last executing test programs: 9m33.027146651s ago: executing program 0 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r11 = dup3(r10, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x110a}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x4, 0x1, 0x2a}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 9m31.743374145s ago: executing program 0 (id=317): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0100001300010100000000000000002001000000000000000000000000000100000000000000000000ffff7f001d010000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000401000000000000feffffff0000000000000000000000008400050020010000000000000000000000000001000000002b0000000a000000000000000000000000000000000000000040000001000000040000007f00000000000000fc020000000000000000000000000000000000002b0000000200000000000000000000000000ffffac1414bb00000000"], 0x13c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 9m30.83637099s ago: executing program 0 (id=320): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 9m30.494773579s ago: executing program 0 (id=321): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 9m27.204078008s ago: executing program 0 (id=330): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 9m26.839255569s ago: executing program 0 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x80, 0x100, 0x801, 0x2, 0x7, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000300)={0x8, 0x100008f}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) r2 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket(0x1e, 0x1, 0x0) shutdown(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) r4 = creat(0x0, 0xf2) r5 = fanotify_init(0xf00, 0x2) fanotify_mark(0xffffffffffffffff, 0x200, 0x8970, r4, 0x0) readv(r5, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/88, 0xfffffdf1}], 0x1) 9m11.000446228s ago: executing program 32 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x80, 0x100, 0x801, 0x2, 0x7, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000300)={0x8, 0x100008f}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) r2 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket(0x1e, 0x1, 0x0) shutdown(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) r4 = creat(0x0, 0xf2) r5 = fanotify_init(0xf00, 0x2) fanotify_mark(0xffffffffffffffff, 0x200, 0x8970, r4, 0x0) readv(r5, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/88, 0xfffffdf1}], 0x1) 2m53.543883208s ago: executing program 1 (id=751): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) read$FUSE(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x3, 0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x2, 0x0) 2m49.569289416s ago: executing program 1 (id=752): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) read$FUSE(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x3, 0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x2, 0x0) 2m42.756702651s ago: executing program 1 (id=759): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040), 0x4) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x800000000000001, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r3, 0x8, 0x100001) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) 2m38.057244679s ago: executing program 1 (id=769): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) read$FUSE(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x3, 0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x2, 0x0) 2m36.012433914s ago: executing program 1 (id=772): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x732}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r6 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 2m30.010640637s ago: executing program 1 (id=775): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) unshare(0x2c020400) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(r5, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$kcm(0x2c, 0x3, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) close(0x3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 2m12.299903437s ago: executing program 33 (id=775): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) unshare(0x2c020400) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(r5, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$kcm(0x2c, 0x3, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) close(0x3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 12.940500441s ago: executing program 2 (id=1154): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x732}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r6 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 9.990297551s ago: executing program 2 (id=1157): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 6.825081964s ago: executing program 2 (id=1162): unshare(0x5a060800) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x9]}, 0x0, 0x0, 0x8) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) mknod$loop(0x0, 0x6000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvfrom(r0, &(0x7f0000000000), 0x0, 0x183, 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) pipe2$watch_queue(0x0, 0x80) unshare(0x8000000) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r4, &(0x7f0000001240)=[{&(0x7f0000000100)}], 0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001b000)={0x24, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0xcb}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4.854638727s ago: executing program 3 (id=1167): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x732}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 3.774931587s ago: executing program 4 (id=1169): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) r1 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r2, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/15, 0xf}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 3.609303672s ago: executing program 2 (id=1172): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 3.559161963s ago: executing program 5 (id=1173): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x732}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 3.491970615s ago: executing program 3 (id=1174): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 3.473346206s ago: executing program 4 (id=1175): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x58a, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x80, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x5, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4a, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x81, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x9, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x7, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0xfffffff7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0xb, 0xfe, 0x9602, 0xa, 0x97f, 0x1, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 3.28094602s ago: executing program 4 (id=1176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r13 = dup3(r12, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 2.89439972s ago: executing program 3 (id=1177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040), 0x4) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) socket$inet_sctp(0x2, 0x800000000000001, 0x84) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x8, 0x100001) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) 2.478369052s ago: executing program 5 (id=1178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000800)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_binder, @flat=@weak_handle={0x77682a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.420479284s ago: executing program 3 (id=1179): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@int=0x5, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) sendto(0xffffffffffffffff, &(0x7f0000000300)="6ac5c6", 0x3, 0x48000, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) msgsnd(0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB], 0x1b, 0x5f005e4c1fdd0237) socket$packet(0x11, 0x2, 0x300) listen(0xffffffffffffffff, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000a80)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 2.339227966s ago: executing program 5 (id=1180): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xc2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0x8000}) close_range(r0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file1\x00') io_setup(0x4, &(0x7f0000000240)) r2 = open(&(0x7f0000000280)='./file0\x00', 0x325082, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x1000, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x90800, 0x0) linkat(r3, &(0x7f0000000440)='./file1\x00', r3, &(0x7f0000000180)='./file0\x00', 0x1400) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="2006b0000000b007bd7029438ac774ac0f82bc52b439cc38e48e7f3686c7c6abe19f2ae2e482f6d94fb37999b94d7c0014048d1de6eb80a9b49dacc89e8100bf6a8ea461de42efbe90efb74e8e0bb6fdab94be618cf5f69ae00572640016917a88c715289d325d8c5be6c011ad27d2280ca09e7dd9b1db0ea7762aacd0a5c8e166b60e09bffeea7a71ae7896063648196f4ac249e9e6b2cdf77c373f75598e686e340bf311"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x40, 0x442100) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0xa, @empty, 0x13b8}}, 0x0, 0x6}, 0x0) 2.18202751s ago: executing program 4 (id=1181): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) ioperm(0xc6fa, 0x1ff, 0x5) ioperm(0x200, 0x9, 0x7) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaa0300aaaa0180c200000008004500001cfffc00000002907800000000e000000114009078ac1414bb4a4ac2e5ef50d78c97ed9c49e6300f8e0689d5b0a737e0a1665d2f6de8e02362f10d30d48aae8f3e1c9a08bc7de814d13d5eca71a304c30194fb31c9d81d67511a6f08c45bf5a2093d11f02eea8626042a16ec6d6a078e988fa393c5316e58ff79b032"], 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x5b9bc3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f0000000140)={0x1, 0x0, 0x0, 0xffffff0c, @vifc_lcl_addr=@multicast1, @rand_addr=0x64010101}, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) dup2(r5, 0xffffffffffffffff) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) ioctl$TCSBRKP(r7, 0x5425, 0x1) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r9, 0xa) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x80000000}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x4d3, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x2, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x82403, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r10, 0x40096101, &(0x7f0000000000)={{}, 0xfe}) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000040)) futex(&(0x7f00000002c0), 0xc, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x12) 1.495117659s ago: executing program 3 (id=1182): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x732}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 1.146934029s ago: executing program 5 (id=1183): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r2, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/15, 0xf}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 1.052162321s ago: executing program 4 (id=1184): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x58a, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x80, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x5, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4a, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x81, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x9, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x7, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0xfffffff7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0xb, 0xfe, 0x9602, 0xa, 0x97f, 0x1, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 945.050864ms ago: executing program 2 (id=1185): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 944.732734ms ago: executing program 4 (id=1186): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x732}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 888.950426ms ago: executing program 5 (id=1187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040), 0x4) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) socket$inet_sctp(0x2, 0x800000000000001, 0x84) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x8, 0x100001) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) 350.09775ms ago: executing program 2 (id=1188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000800)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_binder, @flat=@weak_handle={0x77682a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 56.023408ms ago: executing program 3 (id=1189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r13 = dup3(r12, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 0s ago: executing program 5 (id=1190): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@int=0x5, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) sendto(0xffffffffffffffff, &(0x7f0000000300)="6ac5c6", 0x3, 0x48000, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) msgsnd(0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB], 0x1b, 0x5f005e4c1fdd0237) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(0xffffffffffffffff, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000a80)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 23][ T7422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.483437][ T7422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.501085][ T5817] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 326.576288][ T7422] team0: Port device team_slave_0 added [ 326.588907][ T7422] team0: Port device team_slave_1 added [ 326.682373][ T7422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.692262][ T7422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.720832][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 326.722676][ T7422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.748881][ T7422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.756345][ T7422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.775594][ T5817] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.785496][ T7422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.843692][ T5817] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.964388][ T5817] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 327.004951][ T7422] hsr_slave_0: entered promiscuous mode [ 327.013349][ T5817] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 327.034898][ T7422] hsr_slave_1: entered promiscuous mode [ 327.048624][ T7422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.055350][ T5817] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.069547][ T7422] Cannot create hsr debugfs directory [ 327.111068][ T5817] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.153043][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.215284][ T1137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.420827][ T5817] usb 4-1: usb_control_msg returned -71 [ 327.426544][ T5817] usbtmc 4-1:16.0: can't read capabilities [ 327.438288][ T1137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.472783][ T5817] usb 4-1: USB disconnect, device number 7 [ 327.581369][ T1137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.720124][ T1137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.446100][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 334.731105][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 334.740812][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 336.815725][ T7422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 336.903147][ T7422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 336.927796][ T7422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 336.970147][ T5905] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 337.023205][ T7422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.123042][ T7422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.148091][ T7422] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.217851][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.225707][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.401334][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 339.411004][ T5905] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.428170][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.472321][ T5905] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 340.251323][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 340.290053][ T5905] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.310084][ T5905] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 340.319565][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.341327][ T5905] usb 4-1: can't set config #16, error -71 [ 340.350795][ T5905] usb 4-1: USB disconnect, device number 8 [ 340.458981][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.466612][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.718764][ T1137] hsr_slave_0: left promiscuous mode [ 348.746812][ T1137] hsr_slave_1: left promiscuous mode [ 348.787525][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.808056][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.828774][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.847295][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.865185][ T1137] bridge_slave_1: left allmulticast mode [ 348.881367][ T1137] bridge_slave_1: left promiscuous mode [ 348.894366][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.938111][ T1137] bridge_slave_0: left allmulticast mode [ 348.945034][ T1137] bridge_slave_0: left promiscuous mode [ 348.962742][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.092507][ T1137] veth1_macvtap: left promiscuous mode [ 349.112023][ T1137] veth0_macvtap: left promiscuous mode [ 349.130840][ T1137] veth1_vlan: left promiscuous mode [ 349.136595][ T1137] veth0_vlan: left promiscuous mode [ 350.236356][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 350.291156][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 350.338152][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.392909][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.869373][ T1137] bond0 (unregistering): Released all slaves [ 351.001365][ T7617] bond1: option mode: unable to set because the bond device has slaves [ 351.016120][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 351.050372][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 351.083185][ T7621] bond1: (slave bond0): Releasing backup interface [ 351.257200][ T7422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.813555][ T7422] veth0_vlan: entered promiscuous mode [ 358.873123][ T7422] veth1_vlan: entered promiscuous mode [ 359.489304][ T7422] veth0_macvtap: entered promiscuous mode [ 363.337009][ T7422] veth1_macvtap: entered promiscuous mode [ 364.046053][ T7694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.447'. [ 364.094635][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 364.213106][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.260014][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.300117][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.331752][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.460957][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.507681][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.533887][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.569572][ T7422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.600072][ T7422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.620196][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.980985][ T7422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.017776][ T7422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.042958][ T7422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.080122][ T7422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.950785][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.958869][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.279998][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.288105][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.897546][ T7758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.457'. [ 375.950148][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 376.894841][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.058737][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.118403][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.217654][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.231014][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 377.304447][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.361053][ T51] Bluetooth: hci1: command tx timeout [ 380.378838][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.385471][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.530277][ T51] Bluetooth: hci1: command tx timeout [ 384.137229][ T7769] chnl_net:caif_netlink_parms(): no params data found [ 384.547886][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.582842][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.591904][ T7769] bridge_slave_0: entered allmulticast mode [ 384.610118][ T5785] Bluetooth: hci1: command tx timeout [ 384.623645][ T7769] bridge_slave_0: entered promiscuous mode [ 384.643728][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.669135][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.690473][ T7769] bridge_slave_1: entered allmulticast mode [ 384.709656][ T7769] bridge_slave_1: entered promiscuous mode [ 384.920680][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.465'. [ 384.949233][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 386.680140][ T5785] Bluetooth: hci1: command tx timeout [ 387.163385][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.222970][ T1137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.141325][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.342033][ T7769] team0: Port device team_slave_0 added [ 388.780919][ T1137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.930712][ T7769] team0: Port device team_slave_1 added [ 389.042868][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.146448][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.180814][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.284396][ T1137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.312017][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.319128][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.357653][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.460034][ T5910] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 389.498019][ T1137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.542046][ T7769] hsr_slave_0: entered promiscuous mode [ 389.560389][ T7769] hsr_slave_1: entered promiscuous mode [ 389.577952][ T7769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.589972][ T7769] Cannot create hsr debugfs directory [ 389.640160][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 389.653092][ T5910] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.675121][ T5910] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.721710][ T5910] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 391.952140][ T5910] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 391.970043][ T5910] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.984582][ T5910] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.000657][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.469098][ T5910] usb 3-1: usb_control_msg returned -71 [ 393.492496][ T5910] usbtmc 3-1:16.0: can't read capabilities [ 393.548028][ T5910] usb 3-1: USB disconnect, device number 11 [ 393.983345][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.475'. [ 394.026923][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 399.381308][ T7769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 399.416209][ T7769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 403.489942][ T5913] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 403.650394][ T7769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 403.750524][ T7769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 404.566780][ T5913] usb 4-1: device not accepting address 9, error -71 [ 404.884895][ T7940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'. [ 404.928917][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 406.184963][ T1137] hsr_slave_0: left promiscuous mode [ 406.230669][ T1137] hsr_slave_1: left promiscuous mode [ 406.242714][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.333542][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.728366][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.757949][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.787293][ T1137] bridge_slave_1: left allmulticast mode [ 408.794422][ T1137] bridge_slave_1: left promiscuous mode [ 408.806271][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.817666][ T1137] bridge_slave_0: left allmulticast mode [ 408.828160][ T1137] bridge_slave_0: left promiscuous mode [ 408.839751][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.898316][ T1137] veth1_macvtap: left promiscuous mode [ 408.913520][ T1137] veth0_macvtap: left promiscuous mode [ 408.920867][ T1137] veth1_vlan: left promiscuous mode [ 408.936190][ T1137] veth0_vlan: left promiscuous mode [ 409.330117][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 409.520037][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 409.529431][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.540576][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.551794][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 409.564550][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 409.575537][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.590024][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.607970][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.853659][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 409.859768][ T9] usbtmc 4-1:16.0: can't read capabilities [ 410.023626][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 410.067831][ T9] usb 4-1: USB disconnect, device number 11 [ 410.089464][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 410.144915][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.195298][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.555611][ T1137] bond0 (unregistering): Released all slaves [ 410.714914][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.774000][ T7769] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.814289][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.821991][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.904039][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.912033][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.455760][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.830509][ T5913] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 415.919396][ T7769] veth0_vlan: entered promiscuous mode [ 419.545154][ T7769] veth1_vlan: entered promiscuous mode [ 419.668193][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 419.702807][ T5913] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 419.720698][ T5913] usb 3-1: can't read configurations, error -71 [ 420.461407][ T7769] veth0_macvtap: entered promiscuous mode [ 420.612802][ T7769] veth1_macvtap: entered promiscuous mode [ 420.668387][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.493'. [ 420.691585][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 420.773442][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.816493][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.840318][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.862653][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.891713][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.916106][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.942130][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.953760][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.976987][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.006364][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.063137][ T7769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.091619][ T5913] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 421.111960][ T7769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.122774][ T7769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.160906][ T7769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.300573][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 421.317556][ T5913] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.360937][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.391583][ T5913] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 421.419947][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 421.432404][ T5913] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.661699][ T5913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.800478][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.875816][ T5913] usb 3-1: can't set config #16, error -71 [ 423.891968][ T5913] usb 3-1: USB disconnect, device number 14 [ 424.038338][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.071937][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.168395][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.221585][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.756401][ T8087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.349'. [ 431.980232][ T5815] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 435.520358][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 436.125237][ T5815] usb 4-1: device descriptor read/all, error -71 [ 439.165286][ T8141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.514'. [ 439.240156][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 439.250205][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 442.400488][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.408095][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.720182][ T5908] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 443.954611][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.985315][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.050107][ T5908] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 444.110067][ T5908] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 444.170754][ T5908] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 444.285906][ T5908] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 444.365893][ T5908] usb 5-1: config 1 interface 1 has no altsetting 0 [ 445.270311][ T5817] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 445.469948][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 445.488122][ T5817] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.528882][ T5817] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.572759][ T5817] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 445.627946][ T5817] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 445.669244][ T5817] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.730451][ T5817] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 445.781249][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.131236][ T5817] usb 3-1: usb_control_msg returned -71 [ 450.146246][ T5817] usbtmc 3-1:16.0: can't read capabilities [ 450.174713][ T5908] usb 5-1: string descriptor 0 read error: -71 [ 450.200295][ T5817] usb 3-1: USB disconnect, device number 15 [ 450.212755][ T5908] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 450.265777][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.340214][ T5908] usb 5-1: can't set config #1, error -71 [ 450.360354][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 450.392249][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 450.396172][ T5908] usb 5-1: USB disconnect, device number 2 [ 454.553964][ T8248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.524'. [ 457.036559][ T8259] netlink: 132 bytes leftover after parsing attributes in process `syz.4.541'. [ 