504][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.536623][ T6443] RIP: 0010:driver_unregister+0x8e/0xa0 [ 260.542247][ T6443] Code: e8 77 ae 00 fd 48 89 df 5b 41 5e 41 5f e9 fa 5c ff ff e8 15 71 7c fc eb 05 e8 0e 71 7c fc 48 c7 c7 a0 c8 02 8b e8 e2 95 48 fc <0f> 0b 5b 41 5e 41 5f c3 00 00 cc cc 00 00 cc cc 00 00 41 57 41 56 [ 260.561975][ T6443] RSP: 0018:ffffc9001c0d7a60 EFLAGS: 00010246 [ 260.568068][ T6443] RAX: 7b25d70884741300 RBX: ffffffff8dc2b5e0 RCX: 0000000000080000 [ 260.576121][ T6443] RDX: ffffc9000cc59000 RSI: 000000000000ce76 RDI: 000000000000ce77 [ 260.584156][ T6443] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffff5200381aedd [ 260.592199][ T6443] R10: fffff5200381aedd R11: 1ffff9200381aedc R12: ffff88802ea06838 [ 260.600195][ T6443] R13: ffffffff8dc2b530 R14: 0000000000000000 R15: dffffc0000000000 [ 260.608256][ T6443] FS: 00007f7d0ff836c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 260.617247][ T6443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.623897][ T6443] CR2: 00007f7956380f98 CR3: 000000002f6b4000 CR4: 00000000003506e0 [ 260.631923][ T6443] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 260.640025][ T6443] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.648050][ T6443] Call Trace: [ 260.651374][ T6443] [ 260.654317][ T6443] comedi_device_detach_locked+0x16e/0x710 [ 260.660222][ T6443] comedi_device_attach+0x5c9/0x700 [ 260.665502][ T6443] comedi_unlocked_ioctl+0x5a6/0x1050 [ 260.671007][ T6443] ? __lock_acquire+0x7c50/0x7c50 [ 260.676086][ T6443] ? tomoyo_path_number_perm+0x4ae/0x600 [ 260.681793][ T6443] ? comedi_poll+0x8b0/0x8b0 [ 260.686451][ T6443] ? __fget_files+0x28/0x4d0 [ 260.691143][ T6443] ? bpf_lsm_file_ioctl+0x5/0x10 [ 260.696101][ T6443] ? security_file_ioctl+0x7c/0xa0 [ 260.701299][ T6443] ? comedi_poll+0x8b0/0x8b0 [ 260.705915][ T6443] __se_sys_ioctl+0xfa/0x170 [ 260.710606][ T6443] do_syscall_64+0x4c/0xa0 [ 260.715053][ T6443] ? clear_bhb_loop+0x60/0xb0 [ 260.719751][ T6443] ? clear_bhb_loop+0x60/0xb0 [ 260.724538][ T6443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.730502][ T6443] RIP: 0033:0x7f7d0f18f6c9 [ 260.734948][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.754667][ T6443] RSP: 002b:00007f7d0ff83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.763180][ T6443] RAX: ffffffffffffffda RBX: 00007f7d0f3e5fa0 RCX: 00007f7d0f18f6c9 [ 260.771232][ T6443] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 260.779255][ T6443] RBP: 00007f7d0f211f91 R08: 0000000000000000 R09: 0000000000000000 [ 260.787309][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.795360][ T6443] R13: 00007f7d0f3e6038 R14: 00007f7d0f3e5fa0 R15: 00007ffefc64b5b8 [ 260.803419][ T6443] [ 260.806499][ T6443] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 260.813790][ T6443] CPU: 1 PID: 6443 Comm: syz.0.545 Not tainted syzkaller #0 [ 260.821085][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.831144][ T6443] Call Trace: [ 260.834430][ T6443] [ 260.837367][ T6443] dump_stack_lvl+0x168/0x22e [ 260.842056][ T6443] ? memcpy+0x3c/0x60 [ 260.846057][ T6443] ? show_regs_print_info+0x12/0x12 [ 260.851268][ T6443] ? load_image+0x3b0/0x3b0 [ 260.855803][ T6443] panic+0x2c9/0x710 [ 260.859716][ T6443] ? bpf_jit_dump+0xd0/0xd0 [ 260.864251][ T6443] __warn+0x2f8/0x4f0 [ 260.868248][ T6443] ? driver_unregister+0x8e/0xa0 [ 260.873205][ T6443] ? driver_unregister+0x8e/0xa0 [ 260.878156][ T6443] report_bug+0x2ba/0x4f0 [ 260.882501][ T6443] ? driver_unregister+0x8e/0xa0 [ 260.887462][ T6443] handle_bug+0x3a/0x70 [ 260.891630][ T6443] exc_invalid_op+0x16/0x40 [ 260.896151][ T6443] asm_exc_invalid_op+0x16/0x20 [ 260.901021][ T6443] RIP: 0010:driver_unregister+0x8e/0xa0 [ 260.906589][ T6443] Code: e8 77 ae 00 fd 48 89 df 5b 41 5e 41 5f e9 fa 5c ff ff e8 15 71 7c fc eb 05 e8 0e 71 7c fc 48 c7 c7 a0 c8 02 8b e8 e2 95 48 fc <0f> 0b 5b 41 5e 41 5f c3 00 00 cc cc 00 00 cc cc 00 00 41 57 41 56 [ 260.926215][ T6443] RSP: 0018:ffffc9001c0d7a60 EFLAGS: 00010246 [ 260.932310][ T6443] RAX: 7b25d70884741300 RBX: ffffffff8dc2b5e0 RCX: 0000000000080000 [ 260.940303][ T6443] RDX: ffffc9000cc59000 RSI: 000000000000ce76 RDI: 000000000000ce77 [ 260.948291][ T6443] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffff5200381aedd [ 260.956280][ T6443] R10: fffff5200381aedd R11: 1ffff9200381aedc R12: ffff88802ea06838 [ 260.964269][ T6443] R13: ffffffff8dc2b530 R14: 0000000000000000 R15: dffffc0000000000 [ 260.972277][ T6443] comedi_device_detach_locked+0x16e/0x710 [ 260.978125][ T6443] comedi_device_attach+0x5c9/0x700 [ 260.983353][ T6443] comedi_unlocked_ioctl+0x5a6/0x1050 [ 260.988741][ T6443] ? __lock_acquire+0x7c50/0x7c50 [ 260.993785][ T6443] ? tomoyo_path_number_perm+0x4ae/0x600 [ 260.999436][ T6443] ? comedi_poll+0x8b0/0x8b0 [ 261.004088][ T6443] ? __fget_files+0x28/0x4d0 [ 261.008706][ T6443] ? bpf_lsm_file_ioctl+0x5/0x10 [ 261.013662][ T6443] ? security_file_ioctl+0x7c/0xa0 [ 261.018786][ T6443] ? comedi_poll+0x8b0/0x8b0 [ 261.023390][ T6443] __se_sys_ioctl+0xfa/0x170 [ 261.027997][ T6443] do_syscall_64+0x4c/0xa0 [ 261.032424][ T6443] ? clear_bhb_loop+0x60/0xb0 [ 261.037107][ T6443] ? clear_bhb_loop+0x60/0xb0 [ 261.041795][ T6443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.047703][ T6443] RIP: 0033:0x7f7d0f18f6c9 [ 261.052130][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.071762][ T6443] RSP: 002b:00007f7d0ff83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.080197][ T6443] RAX: ffffffffffffffda RBX: 00007f7d0f3e5fa0 RCX: 00007f7d0f18f6c9 [ 261.088191][ T6443] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 261.096181][ T6443] RBP: 00007f7d0f211f91 R08: 0000000000000000 R09: 0000000000000000 [ 261.104163][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.112328][ T6443] R13: 00007f7d0f3e6038 R14: 00007f7d0f3e5fa0 R15: 00007ffefc64b5b8 [ 261.120338][ T6443] [ 261.123612][ T6443] Kernel Offset: disabled [ 261.128061][ T6443] Rebooting in 86400 seconds..