457.290146][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 457.510050][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 457.541022][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 457.591458][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 457.863515][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 460.234274][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 460.246147][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.293270][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 460.326141][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.415447][ T8] usb 2-1: can't set config #16, error -71 [ 461.319305][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 461.378144][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 462.370604][ T8] usb 2-1: USB disconnect, device number 8 [ 468.144045][ T8299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.545'. [ 471.790038][ T5905] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 473.521915][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 473.589418][ T5905] usb 2-1: device descriptor read/all, error -71 [ 473.987513][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 474.000691][ T8328] block device autoloading is deprecated and will be removed. [ 474.037573][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 475.206162][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 475.699467][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 477.179550][ T8344] netlink: 132 bytes leftover after parsing attributes in process `syz.4.555'. [ 480.640138][ T5908] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 483.133006][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 483.142132][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 483.164800][ T5908] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 483.166343][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 483.183086][ T5908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 483.222160][ T5908] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 483.243742][ T5908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 483.266056][ T5908] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.288656][ T5908] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 483.302521][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.419780][ T5908] usb 2-1: can't set config #16, error -71 [ 483.451260][ T5908] usb 2-1: USB disconnect, device number 11 [ 488.815928][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 488.841669][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 488.903230][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 488.930071][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 489.060439][ T5908] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 489.250512][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 491.668613][ T5908] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.686098][ T5908] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 491.697135][ T5908] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 491.714473][ T5908] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 491.725915][ T5908] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.740844][ T5908] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.750695][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.367948][ T5908] usb 4-1: can't set config #16, error -71 [ 494.377272][ T5908] usb 4-1: USB disconnect, device number 14 [ 500.600765][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.582'. [ 500.631987][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 503.353082][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.360365][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.770013][ T5913] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 505.581372][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 506.389939][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 506.452354][ T5913] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 506.479878][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 506.509951][ T5913] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 506.531638][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 506.580109][ T5913] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.629907][ T5913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 506.639481][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.720803][ T5913] usb 3-1: can't set config #16, error -71 [ 506.754799][ T5913] usb 3-1: USB disconnect, device number 16 [ 506.873641][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 506.894341][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 507.140074][ T5913] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 507.407048][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 507.450858][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.491683][ T5913] usb 3-1: config 0 descriptor?? [ 507.507346][ T5913] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 507.700173][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 507.900162][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 507.921917][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.978019][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.994046][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 508.009016][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 508.028468][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.051103][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.064045][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.290675][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 508.296940][ T8] usbtmc 5-1:16.0: can't read capabilities [ 508.508920][ T8] usb 5-1: USB disconnect, device number 3 [ 512.819948][ T5913] usb 3-1: USB disconnect, device number 17 [ 519.207900][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.594'. [ 519.217697][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 519.750117][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 519.830073][ T5905] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 519.950343][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 519.960169][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 520.040759][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 520.069875][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 520.104003][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 520.134514][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 523.035142][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.061476][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.080939][ T5905] usb 2-1: config 0 descriptor?? [ 523.120200][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 523.169418][ T5905] usb 2-1: can't set config #0, error -71 [ 523.182408][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.220193][ T5905] usb 2-1: USB disconnect, device number 12 [ 523.251119][ T23] usb 4-1: can't set config #16, error -71 [ 523.289400][ T23] usb 4-1: USB disconnect, device number 15 [ 524.667784][ T8564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.613'. [ 524.705279][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 527.799966][ T5908] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 530.283634][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 531.143071][ T5908] usb 3-1: device descriptor read/all, error -71 [ 531.349937][ T5817] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 536.172431][ T5817] usb 4-1: device descriptor read/all, error -71 [ 537.659739][ T8630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.630'. [ 538.559972][ T5910] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 541.487280][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 541.554032][ T8639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.624'. [ 541.622124][ T5910] usb 2-1: device descriptor read/all, error -71 [ 545.055040][ T5910] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 548.693870][ T8677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.640'. [ 549.451104][ T966] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 549.850990][ T966] usb 3-1: Using ep0 maxpacket: 8 [ 550.047774][ T966] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 550.395246][ T966] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 550.610165][ T966] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 550.644911][ T966] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 550.689529][ T966] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.727248][ T966] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 550.760063][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.801028][ T966] usb 3-1: usb_control_msg returned -71 [ 553.806747][ T966] usbtmc 3-1:16.0: can't read capabilities [ 554.239431][ T966] usb 3-1: USB disconnect, device number 20 [ 554.610186][ T8066] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 554.618675][ T8709] netlink: 36 bytes leftover after parsing attributes in process `syz.3.646'. [ 557.783701][ T8066] usb 5-1: Using ep0 maxpacket: 8 [ 557.828847][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 557.855061][ T8066] usb 5-1: device descriptor read/all, error -71 [ 558.058710][ T8723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.651'. [ 559.110211][ T8066] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 559.319969][ T8066] usb 5-1: Using ep0 maxpacket: 8 [ 559.341806][ T8066] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 559.372339][ T8066] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 559.404995][ T8066] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 561.265858][ T8066] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 561.290693][ T8066] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 561.306412][ T8066] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 561.317351][ T8066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.505992][ T8066] usb 5-1: can't set config #16, error -71 [ 561.525423][ T8066] usb 5-1: USB disconnect, device number 5 [ 561.779553][ T8738] nbd2: detected capacity change from 0 to 63 [ 561.856895][ T8748] block nbd2: NBD_DISCONNECT [ 562.020305][ T5817] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 564.101449][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.108657][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 564.119003][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.139700][ T8748] block nbd2: Disconnected due to user request. [ 564.979932][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 565.021210][ T5817] usb 4-1: device descriptor read/all, error -71 [ 565.028569][ T8748] block nbd2: shutting down sockets [ 565.092214][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 565.102099][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 565.110227][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 565.119571][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 565.127645][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 565.135621][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 565.145433][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 565.155478][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 565.164573][ T55] Buffer I/O error on dev nbd2, logical block 1, async page read [ 565.172531][ T55] Buffer I/O error on dev nbd2, logical block 2, async page read [ 565.181232][ T55] Buffer I/O error on dev nbd2, logical block 3, async page read [ 565.200017][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 565.210317][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 565.218661][ T55] Buffer I/O error on dev nbd2, logical block 1, async page read [ 565.228456][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 565.238188][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 565.248377][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 565.258461][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 565.272495][ T1091] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 565.348287][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 565.358315][ T6016] ldm_validate_partition_table(): Disk read failed. [ 565.400289][ T6016] Dev nbd2: unable to read RDB block 0 [ 565.412519][ T6016] nbd2: unable to read partition table [ 565.428902][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 565.484022][ T6016] ldm_validate_partition_table(): Disk read failed. [ 565.493771][ T6016] Dev nbd2: unable to read RDB block 0 [ 565.502486][ T6016] nbd2: unable to read partition table [ 565.591579][ T8766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.663'. [ 571.328784][ T8780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.661'. [ 572.343626][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 575.622967][ T8809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.674'. [ 576.230050][ T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 576.429958][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 576.449343][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 576.479704][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 576.645056][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 576.657188][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 578.875535][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.889419][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 578.889434][ T8466] Bluetooth: hci4: command 0x1003 tx timeout [ 578.904433][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.906259][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 578.915518][ T8823] nbd4: detected capacity change from 0 to 63 [ 578.976579][ T8827] block nbd4: NBD_DISCONNECT [ 579.001864][ T8827] block nbd4: Disconnected due to user request. [ 579.008369][ T8827] block nbd4: shutting down sockets [ 579.019926][ C0] blk_print_req_error: 86 callbacks suppressed [ 579.019945][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 579.035610][ C0] buffer_io_error: 138 callbacks suppressed [ 579.035624][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 579.049572][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 579.050043][ T23] usb 3-1: can't set config #16, error -71 [ 579.057723][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 579.071804][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 579.093637][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 579.103421][ T55] Buffer I/O error on dev nbd4, logical block 0, async page read [ 579.111577][ T55] Buffer I/O error on dev nbd4, logical block 1, async page read [ 579.119706][ T55] Buffer I/O error on dev nbd4, logical block 2, async page read [ 579.128310][ T55] Buffer I/O error on dev nbd4, logical block 3, async page read [ 579.137412][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 579.146969][ T55] Buffer I/O error on dev nbd4, logical block 0, async page read [ 579.156119][ T55] Buffer I/O error on dev nbd4, logical block 1, async page read [ 579.163553][ T23] usb 3-1: USB disconnect, device number 21 [ 579.170161][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 579.179716][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.192317][ T55] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 579.202268][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.211635][ T55] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.221097][ T55] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.230959][ T55] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.241576][ T6016] ldm_validate_partition_table(): Disk read failed. [ 579.251139][ T6016] Dev nbd4: unable to read RDB block 0 [ 579.259377][ T6016] nbd4: unable to read partition table [ 579.296486][ T6016] ldm_validate_partition_table(): Disk read failed. [ 579.322658][ T6016] Dev nbd4: unable to read RDB block 0 [ 579.368873][ T6016] nbd4: unable to read partition table [ 579.639561][ T8835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.679'. [ 579.829026][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 580.563807][ T8843] netlink: 132 bytes leftover after parsing attributes in process `syz.1.684'. [ 589.467665][ T8879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.696'. [ 589.782713][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 590.025806][ T8891] netlink: 132 bytes leftover after parsing attributes in process `syz.4.702'. [ 590.166767][ T8889] netlink: 36 bytes leftover after parsing attributes in process `syz.2.692'. [ 590.407599][ T8897] nbd1: detected capacity change from 0 to 63 [ 592.836910][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 592.844022][ T8755] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 592.973815][ T5785] block nbd1: Receive control failed (result -104) [ 598.244718][ T8930] netlink: 132 bytes leftover after parsing attributes in process `syz.2.705'. [ 598.738450][ T8936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.707'. [ 599.047912][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 601.254054][ T1148] Bluetooth: hci4: Frame reassembly failed (-84) [ 601.490069][ T8956] nbd4: detected capacity change from 0 to 63 [ 601.553019][ T8957] block nbd4: NBD_DISCONNECT [ 601.572258][ T8957] block nbd4: Disconnected due to user request. [ 601.592577][ T8957] block nbd4: shutting down sockets [ 601.642755][ C0] blk_print_req_error: 84 callbacks suppressed [ 601.642776][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 601.658939][ C0] buffer_io_error: 138 callbacks suppressed [ 601.658955][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 601.673030][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 601.682346][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 601.690269][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 601.699519][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 601.707627][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 601.717270][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 601.761149][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.771100][ T55] Buffer I/O error on dev nbd4, logical block 0, async page read [ 601.779175][ T55] Buffer I/O error on dev nbd4, logical block 1, async page read [ 601.790091][ T55] Buffer I/O error on dev nbd4, logical block 2, async page read [ 601.797983][ T55] Buffer I/O error on dev nbd4, logical block 3, async page read [ 601.817166][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.826819][ T55] Buffer I/O error on dev nbd4, logical block 0, async page read [ 601.835517][ T55] Buffer I/O error on dev nbd4, logical block 1, async page read [ 601.844000][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.853763][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.863969][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.875009][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 601.884639][ T5779] ldm_validate_partition_table(): Disk read failed. [ 601.892277][ T5779] Dev nbd4: unable to read RDB block 0 [ 601.898917][ T5779] nbd4: unable to read partition table [ 601.911201][ T5779] ldm_validate_partition_table(): Disk read failed. [ 601.919131][ T5779] Dev nbd4: unable to read RDB block 0 [ 601.926437][ T5779] nbd4: unable to read partition table [ 604.928602][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 604.928636][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 607.083814][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.716'. [ 607.160356][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 607.170465][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 607.181464][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 607.190948][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 610.221155][ T8992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.715'. [ 616.184631][ T9030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.727'. [ 616.880139][ T5815] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 616.958787][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 616.992765][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 617.003980][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 617.014587][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 617.220090][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 617.236267][ T5815] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 617.248116][ T5815] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 617.258548][ T5815] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 617.269542][ T5815] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 617.280499][ T5815] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.389909][ T5815] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 617.400164][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.532218][ T5815] usbtmc: probe of 3-1:16.0 failed with error -22 [ 619.729075][ T5815] usb 3-1: USB disconnect, device number 22 [ 619.763464][ T9047] netlink: 132 bytes leftover after parsing attributes in process `syz.3.729'. [ 622.461898][ T1091] block nbd1: Possible stuck request ffff888022070000: control (read@0,1024B). Runtime 30 seconds [ 622.475965][ T1091] block nbd1: Possible stuck request ffff888022070200: control (read@1024,1024B). Runtime 30 seconds [ 623.027459][ T1091] block nbd1: Possible stuck request ffff888022070400: control (read@2048,1024B). Runtime 30 seconds [ 623.038866][ T1091] block nbd1: Possible stuck request ffff888022070600: control (read@3072,1024B). Runtime 30 seconds [ 625.629460][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.635927][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.642580][ T9070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.738'. [ 629.338108][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 629.555505][ T9107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.745'. [ 629.684843][ T9101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.749'. [ 629.791452][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 630.588982][ T9121] netlink: 124 bytes leftover after parsing attributes in process `syz.2.758'. [ 631.113835][ T9130] o2cb: This node has not been configured. [ 631.120584][ T9130] o2cb: Cluster check failed. Fix errors before retrying. [ 631.128131][ T9130] (syz.3.750,9130,0):user_dlm_register:674 ERROR: status = -22 [ 631.136346][ T9130] (syz.3.750,9130,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 634.459913][ T5910] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 635.188710][ T9142] syz.2.754: attempt to access beyond end of device [ 635.188710][ T9142] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 635.202253][ T9142] vxfs: unable to read disk superblock at 1 [ 635.209826][ T9142] syz.2.754: attempt to access beyond end of device [ 635.209826][ T9142] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 635.235900][ T9142] vxfs: unable to read disk superblock at 8 [ 635.242382][ T9142] vxfs: can't find superblock. [ 638.440757][ T9153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.756'. [ 638.449679][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 639.750783][ T9163] o2cb: This node has not been configured. [ 639.757103][ T9163] o2cb: Cluster check failed. Fix errors before retrying. [ 639.764487][ T9163] (syz.4.764,9163,0):user_dlm_register:674 ERROR: status = -22 [ 639.772683][ T9163] (syz.4.764,9163,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 641.954982][ T9179] netlink: 124 bytes leftover after parsing attributes in process `syz.4.763'. [ 642.114213][ T5905] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 642.343116][ T9183] netlink: 124 bytes leftover after parsing attributes in process `syz.4.773'. [ 642.352516][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 642.385518][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 642.425622][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 642.490080][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 642.553690][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 642.586168][ T5905] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.600645][ T5905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 642.697106][ T9189] syz.3.765: attempt to access beyond end of device [ 642.697106][ T9189] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 642.710412][ T9189] vxfs: unable to read disk superblock at 1 [ 642.717814][ T9189] syz.3.765: attempt to access beyond end of device [ 642.717814][ T9189] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 642.731199][ T9189] vxfs: unable to read disk superblock at 8 [ 642.737663][ T9189] vxfs: can't find superblock. [ 643.256848][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.379372][ T5905] usbtmc: probe of 3-1:16.0 failed with error -22 [ 644.854677][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.767'. [ 644.864291][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'. [ 646.015596][ T5910] usb 3-1: USB disconnect, device number 23 [ 653.083329][ T1091] block nbd1: Possible stuck request ffff888022070000: control (read@0,1024B). Runtime 60 seconds [ 653.098170][ T1091] block nbd1: Possible stuck request ffff888022070200: control (read@1024,1024B). Runtime 60 seconds [ 653.110929][ T1091] block nbd1: Possible stuck request ffff888022070400: control (read@2048,1024B). Runtime 60 seconds [ 653.122976][ T1091] block nbd1: Possible stuck request ffff888022070600: control (read@3072,1024B). Runtime 60 seconds [ 653.480938][ T9239] o2cb: This node has not been configured. [ 653.487061][ T9239] o2cb: Cluster check failed. Fix errors before retrying. [ 653.494655][ T9239] (syz.1.772,9239,1):user_dlm_register:674 ERROR: status = -22 [ 653.502522][ T9239] (syz.1.772,9239,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 654.127456][ T9243] netlink: 132 bytes leftover after parsing attributes in process `syz.2.776'. [ 655.599972][ T23] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 655.770204][ T23] usb 3-1: device descriptor read/64, error -71 [ 655.954173][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.780'. [ 655.963916][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 656.140437][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 659.121968][ T23] usb 3-1: device descriptor read/64, error -71 [ 659.260420][ T23] usb usb3-port1: attempt power cycle [ 659.851864][ T9278] o2cb: This node has not been configured. [ 659.857912][ T9278] o2cb: Cluster check failed. Fix errors before retrying. [ 659.865703][ T9278] (syz.2.785,9278,1):user_dlm_register:674 ERROR: status = -22 [ 659.873764][ T9278] (syz.2.785,9278,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 666.213392][ T9300] netlink: 132 bytes leftover after parsing attributes in process `syz.4.790'. [ 667.057482][ T5908] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 667.360488][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 667.368093][ T9308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.793'. [ 667.381254][ T9313] comedi comedi0: Minor 3 could not be opened [ 667.387550][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 667.427916][ T5908] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 667.481004][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.532811][ T5908] usb 4-1: config 0 has no interfaces? [ 667.540743][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.557960][ T5908] usb 4-1: config 0 has no interfaces? [ 667.580081][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.607744][ T5908] usb 4-1: config 0 has no interfaces? [ 667.622699][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.638595][ T5908] usb 4-1: config 0 has no interfaces? [ 667.646141][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.666676][ T5908] usb 4-1: config 0 has no interfaces? [ 667.681925][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.700063][ T5908] usb 4-1: config 0 has no interfaces? [ 667.710448][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.736784][ T5908] usb 4-1: config 0 has no interfaces? [ 667.772184][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.800040][ T5908] usb 4-1: config 0 has no interfaces? [ 667.812546][ T5908] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 667.826070][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 667.835067][ T5908] usb 4-1: Product: syz [ 667.839306][ T5908] usb 4-1: Manufacturer: syz [ 667.849498][ T5908] usb 4-1: SerialNumber: syz [ 667.869864][ T5908] usb 4-1: config 0 descriptor?? [ 668.142134][ T966] usb 4-1: USB disconnect, device number 20 [ 668.189637][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 669.299971][ T23] usb 5-1: device descriptor read/64, error -71 [ 671.639885][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 671.863956][ T9341] netlink: 132 bytes leftover after parsing attributes in process `syz.4.801'. [ 673.140482][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 673.152377][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 673.177633][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 673.192455][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 673.211848][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 673.223064][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 674.050076][ T9360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.804'. [ 674.085084][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 674.299219][ T9346] chnl_net:caif_netlink_parms(): no params data found [ 674.534167][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.542894][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.550908][ T9346] bridge_slave_0: entered allmulticast mode [ 674.558497][ T9346] bridge_slave_0: entered promiscuous mode [ 674.567269][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.576359][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.584549][ T9346] bridge_slave_1: entered allmulticast mode [ 674.596935][ T9346] bridge_slave_1: entered promiscuous mode [ 674.720217][ T5815] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 674.728302][ T23] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 674.911101][ T23] usb 3-1: device descriptor read/64, error -71 [ 674.939827][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 674.989362][ T5815] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 675.087089][ T9346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.113722][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.134025][ T9346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.144346][ T5815] usb 5-1: config 0 has no interfaces? [ 675.162621][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.185831][ T5815] usb 5-1: config 0 has no interfaces? [ 675.206986][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.228444][ T5815] usb 5-1: config 0 has no interfaces? [ 675.234700][ T23] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 675.251351][ T51] Bluetooth: hci4: command tx timeout [ 675.289470][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.324307][ T5815] usb 5-1: config 0 has no interfaces? [ 675.337094][ T9346] team0: Port device team_slave_0 added [ 675.349222][ T9346] team0: Port device team_slave_1 added [ 675.352045][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.385967][ T5815] usb 5-1: config 0 has no interfaces? [ 675.388689][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.401248][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.406004][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.439370][ T9346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.450631][ T23] usb 3-1: device descriptor read/64, error -71 [ 675.456344][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.461196][ T5815] usb 5-1: config 0 has no interfaces? [ 675.469126][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.472917][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.513849][ T9346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.529809][ T5815] usb 5-1: config 0 has no interfaces? [ 675.550695][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.570229][ T23] usb usb3-port1: attempt power cycle [ 675.576453][ T5815] usb 5-1: config 0 has no interfaces? [ 675.585415][ T5815] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 675.595843][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 675.615749][ T5815] usb 5-1: Product: syz [ 675.625897][ T5815] usb 5-1: Manufacturer: syz [ 675.633064][ T9346] hsr_slave_0: entered promiscuous mode [ 675.638971][ T5815] usb 5-1: SerialNumber: syz [ 675.648080][ T9346] hsr_slave_1: entered promiscuous mode [ 675.658922][ T9346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.667803][ T9346] Cannot create hsr debugfs directory [ 675.678959][ T5815] usb 5-1: config 0 descriptor?? [ 675.979990][ T23] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 676.077758][ T23] usb 3-1: device descriptor read/8, error -71 [ 676.420176][ T23] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 676.483948][ T23] usb 3-1: device descriptor read/8, error -71 [ 676.507165][ T5815] usb 5-1: USB disconnect, device number 9 [ 676.599004][ T9346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 676.614344][ T23] usb usb3-port1: unable to enumerate USB device [ 676.623128][ T9346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 676.639079][ T9346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 676.656440][ T9346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 676.772799][ T9346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.803750][ T9346] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.818584][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.826126][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.864923][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.872731][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.045270][ T9390] comedi comedi0: Minor 3 could not be opened [ 677.321685][ T51] Bluetooth: hci4: command tx timeout [ 678.098629][ T9402] netlink: 'syz.2.814': attribute type 4 has an invalid length. [ 678.106696][ T9402] netlink: 17 bytes leftover after parsing attributes in process `syz.2.814'. [ 678.426910][ T9402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.814'. [ 679.237094][ T9346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.403639][ T51] Bluetooth: hci4: command tx timeout [ 679.941215][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.817'. [ 679.988424][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 680.449354][ T9346] veth0_vlan: entered promiscuous mode [ 680.485815][ T9346] veth1_vlan: entered promiscuous mode [ 680.541246][ T9346] veth0_macvtap: entered promiscuous mode [ 680.556419][ T9346] veth1_macvtap: entered promiscuous mode [ 680.655805][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.688668][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.724322][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.758539][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.779559][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.790750][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.849170][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.372896][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.480338][ T51] Bluetooth: hci4: command tx timeout [ 681.699830][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.723014][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.739891][ T5905] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 681.741839][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.761274][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.778661][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.793814][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.824468][ T9346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.833565][ T9346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.852698][ T9346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.862693][ T9346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.923502][ T5905] usb 3-1: device descriptor read/64, error -71 [ 681.946776][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.963066][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.988781][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.996869][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.333127][ T5905] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 682.492088][ T5905] usb 3-1: device descriptor read/64, error -71 [ 682.758657][ T5905] usb usb3-port1: attempt power cycle [ 683.633848][ T1091] block nbd1: Possible stuck request ffff888022070000: control (read@0,1024B). Runtime 90 seconds [ 683.646350][ T1091] block nbd1: Possible stuck request ffff888022070200: control (read@1024,1024B). Runtime 90 seconds [ 683.658223][ T1091] block nbd1: Possible stuck request ffff888022070400: control (read@2048,1024B). Runtime 90 seconds [ 683.673642][ T1091] block nbd1: Possible stuck request ffff888022070600: control (read@3072,1024B). Runtime 90 seconds [ 684.000311][ T5905] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 684.386379][ T5905] usb 3-1: device descriptor read/8, error -71 [ 684.647371][ T9476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.830'. [ 684.661537][ T5910] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 684.674465][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 684.870708][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 684.877591][ T5910] usb 6-1: too many configurations: 60, using maximum allowed: 8 [ 684.888812][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.899967][ T5910] usb 6-1: config 0 has no interfaces? [ 684.907561][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.919155][ T5910] usb 6-1: config 0 has no interfaces? [ 684.926666][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.937474][ T5910] usb 6-1: config 0 has no interfaces? [ 684.946021][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.956931][ T5910] usb 6-1: config 0 has no interfaces? [ 684.966676][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.978147][ T5910] usb 6-1: config 0 has no interfaces? [ 684.985797][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.997138][ T5910] usb 6-1: config 0 has no interfaces? [ 685.004470][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.015888][ T5910] usb 6-1: config 0 has no interfaces? [ 685.022726][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.033335][ T5910] usb 6-1: config 0 has no interfaces? [ 685.042053][ T5910] usb 6-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 685.051605][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 685.060697][ T5910] usb 6-1: Product: syz [ 685.065255][ T5910] usb 6-1: Manufacturer: syz [ 685.070122][ T5910] usb 6-1: SerialNumber: syz [ 685.077184][ T5910] usb 6-1: config 0 descriptor?? [ 685.320831][ T5817] usb 6-1: USB disconnect, device number 2 [ 685.973865][ T9484] netlink: 'syz.3.839': attribute type 4 has an invalid length. [ 685.982233][ T9484] netlink: 17 bytes leftover after parsing attributes in process `syz.3.839'. [ 686.265262][ T9484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.839'. [ 686.545631][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.564348][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.141037][ T9494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.845'. [ 688.162357][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.845'. [ 688.356453][ T9498] comedi comedi0: Minor 3 could not be opened [ 689.274904][ T5908] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 689.644013][ T5908] usb 3-1: device descriptor read/64, error -71 [ 689.950047][ T5908] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 690.129938][ T5908] usb 3-1: device descriptor read/64, error -71 [ 690.178200][ T9531] netlink: 'syz.5.852': attribute type 4 has an invalid length. [ 690.186893][ T9531] netlink: 17 bytes leftover after parsing attributes in process `syz.5.852'. [ 690.299350][ T5908] usb usb3-port1: attempt power cycle [ 690.343710][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 690.502787][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.5.852'. [ 691.060317][ T5908] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 691.182218][ T5908] usb 3-1: device descriptor read/8, error -71 [ 691.492285][ T5908] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 691.692546][ T5908] usb 3-1: device descriptor read/8, error -71 [ 691.779340][ T9538] comedi comedi0: Minor 3 could not be opened [ 691.870837][ T5908] usb usb3-port1: unable to enumerate USB device [ 692.960112][ T5910] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 693.191605][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.218466][ T5910] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 693.249542][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.266568][ T5910] usb 4-1: config 0 descriptor?? [ 693.287289][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 693.392034][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.863'. [ 693.560166][ T5905] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 693.587491][ T9571] netlink: 'syz.2.865': attribute type 4 has an invalid length. [ 693.595913][ T9571] netlink: 17 bytes leftover after parsing attributes in process `syz.2.865'. [ 693.669618][ T9571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.865'. [ 693.875500][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 694.000860][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 694.105614][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 694.208099][ T5910] pwc: recv_control_msg error -32 req 04 val 1000 [ 694.282788][ T5910] pwc: recv_control_msg error -32 req 04 val 1300 [ 694.381832][ T5910] pwc: recv_control_msg error -32 req 04 val 1400 [ 694.478760][ T5910] pwc: recv_control_msg error -32 req 02 val 2000 [ 694.577131][ T5910] pwc: recv_control_msg error -32 req 02 val 2100 [ 694.602395][ T5910] pwc: recv_control_msg error -32 req 04 val 1500 [ 694.732985][ T5910] pwc: recv_control_msg error -32 req 02 val 2500 [ 694.740029][ T5905] usb 5-1: device descriptor read/64, error -71 [ 694.822717][ T5910] pwc: recv_control_msg error -32 req 02 val 2400 [ 695.019952][ T5905] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 695.179991][ T5905] usb 5-1: device descriptor read/64, error -71 [ 695.187878][ T5910] pwc: recv_control_msg error -71 req 02 val 2900 [ 695.256466][ T5910] pwc: recv_control_msg error -71 req 02 val 2800 [ 695.272986][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 695.297839][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 695.308433][ T5905] usb usb5-port1: attempt power cycle [ 695.372223][ T5910] pwc: Registered as video103. [ 695.406723][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 695.451827][ T5910] usb 4-1: USB disconnect, device number 21 [ 695.502673][ T5787] udevd[5787]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 695.968076][ T5905] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 696.758997][ T5905] usb 5-1: device descriptor read/8, error -71 [ 697.191122][ T9601] comedi comedi0: Minor 3 could not be opened [ 697.541260][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 698.778653][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 699.376222][ T5905] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 699.606702][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 699.619508][ T5905] usb 4-1: config 16 has an invalid interface number: 48 but max is 0 [ 699.651191][ T5905] usb 4-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 699.686493][ T5905] usb 4-1: config 16 has no interface number 0 [ 699.693544][ T5905] usb 4-1: too many endpoints for config 16 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 699.711393][ T5905] usb 4-1: config 16 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 700.890934][ T5905] usb 4-1: config 16 interface 48 has no altsetting 0 [ 700.899195][ T5905] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 700.914279][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.144419][ T9641] comedi comedi0: Minor 3 could not be opened [ 701.318182][ T5905] usb 4-1: string descriptor 0 read error: -71 [ 701.386159][ T5905] usb 4-1: USB disconnect, device number 22 [ 704.184227][ T9680] comedi comedi0: Minor 3 could not be opened [ 705.330105][ T8066] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 706.050876][ T5905] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 706.271905][ T8066] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.290441][ T8066] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 706.306856][ T8066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.333176][ T8066] usb 3-1: config 0 descriptor?? [ 706.386631][ T8066] pwc: Askey VC010 type 2 USB webcam detected. [ 706.620119][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 706.628442][ T5905] usb 4-1: config 16 has an invalid interface number: 48 but max is 0 [ 706.642272][ T5905] usb 4-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 706.652858][ T5905] usb 4-1: config 16 has no interface number 0 [ 706.659347][ T5905] usb 4-1: too many endpoints for config 16 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 706.671239][ T5905] usb 4-1: config 16 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 706.685259][ T5905] usb 4-1: config 16 interface 48 has no altsetting 0 [ 706.829988][ T8066] pwc: recv_control_msg error -32 req 02 val 2b00 [ 706.879998][ T8066] pwc: recv_control_msg error -32 req 02 val 2700 [ 706.934811][ T8066] pwc: recv_control_msg error -32 req 02 val 2c00 [ 706.996155][ T8066] pwc: recv_control_msg error -32 req 04 val 1000 [ 707.053476][ T8066] pwc: recv_control_msg error -32 req 04 val 1300 [ 707.124136][ T8066] pwc: recv_control_msg error -32 req 04 val 1400 [ 707.181468][ T8066] pwc: recv_control_msg error -32 req 02 val 2000 [ 707.261112][ T8066] pwc: recv_control_msg error -32 req 02 val 2100 [ 707.278029][ T8066] pwc: recv_control_msg error -32 req 04 val 1500 [ 707.293304][ T8066] pwc: recv_control_msg error -32 req 02 val 2500 [ 707.310872][ T8066] pwc: recv_control_msg error -32 req 02 val 2400 [ 707.419851][ T5905] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 707.429149][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.531114][ T8066] pwc: recv_control_msg error -71 req 02 val 2900 [ 707.573101][ T8066] pwc: recv_control_msg error -71 req 02 val 2800 [ 707.602673][ T8066] pwc: recv_control_msg error -71 req 04 val 1100 [ 707.647418][ T8066] pwc: recv_control_msg error -71 req 04 val 1200 [ 707.684374][ T5905] usb 4-1: string descriptor 0 read error: -71 [ 707.691015][ T8066] pwc: Registered as video103. [ 707.720847][ T5905] usb 4-1: USB disconnect, device number 23 [ 707.728424][ T8066] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 707.804081][ T8066] usb 3-1: USB disconnect, device number 39 [ 710.555508][ T9748] comedi comedi0: Minor 3 could not be opened [ 710.747904][ T9752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.918'. [ 711.714329][ T966] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 711.920182][ T966] usb 3-1: Using ep0 maxpacket: 8 [ 711.930770][ T966] usb 3-1: config 16 has an invalid interface number: 48 but max is 0 [ 711.950092][ T966] usb 3-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 711.971473][ T966] usb 3-1: config 16 has no interface number 0 [ 711.978585][ T966] usb 3-1: too many endpoints for config 16 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 712.016369][ T966] usb 3-1: config 16 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 712.039098][ T966] usb 3-1: config 16 interface 48 has no altsetting 0 [ 712.096040][ T966] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 712.203339][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.655439][ T966] usb 3-1: string descriptor 0 read error: -71 [ 712.740216][ T966] usb 3-1: USB disconnect, device number 40 [ 712.871425][ T9776] comedi comedi0: Minor 3 could not be opened [ 713.710292][ T966] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 713.961287][ T966] usb 3-1: Using ep0 maxpacket: 32 [ 713.978473][ T966] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 713.997883][ T966] usb 3-1: config 0 has no interface number 0 [ 714.017180][ T966] usb 3-1: config 0 interface 184 has no altsetting 0 [ 714.029092][ T966] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 714.044572][ T966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.057377][ T966] usb 3-1: Product: syz [ 714.150023][ T5905] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 714.267438][ T966] usb 3-1: Manufacturer: syz [ 714.267788][ T1091] block nbd1: Possible stuck request ffff888022070000: control (read@0,1024B). Runtime 120 seconds [ 714.273350][ T966] usb 3-1: SerialNumber: syz [ 714.291438][ T966] usb 3-1: config 0 descriptor?? [ 714.291741][ T1091] block nbd1: Possible stuck request ffff888022070200: control (read@1024,1024B). Runtime 120 seconds [ 714.311140][ T1091] block nbd1: Possible stuck request ffff888022070400: control (read@2048,1024B). Runtime 120 seconds [ 714.323989][ T1091] block nbd1: Possible stuck request ffff888022070600: control (read@3072,1024B). Runtime 120 seconds [ 714.327197][ T966] smsc75xx v1.0.0 [ 714.342053][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.359970][ T5905] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 714.369521][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.428371][ T5905] usb 6-1: config 0 descriptor?? [ 714.494038][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 715.088850][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 715.105378][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 715.115558][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00 [ 715.143086][ T5905] pwc: recv_control_msg error -32 req 04 val 1000 [ 715.155380][ T5905] pwc: recv_control_msg error -32 req 04 val 1300 [ 715.168987][ T5905] pwc: recv_control_msg error -32 req 04 val 1400 [ 715.187427][ T5905] pwc: recv_control_msg error -32 req 02 val 2000 [ 715.196389][ T5905] pwc: recv_control_msg error -32 req 02 val 2100 [ 715.208740][ T5905] pwc: recv_control_msg error -32 req 04 val 1500 [ 715.218201][ T5905] pwc: recv_control_msg error -32 req 02 val 2500 [ 715.226729][ T5905] pwc: recv_control_msg error -32 req 02 val 2400 [ 715.329582][ T966] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 715.341575][ T966] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 715.444922][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 715.476595][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 715.492742][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 715.511496][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 715.528969][ T5905] pwc: Registered as video103. [ 715.557215][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 715.579059][ T966] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 715.643691][ T5905] usb 6-1: USB disconnect, device number 3 [ 715.666989][ T966] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 715.775431][ T966] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 715.907856][ T966] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 716.520094][ T966] usb 3-1: USB disconnect, device number 41 [ 718.278999][ T9827] comedi comedi0: Minor 3 could not be opened [ 718.310549][ T5905] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 718.510200][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 718.561482][ T5905] usb 5-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 718.678318][ T5905] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.979640][ T5905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 718.992880][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.052891][ T5905] usbtmc 5-1:16.0: bulk endpoints not found [ 720.861998][ T5907] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 721.226417][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.289308][ T5907] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 721.323621][ T8066] usb 5-1: USB disconnect, device number 14 [ 721.340114][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.412656][ T5907] usb 4-1: config 0 descriptor?? [ 721.514861][ T5907] pwc: Askey VC010 type 2 USB webcam detected. [ 721.565463][ T9855] comedi comedi0: Minor 3 could not be opened [ 722.059962][ T5907] pwc: recv_control_msg error -32 req 02 val 2b00 [ 722.109001][ T5907] pwc: recv_control_msg error -32 req 02 val 2700 [ 722.127102][ T5907] pwc: recv_control_msg error -32 req 02 val 2c00 [ 722.809667][ T5907] pwc: recv_control_msg error -32 req 04 val 1000 [ 722.860487][ T9867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.952'. [ 722.864764][ T5907] pwc: recv_control_msg error -32 req 04 val 1300 [ 722.910624][ T5907] pwc: recv_control_msg error -32 req 04 val 1400 [ 722.931210][ T5907] pwc: recv_control_msg error -32 req 02 val 2000 [ 722.945564][ T5907] pwc: recv_control_msg error -32 req 02 val 2100 [ 722.961283][ T5907] pwc: recv_control_msg error -32 req 04 val 1500 [ 722.990033][ T5907] pwc: recv_control_msg error -32 req 02 val 2500 [ 723.006064][ T5907] pwc: recv_control_msg error -32 req 02 val 2400 [ 723.216376][ T5907] pwc: recv_control_msg error -71 req 02 val 2900 [ 723.229900][ T5907] pwc: recv_control_msg error -71 req 02 val 2800 [ 723.243350][ T5907] pwc: recv_control_msg error -71 req 04 val 1100 [ 723.252526][ T5907] pwc: recv_control_msg error -71 req 04 val 1200 [ 723.265505][ T5907] pwc: Registered as video103. [ 723.273472][ T5907] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 723.304194][ T5907] usb 4-1: USB disconnect, device number 24 [ 724.490581][ T5815] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 724.729847][ T5815] usb 6-1: Using ep0 maxpacket: 8 [ 724.749654][ T5815] usb 6-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 724.762823][ T5815] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.780108][ T5815] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 724.790381][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.864140][ T5815] usbtmc 6-1:16.0: bulk endpoints not found [ 725.986907][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.961'. [ 726.273862][ T9904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.963'. [ 726.581837][ T9908] comedi comedi0: Minor 3 could not be opened [ 727.058984][ T9910] vivid-007: disconnect [ 727.068873][ T9910] vivid-007: reconnect [ 727.424131][ T5817] usb 6-1: USB disconnect, device number 4 [ 729.749126][ T9941] hsr0: entered promiscuous mode [ 729.812096][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.972'. [ 730.094123][ T9951] comedi comedi0: Minor 3 could not be opened [ 730.560482][ T9940] netlink: 36 bytes leftover after parsing attributes in process `syz.2.974'. [ 730.897565][ T9941] QAT: Stopping all acceleration devices. [ 731.067553][ T9957] overlayfs: upper fs does not support tmpfile. [ 731.390000][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 731.579923][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 731.600158][ T23] usb 6-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 731.611651][ T23] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.629540][ T23] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 731.641057][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.726158][ T23] usbtmc 6-1:16.0: bulk endpoints not found [ 734.086281][ T9988] input: syz0 as /devices/virtual/input/input11 [ 734.211530][ T9989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.985'. [ 734.312257][ T5817] usb 6-1: USB disconnect, device number 5 [ 734.599618][ T9993] comedi comedi0: Minor 3 could not be opened [ 735.091028][ T9995] dlm: plock device version mismatch: kernel (1.2.0), user (1.1048576.0) [ 737.169899][ T5815] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 737.356838][T10031] comedi comedi0: Minor 3 could not be opened [ 737.362444][T10034] netlink: 36 bytes leftover after parsing attributes in process `syz.5.996'. [ 737.372868][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 737.392829][ T5815] usb 5-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 737.410196][ T5815] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.428153][ T5815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 737.438941][ T5815] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 737.460263][ T5815] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 737.470881][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.541074][ T5815] usbtmc 5-1:16.0: bulk endpoints not found [ 738.535997][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.999'. [ 739.428776][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1005'. [ 740.522234][ T23] usb 5-1: USB disconnect, device number 15 [ 740.571678][T10069] binder: BINDER_SET_CONTEXT_MGR already set [ 740.588754][T10069] binder: 10068:10069 ioctl 4018620d 200000004a80 returned -16 [ 741.594814][T10073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1009'. [ 741.899353][T10084] comedi comedi0: Minor 3 could not be opened [ 744.678995][T10113] o2cb: This node has not been configured. [ 744.685253][T10113] o2cb: Cluster check failed. Fix errors before retrying. [ 744.692731][T10113] (syz.5.1016,10113,0):user_dlm_register:674 ERROR: status = -22 [ 744.701167][T10113] (syz.5.1016,10113,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 744.853094][T10115] o2cb: This node has not been configured. [ 744.859015][T10115] o2cb: Cluster check failed. Fix errors before retrying. [ 744.866649][T10115] (syz.4.1019,10115,1):user_dlm_register:674 ERROR: status = -22 [ 744.875329][T10115] (syz.4.1019,10115,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 744.921371][ T5817] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 745.334969][ T1091] block nbd1: Possible stuck request ffff888022070000: control (read@0,1024B). Runtime 150 seconds [ 745.346238][ T1091] block nbd1: Possible stuck request ffff888022070200: control (read@1024,1024B). Runtime 150 seconds [ 745.358751][ T1091] block nbd1: Possible stuck request ffff888022070400: control (read@2048,1024B). Runtime 150 seconds [ 745.370511][ T1091] block nbd1: Possible stuck request ffff888022070600: control (read@3072,1024B). Runtime 150 seconds [ 745.409992][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 745.425001][ T5817] usb 3-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 745.446573][ T5817] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 745.471116][ T5817] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 745.490895][ T5817] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 745.515257][ T5817] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 745.528043][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.537578][T10122] comedi comedi0: Minor 3 could not be opened [ 745.976214][ T5817] usbtmc 3-1:16.0: bulk endpoints not found [ 746.468178][T10127] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1023'. [ 746.470635][T10130] autofs4:pid:10130:autofs_fill_super: called with bogus options [ 747.599990][T10147] o2cb: This node has not been configured. [ 747.606779][T10147] o2cb: Cluster check failed. Fix errors before retrying. [ 747.614328][T10147] (syz.3.1029,10147,1):user_dlm_register:674 ERROR: status = -22 [ 747.622309][T10147] (syz.3.1029,10147,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 748.236511][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.243875][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.450250][ T8066] usb 3-1: USB disconnect, device number 42 [ 748.765918][T10155] o2cb: This node has not been configured. [ 748.772590][T10155] o2cb: Cluster check failed. Fix errors before retrying. [ 748.780792][T10155] (syz.5.1030,10155,0):user_dlm_register:674 ERROR: status = -22 [ 748.789596][T10155] (syz.5.1030,10155,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 749.982974][T10156] comedi comedi0: Minor 3 could not be opened [ 752.726989][T10138] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.734761][T10138] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.502146][T10138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.565104][T10138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.102522][T10138] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.112553][T10138] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.122731][T10138] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.134784][T10138] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.283617][T10164] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1033'. [ 754.999991][ T8] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 755.276932][T10202] o2cb: This node has not been configured. [ 755.283221][T10202] o2cb: Cluster check failed. Fix errors before retrying. [ 755.290757][T10202] (syz.4.1041,10202,0):user_dlm_register:674 ERROR: status = -22 [ 755.298957][T10202] (syz.4.1041,10202,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 756.004156][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 756.260832][ T8] usb 3-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 756.395803][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 756.405929][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 756.417422][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 756.432065][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 756.447849][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.468791][ T8] usbtmc 3-1:16.0: bulk endpoints not found [ 756.738735][T10209] o2cb: This node has not been configured. [ 756.744983][T10209] o2cb: Cluster check failed. Fix errors before retrying. [ 756.752682][T10209] (syz.3.1042,10209,0):user_dlm_register:674 ERROR: status = -22 [ 756.761266][T10209] (syz.3.1042,10209,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 758.216698][T10210] comedi comedi0: Minor 3 could not be opened [ 758.797328][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1046'. [ 759.355610][T10172] usb 3-1: USB disconnect, device number 43 [ 759.716037][T10233] comedi comedi3: rti800: I/O port conflict (0x40,16) [ 759.948495][T10239] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1051'. [ 760.119356][T10242] o2cb: This node has not been configured. [ 760.125920][T10242] o2cb: Cluster check failed. Fix errors before retrying. [ 760.133786][T10242] (syz.3.1053,10242,0):user_dlm_register:674 ERROR: status = -22 [ 760.142578][T10242] (syz.3.1053,10242,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 760.322457][T10243] o2cb: This node has not been configured. [ 760.328647][T10243] o2cb: Cluster check failed. Fix errors before retrying. [ 760.336168][T10243] (syz.2.1054,10243,0):user_dlm_register:674 ERROR: status = -22 [ 760.344129][T10243] (syz.2.1054,10243,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 760.484772][T10249] comedi comedi0: Minor 3 could not be opened [ 761.015689][T10250] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1055'. [ 761.767122][T10172] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 761.910072][T10174] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 761.969834][T10172] usb 3-1: Using ep0 maxpacket: 8 [ 761.983935][T10172] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 762.006398][T10172] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 762.025012][T10172] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 762.055443][T10172] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 762.078530][T10172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.100009][T10174] usb 5-1: Using ep0 maxpacket: 32 [ 762.118664][T10174] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 762.128793][T10172] usbtmc 3-1:16.0: bulk endpoints not found [ 762.151613][T10174] usb 5-1: config 0 has no interface number 0 [ 762.168280][T10174] usb 5-1: config 0 interface 184 has no altsetting 0 [ 762.184637][T10174] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 762.194957][T10174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.203738][T10174] usb 5-1: Product: syz [ 762.218963][T10174] usb 5-1: Manufacturer: syz [ 762.225258][T10174] usb 5-1: SerialNumber: syz [ 762.243858][T10174] usb 5-1: config 0 descriptor?? [ 762.261352][T10174] smsc75xx v1.0.0 [ 762.907762][T10174] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 762.954979][T10283] comedi comedi0: Minor 3 could not be opened [ 762.961750][T10174] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 762.973239][T10282] o2cb: This node has not been configured. [ 762.979552][T10282] o2cb: Cluster check failed. Fix errors before retrying. [ 762.987187][T10282] (syz.5.1066,10282,1):user_dlm_register:674 ERROR: status = -22 [ 762.995192][T10282] (syz.5.1066,10282,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 763.315868][T10174] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 763.379534][T10174] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 763.404750][T10174] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 763.477232][T10174] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 763.560179][T10174] usb 5-1: USB disconnect, device number 16 [ 763.977701][T10295] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1069'. [ 764.210844][T10297] o2cb: This node has not been configured. [ 764.216735][T10297] o2cb: Cluster check failed. Fix errors before retrying. [ 764.224170][T10297] (syz.3.1070,10297,0):user_dlm_register:674 ERROR: status = -22 [ 764.232312][T10297] (syz.3.1070,10297,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 764.382837][ T8] usb 3-1: USB disconnect, device number 44 [ 764.409354][T10303] binder_alloc: 10302: binder_alloc_buf, no vma [ 764.996938][T10310] comedi comedi0: Minor 3 could not be opened [ 766.062076][T10318] o2cb: This node has not been configured. [ 766.067940][T10318] o2cb: Cluster check failed. Fix errors before retrying. [ 766.075403][T10318] (syz.5.1077,10318,0):user_dlm_register:674 ERROR: status = -22 [ 766.083608][T10318] (syz.5.1077,10318,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 767.047335][T10330] o2cb: This node has not been configured. [ 767.053481][T10330] o2cb: Cluster check failed. Fix errors before retrying. [ 767.056570][T10325] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1081'. [ 767.060858][T10330] (syz.4.1087,10330,0):user_dlm_register:674 ERROR: status = -22 [ 767.060921][T10330] (syz.4.1087,10330,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 767.160840][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 767.272715][T10337] binder_alloc: 10336: binder_alloc_buf, no vma [ 767.414586][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 767.632160][T10174] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 767.651637][ T8] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 767.664019][ T8] usb 6-1: config 0 has no interface number 0 [ 767.671250][ T8] usb 6-1: config 0 interface 184 has no altsetting 0 [ 767.681135][ T8] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 767.707196][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.715841][ T8] usb 6-1: Product: syz [ 767.720485][ T8] usb 6-1: Manufacturer: syz [ 767.725701][ T8] usb 6-1: SerialNumber: syz [ 767.752988][ T8] usb 6-1: config 0 descriptor?? [ 767.771978][ T8] smsc75xx v1.0.0 [ 767.850094][T10174] usb 3-1: Using ep0 maxpacket: 8 [ 767.863601][T10174] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 767.894676][T10174] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 767.934596][T10174] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 768.055579][T10174] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 768.130522][T10174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.296050][T10343] comedi comedi0: Minor 3 could not be opened [ 768.573491][T10174] usbtmc 3-1:16.0: bulk endpoints not found [ 768.754420][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 768.766166][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 768.804719][T10347] o2cb: This node has not been configured. [ 768.811504][T10347] o2cb: Cluster check failed. Fix errors before retrying. [ 768.818883][T10347] (syz.4.1088,10347,0):user_dlm_register:674 ERROR: status = -22 [ 768.826902][T10347] (syz.4.1088,10347,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 769.213504][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 769.225679][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 769.235567][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 769.245525][ T8] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 769.262978][ T8] usb 6-1: USB disconnect, device number 6 [ 770.046512][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 770.061468][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1093'. [ 770.207828][T10367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.332653][T10369] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 770.593469][T10367] bond1: (slave bond0): making interface the new active one [ 770.720034][ T5817] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 770.786360][T10367] bond1: (slave bond0): Enslaving as an active interface with an up link [ 771.041324][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.053287][T10174] usb 3-1: USB disconnect, device number 45 [ 771.084832][ T5817] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 771.117922][ T5817] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 771.171059][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.222447][ T5817] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 771.231886][ T5817] usb 4-1: no configuration chosen from 1 choice [ 771.693025][T10367] syz.5.1093 (10367) used greatest stack depth: 19368 bytes left [ 771.980522][T10377] comedi comedi0: Minor 3 could not be opened [ 772.213108][T10380] o2cb: This node has not been configured. [ 772.219144][T10380] o2cb: Cluster check failed. Fix errors before retrying. [ 772.226372][T10380] (syz.2.1096,10380,0):user_dlm_register:674 ERROR: status = -22 [ 772.234562][T10380] (syz.2.1096,10380,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 772.677370][T10384] binder_alloc: 10383: binder_alloc_buf, no vma [ 773.004556][T10391] o2cb: This node has not been configured. [ 773.010753][T10391] o2cb: Cluster check failed. Fix errors before retrying. [ 773.018033][T10391] (syz.5.1098,10391,1):user_dlm_register:674 ERROR: status = -22 [ 773.026382][T10391] (syz.5.1098,10391,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 773.136217][ T5817] usb 4-1: USB disconnect, device number 25 [ 773.590090][ T786] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 773.858358][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 773.905892][ T786] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.916495][ T786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.927190][ T786] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 773.941705][ T786] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 773.951390][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.031002][ T786] usbtmc 3-1:16.0: bulk endpoints not found [ 774.747822][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 774.757878][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 774.800070][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 774.801852][T10411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.828485][T10411] bond1: (slave bond0): making interface the new active one [ 774.838598][T10411] bond1: (slave bond0): Enslaving as an active interface with an up link [ 775.002592][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 775.012892][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.028819][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 775.245767][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 775.259949][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 775.279855][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 775.308295][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 775.318002][ T8] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 775.332017][ T8] usb 5-1: Manufacturer: syz [ 775.348590][ T8] usb 5-1: config 0 descriptor?? [ 775.825252][T10423] o2cb: This node has not been configured. [ 775.831323][T10423] o2cb: Cluster check failed. Fix errors before retrying. [ 775.838665][T10423] (syz.5.1109,10423,0):user_dlm_register:674 ERROR: status = -22 [ 775.846750][T10423] (syz.5.1109,10423,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 775.857285][ T8] rc_core: IR keymap rc-hauppauge not found [ 775.874100][ T8] Registered IR keymap rc-empty [ 775.888114][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.953370][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.961959][ T1091] block nbd1: Possible stuck request ffff888022070000: control (read@0,1024B). Runtime 180 seconds [ 775.973696][ T1091] block nbd1: Possible stuck request ffff888022070200: control (read@1024,1024B). Runtime 180 seconds [ 775.986540][ T1091] block nbd1: Possible stuck request ffff888022070400: control (read@2048,1024B). Runtime 180 seconds [ 775.998717][ T1091] block nbd1: Possible stuck request ffff888022070600: control (read@3072,1024B). Runtime 180 seconds [ 776.001048][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 776.057447][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 776.098689][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.195373][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.322985][T10431] comedi comedi0: Minor 3 could not be opened [ 776.487900][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.719283][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.768651][ T5910] usb 3-1: USB disconnect, device number 46 [ 776.799913][ T23] IPVS: starting estimator thread 0... [ 776.800124][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.865687][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.920061][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.921576][T10432] IPVS: using max 18 ests per chain, 43200 per kthread [ 776.960395][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.996432][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 777.040752][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 777.106964][ T8] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 777.119224][ T8] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 777.377786][ T8] usb 5-1: USB disconnect, device number 17 [ 777.409348][T10443] o2cb: This node has not been configured. [ 777.415780][T10443] o2cb: Cluster check failed. Fix errors before retrying. [ 777.423336][T10443] (syz.5.1113,10443,1):user_dlm_register:674 ERROR: status = -22 [ 777.431363][T10443] (syz.5.1113,10443,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 778.202670][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 778.220134][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 778.293415][T10454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.306904][T10454] bond1: (slave bond0): making interface the new active one [ 778.323495][T10454] bond1: (slave bond0): Enslaving as an active interface with an up link [ 778.580019][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 778.782300][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 778.838855][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 778.955820][T10465] comedi comedi0: Minor 3 could not be opened [ 778.998516][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 779.182030][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 779.412293][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.604275][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 779.745547][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.943273][ T8] usbtmc 6-1:16.0: bulk endpoints not found [ 780.260579][T10474] o2cb: This node has not been configured. [ 780.266789][T10474] o2cb: Cluster check failed. Fix errors before retrying. [ 780.274263][T10474] (syz.4.1121,10474,1):user_dlm_register:674 ERROR: status = -22 [ 780.282367][T10474] (syz.4.1121,10474,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 781.330168][T10489] o2cb: This node has not been configured. [ 781.336323][T10489] o2cb: Cluster check failed. Fix errors before retrying. [ 781.343987][T10489] (syz.3.1127,10489,1):user_dlm_register:674 ERROR: status = -22 [ 781.351988][T10489] (syz.3.1127,10489,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 781.544172][ T786] usb 6-1: USB disconnect, device number 7 [ 781.698346][T10495] bond1: option mode: unable to set because the bond device has slaves [ 781.722032][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 781.732227][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 781.749956][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 781.969897][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 782.024294][ T8] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 782.294769][ T8] usb 5-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 782.441345][ T8] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 782.469829][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.490964][ T8] usb 5-1: Product: syz [ 782.498658][ T8] usb 5-1: Manufacturer: syz [ 782.505025][ T8] usb 5-1: SerialNumber: syz [ 783.432055][T10506] comedi comedi0: Minor 3 could not be opened [ 784.504658][T10523] o2cb: This node has not been configured. [ 784.510863][T10523] o2cb: Cluster check failed. Fix errors before retrying. [ 784.518387][T10523] (syz.3.1134,10523,0):user_dlm_register:674 ERROR: status = -22 [ 784.526487][T10523] (syz.3.1134,10523,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 785.258366][ T8] usb 5-1: USB disconnect, device number 18 [ 785.707577][T10531] bond1: option mode: unable to set because the bond device has slaves [ 785.726001][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 785.738184][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1139'. [ 785.838608][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 786.107906][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 786.209439][T10540] o2cb: This node has not been configured. [ 786.215513][T10540] o2cb: Cluster check failed. Fix errors before retrying. [ 786.223161][T10540] (syz.3.1140,10540,0):user_dlm_register:674 ERROR: status = -22 [ 786.231541][T10540] (syz.3.1140,10540,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 786.445013][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 786.457306][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 786.468586][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 786.481006][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.498515][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 786.514984][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.545614][ T8] usbtmc 5-1:16.0: bulk endpoints not found [ 786.831279][T10544] comedi comedi0: Minor 3 could not be opened [ 787.749929][ T786] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 788.368378][T10564] o2cb: This node has not been configured. [ 788.374577][T10564] o2cb: Cluster check failed. Fix errors before retrying. [ 788.381803][T10564] (syz.3.1147,10564,1):user_dlm_register:674 ERROR: status = -22 [ 788.390057][T10564] (syz.3.1147,10564,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 788.577920][ T786] usb 6-1: Using ep0 maxpacket: 16 [ 788.598978][ T786] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 788.618486][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.655294][ T23] usb 5-1: USB disconnect, device number 19 [ 788.661898][ T786] usb 6-1: Product: syz [ 788.674678][ T786] usb 6-1: Manufacturer: syz [ 788.691288][ T786] usb 6-1: SerialNumber: syz [ 788.720828][ T786] usb 6-1: config 0 descriptor?? [ 788.781848][ T786] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 788.991542][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 789.041504][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 789.053336][T10571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.063195][T10571] bond1: (slave bond0): making interface the new active one [ 789.080273][T10571] bond1: (slave bond0): Enslaving as an active interface with an up link [ 789.438636][ T786] ssu100: probe of 6-1:0.0 failed with error -110 [ 789.447187][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.538193][T10580] o2cb: This node has not been configured. [ 789.544400][T10580] o2cb: Cluster check failed. Fix errors before retrying. [ 789.551961][T10580] (syz.2.1158,10580,1):user_dlm_register:674 ERROR: status = -22 [ 789.560049][T10580] (syz.2.1158,10580,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 789.796390][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.799908][ T23] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 790.111151][T10547] binder: 10546:10547 ioctl c0109428 200000000300 returned -22 [ 790.244383][ T23] usb 4-1: config 0 has no interfaces? [ 790.254715][ T23] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 790.290022][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.340331][ T23] usb 4-1: config 0 descriptor?? [ 790.511714][T10587] comedi comedi0: Minor 3 could not be opened [ 791.327761][T10592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.337737][T10592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.635123][T10596] o2cb: This node has not been configured. [ 791.641327][T10596] o2cb: Cluster check failed. Fix errors before retrying. [ 791.648991][T10596] (syz.2.1154,10596,0):user_dlm_register:674 ERROR: status = -22 [ 791.657288][T10596] (syz.2.1154,10596,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 793.411077][ T23] usb 6-1: USB disconnect, device number 8 [ 793.966650][ T8] usb 4-1: USB disconnect, device number 26 [ 794.632533][T10618] o2cb: This node has not been configured. [ 794.638609][T10618] o2cb: Cluster check failed. Fix errors before retrying. [ 794.639236][T10612] bond1: option mode: unable to set because the bond device has slaves [ 794.646039][T10618] (syz.4.1161,10618,1):user_dlm_register:674 ERROR: status = -22 [ 794.646074][T10618] (syz.4.1161,10618,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 794.682804][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 794.692006][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 794.701406][ T8] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 794.890151][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 794.898726][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 794.909115][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 794.919496][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 794.931650][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 794.945445][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 794.955428][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.969033][ T8] usbtmc 3-1:16.0: bulk endpoints not found [ 797.190734][ T23] usb 3-1: USB disconnect, device number 47 [ 797.923105][T10630] bond1: option mode: unable to set because the bond device has slaves [ 797.933777][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 797.943806][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 798.040149][T10636] SET target dimension over the limit! [ 799.537204][T10645] o2cb: This node has not been configured. [ 799.543606][T10645] o2cb: Cluster check failed. Fix errors before retrying. [ 799.551349][T10645] (syz.3.1167,10645,0):user_dlm_register:674 ERROR: status = -22 [ 799.559448][T10645] (syz.3.1167,10645,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 799.845093][T10651] comedi comedi0: Minor 3 could not be opened [ 800.984566][T10668] o2cb: This node has not been configured. [ 800.990767][T10668] o2cb: Cluster check failed. Fix errors before retrying. [ 800.998565][T10668] (syz.5.1173,10668,1):user_dlm_register:674 ERROR: status = -22 [ 801.006827][T10668] (syz.5.1173,10668,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 801.294748][T10672] bond1: option mode: unable to set because the bond device has slaves [ 801.495509][T10172] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 801.511292][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 801.521269][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 801.707895][T10172] usb 3-1: Using ep0 maxpacket: 8 [ 801.722189][T10172] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 801.749976][T10172] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 801.760859][T10172] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 801.774710][T10172] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 801.792026][T10172] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 801.826494][T10172] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 801.860426][T10172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.894822][T10680] vivid-007: disconnect [ 801.910827][T10680] vivid-007: reconnect [ 802.007884][T10684] hsr0: entered promiscuous mode [ 802.166783][T10685] comedi comedi0: Minor 3 could not be opened [ 802.515422][T10172] usb 3-1: usb_control_msg returned -32 [ 802.522955][T10172] usbtmc 3-1:16.0: can't read capabilities [ 802.541921][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1181'. [ 802.582420][T10684] hsr_slave_0: left promiscuous mode [ 802.605671][T10172] usb 3-1: USB disconnect, device number 48 [ 802.620977][T10684] hsr_slave_1: left promiscuous mode [ 802.665241][T10684] hsr0 (unregistering): left promiscuous mode [ 802.871007][T10690] QAT: Stopping all acceleration devices. [ 802.888487][T10691] o2cb: This node has not been configured. [ 802.894556][T10691] o2cb: Cluster check failed. Fix errors before retrying. [ 802.902072][T10691] (syz.3.1182,10691,1):user_dlm_register:674 ERROR: status = -22 [ 802.911526][T10691] (syz.3.1182,10691,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 803.442190][T10704] o2cb: This node has not been configured. [ 803.448427][T10704] o2cb: Cluster check failed. Fix errors before retrying. [ 803.456019][T10704] (syz.4.1186,10704,0):user_dlm_register:674 ERROR: status = -22 [ 803.464038][T10704] (syz.4.1186,10704,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 804.089993][T10711] binder: BINDER_SET_CONTEXT_MGR already set [ 804.096241][T10711] binder: 10709:10711 ioctl 4018620d 200000004a80 returned -16 [ 804.122911][ T29] INFO: task syz.1.775:9251 blocked for more than 143 seconds. [ 804.131555][ T29] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 804.136721][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.174684][ T29] task:syz.1.775 state:D stack:26280 pid:9251 ppid:5775 flags:0x00004004 [ 804.197548][ T29] Call Trace: [ 804.210060][ T29] [ 804.214240][ T29] __schedule+0x1553/0x45a0 [ 804.240854][T10714] bond1: option mode: unable to set because the bond device has slaves [ 804.255078][ T29] ? asan.module_dtor+0x20/0x20 [ 804.284455][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 804.289242][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 804.304102][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 804.325515][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 804.338318][ T29] schedule+0xbd/0x170 [ 804.349886][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 804.359014][ T29] schedule_preempt_disabled+0x13/0x20 [ 804.370173][ T29] __mutex_lock+0x6a9/0xcc0 [ 804.374834][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 804.400031][ T29] ? blkdev_get_by_dev+0x121/0x600 [ 804.405497][ T29] ? mutex_lock_nested+0x20/0x20 [ 804.417322][ T29] ? iput+0x343/0x920 [ 804.429370][ T29] ? ilookup+0x1c4/0x200 [ 804.440150][ T29] ? disk_block_events+0xa7/0x120 [ 804.445331][ T29] ? blkdev_get_by_dev+0x101/0x600 [ 804.460113][ T29] blkdev_get_by_dev+0x121/0x600 [ 804.465223][ T29] bdev_open_by_dev+0x77/0x100 [ 804.476178][ T29] setup_bdev_super+0x59/0x660 [ 804.481583][ T29] mount_bdev+0x1d3/0x2d0 [ 804.486041][ T29] ? vxfs_mount+0x40/0x40 [ 804.490996][ T29] ? get_tree_bdev+0x520/0x520 [ 804.496634][ T29] legacy_get_tree+0xea/0x180 [ 804.501985][ T29] ? vxfs_getblk+0x170/0x170 [ 804.506790][ T29] vfs_get_tree+0x8c/0x280 [ 804.511539][ T29] do_new_mount+0x24b/0xa40 [ 804.516120][ T29] __se_sys_mount+0x2e7/0x3d0 [ 804.521377][ T29] ? __x64_sys_mount+0xc0/0xc0 [ 804.526542][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 804.532540][ T29] ? __x64_sys_mount+0x20/0xc0 [ 804.537328][ T29] do_syscall_64+0x55/0xa0 [ 804.541827][ T29] ? clear_bhb_loop+0x40/0x90 [ 804.546639][ T29] ? clear_bhb_loop+0x40/0x90 [ 804.551686][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.558087][ T29] RIP: 0033:0x7f796819cdd9 [ 804.564001][ T29] RSP: 002b:00007f7969106028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 804.573052][ T29] RAX: ffffffffffffffda RBX: 00007f7968416180 RCX: 00007f796819cdd9 [ 804.581600][ T29] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 804.589826][ T29] RBP: 00007f7968232d69 R08: 0000000000000000 R09: 0000000000000000 [ 804.598240][ T29] R10: 0000000001000080 R11: 0000000000000246 R12: 0000000000000000 [ 804.607387][ T29] R13: 00007f7968416218 R14: 00007f7968416180 R15: 00007ffc37e4a068 [ 804.616052][ T29] [ 804.620477][ T29] [ 804.620477][ T29] Showing all locks held in the system: [ 804.639227][ T29] 1 lock held by khungtaskd/29: [ 804.660442][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 804.690026][ T29] 4 locks held by kworker/u4:5/1127: [ 804.695802][ T29] 2 locks held by getty/5530: [ 804.709869][ T29] #0: ffff8880319220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 804.739996][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 804.770224][ T29] 1 lock held by syz-executor/5776: [ 804.776211][ T29] 3 locks held by kworker/1:5/5817: [ 804.802065][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 804.829872][ T29] #1: ffffc9000470fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 804.859937][ T29] #2: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 804.880029][ T29] 1 lock held by udevd/6016: [ 804.884872][ T29] #0: ffff888021fd04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 804.936156][ T29] 1 lock held by syz-executor/7769: [ 804.941969][ T29] 1 lock held by syz.1.775/9251: [ 804.947157][ T29] #0: ffff888021fd04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 804.979838][ T29] 1 lock held by syz-executor/9346: [ 804.985297][ T29] 1 lock held by syz.3.1189/10712: [ 805.019945][ T29] #0: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 805.039847][ T29] [ 805.042258][ T29] ============================================= [ 805.042258][ T29] [ 805.099830][ T29] NMI backtrace for cpu 0 [ 805.104426][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 805.111923][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 805.122963][ T29] Call Trace: [ 805.126255][ T29] [ 805.129199][ T29] dump_stack_lvl+0x18c/0x250 [ 805.134184][ T29] ? show_regs_print_info+0x20/0x20 [ 805.139407][ T29] ? load_image+0x420/0x420 [ 805.143946][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 805.149429][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 805.155616][ T29] ? _printk+0xde/0x130 [ 805.160072][ T29] ? load_image+0x420/0x420 [ 805.164682][ T29] ? load_image+0x420/0x420 [ 805.169258][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 805.175641][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 805.181835][ T29] watchdog+0xf3d/0xf80 [ 805.186108][ T29] ? watchdog+0x1e1/0xf80 [ 805.190650][ T29] kthread+0x2fa/0x390 [ 805.194837][ T29] ? hungtask_pm_notify+0x90/0x90 [ 805.200246][ T29] ? kthread_blkcg+0xd0/0xd0 [ 805.205028][ T29] ret_from_fork+0x48/0x80 [ 805.209634][ T29] ? kthread_blkcg+0xd0/0xd0 [ 805.214239][ T29] ret_from_fork_asm+0x11/0x20 [ 805.219033][ T29] [ 805.222732][ T29] Sending NMI from CPU 0 to CPUs 1: [ 805.228068][ C1] NMI backtrace for cpu 1 [ 805.228080][ C1] CPU: 1 PID: 5776 Comm: syz-executor Not tainted syzkaller #0 [ 805.228096][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 805.228104][ C1] RIP: 0010:find_unlink_vmap_area+0x4b/0x250 [ 805.228129][ C1] Code: 08 48 8b 1d b7 7a 60 15 48 85 db 0f 84 af 00 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8d 7b f0 4c 89 f8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ff e8 3b dc 0d 00 4d 8b 3f 4c 89 ff 4c 89 f6 e8 0d a7 [ 805.228141][ C1] RSP: 0018:ffffc9000437fad0 EFLAGS: 00000246 [ 805.228156][ C1] RAX: 1ffff110039c976c RBX: ffff88801ce4bb70 RCX: ffff888030509e00 [ 805.228167][ C1] RDX: 0000000000000000 RSI: ffffc90015434000 RDI: ffffc9001038d000 [ 805.228177][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 805.228187][ C1] R10: dffffc0000000000 R11: fffff5200086ff48 R12: 1ffff1100f509cd3 [ 805.228197][ C1] R13: ffffffff818742c0 R14: ffffc90015434000 R15: ffff88801ce4bb60 [ 805.228207][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 805.228220][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 805.228230][ C1] CR2: 00007effa9bea4c0 CR3: 000000002ebbe000 CR4: 00000000003526e0 [ 805.228246][ C1] Call Trace: [ 805.228252][ C1] [ 805.228259][ C1] ? kcov_open+0x90/0x90 [ 805.228277][ C1] remove_vm_area+0x58/0x2f0 [ 805.228296][ C1] ? kcov_open+0x90/0x90 [ 805.228312][ C1] vfree+0x63/0x320 [ 805.228330][ C1] ? kcov_open+0x90/0x90 [ 805.228346][ C1] kcov_close+0x2b/0x50 [ 805.228369][ C1] __fput+0x234/0x970 [ 805.228389][ C1] task_work_run+0x1d4/0x260 [ 805.228409][ C1] ? task_work_cancel+0x220/0x220 [ 805.228427][ C1] ? do_exit+0x955/0x2460 [ 805.228446][ C1] ? kmem_cache_free+0xf8/0x270 [ 805.228467][ C1] do_exit+0x95a/0x2460 [ 805.228492][ C1] ? put_task_struct+0xc0/0xc0 [ 805.228509][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 805.228527][ C1] ? lock_chain_count+0x20/0x20 [ 805.228541][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 805.228558][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 805.228573][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 805.228590][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 805.228606][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 805.228624][ C1] do_group_exit+0x21b/0x2d0 [ 805.228646][ C1] __x64_sys_exit_group+0x3f/0x40 [ 805.228665][ C1] do_syscall_64+0x55/0xa0 [ 805.228677][ C1] ? clear_bhb_loop+0x40/0x90 [ 805.228694][ C1] ? clear_bhb_loop+0x40/0x90 [ 805.228711][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 805.228729][ C1] RIP: 0033:0x7f78d839cdd9 [ 805.228741][ C1] Code: Unable to access opcode bytes at 0x7f78d839cdaf. [ 805.228748][ C1] RSP: 002b:00007ffc5301bce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 805.228762][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f78d839cdd9 [ 805.228771][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 805.228780][ C1] RBP: 00007f78d8433a6d R08: 0000000000000000 R09: 00000000000927c0 [ 805.228789][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 805.228798][ C1] R13: 00000000000927c0 R14: 00000000000c4509 R15: 00007ffc5301bea0 [ 805.228815][ C1] [ 805.655866][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 805.663062][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 805.670835][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 805.681980][ T29] Call Trace: [ 805.685382][ T29] [ 805.688347][ T29] dump_stack_lvl+0x18c/0x250 [ 805.693352][ T29] ? show_regs_print_info+0x20/0x20 [ 805.698858][ T29] ? load_image+0x420/0x420 [ 805.703412][ T29] panic+0x2dc/0x730 [ 805.707530][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 805.713478][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 805.718181][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 805.723948][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 805.730135][ T29] watchdog+0xf7c/0xf80 [ 805.734313][ T29] ? watchdog+0x1e1/0xf80 [ 805.738751][ T29] kthread+0x2fa/0x390 [ 805.742830][ T29] ? hungtask_pm_notify+0x90/0x90 [ 805.747867][ T29] ? kthread_blkcg+0xd0/0xd0 [ 805.752616][ T29] ret_from_fork+0x48/0x80 [ 805.757158][ T29] ? kthread_blkcg+0xd0/0xd0 [ 805.762126][ T29] ret_from_fork_asm+0x11/0x20 [ 805.767253][ T29] [ 805.770929][ T29] Kernel Offset: disabled [ 805.775581][ T29] Rebooting in 86400 seconds..