last executing test programs: 2m30.003300856s ago: executing program 2 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80000}, 0x4048000) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@delchain={0x2c, 0x65, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2}, {0xfff3, 0x8}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xa8, 0x4}}]}, 0x2c}}, 0x24000014) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c010) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x11, 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x18c, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xffffff3b}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff7}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xd5f}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x8}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4880}, 0x4008801) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="89e7ee2c7cdad9b4b47380c988ca4f870a9ef905dbd95c71a94ec0a4d1f7bfead1c98d8e73e18b5d3d62240c786ba26c123aa18c3ca9b2928de9bfc8d15e", 0x3e}], 0x1) 2m17.82820967s ago: executing program 2 (id=119): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f2578fea7bc273dfaeab968586dd", 0xe, 0x2000c004, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x0) r4 = socket(0x2, 0x3, 0xff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x14b801, 0x0) write$tun(r5, &(0x7f0000001d80)=ANY=[@ANYBLOB="000088e5ab00f166a1470a803581d146dde1bbb140067eac680f33fb0b6a82e3f87c6dd4f0d67d80ff097186ef05c8d73bf45fff66819a41cd7fa88483f2e2578c425e6e7feb3c38d91e1ca178087f9229cfab8aeeeea6a11d81c29a4af381674dc9f0b6843d3a0f1b25821622753c3c59f766d188e5dbb2a8035c0080dd4a19383ec04c51f7ca"], 0x87) bind$inet(r4, &(0x7f0000000080)={0x2, 0x800, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$kcm(r4, &(0x7f00000006c0)={&(0x7f0000000300)=@generic={0x2, "6dad6cfc0a6917c37d0e95335bcee18f011b6f0ab747245cf9676c659e0f66f07caeb99a6585fb9aa4b58431f765ad685190eecddc9cd4b97906adaaf2199fa9e88198b6b1e057b00f1e8d622150821e6f2cb52004158e90cb92d81cf53c7ebc8be7ad95b6dbe3af1488bdc91a9fb165900bf14b651cb3e0e84e1f5e0dcf"}, 0x80, &(0x7f0000001cc0)=[{0x0}, {&(0x7f0000001c00)="0105cda8f23daa67afa7565c3793bf5d7739465a5c7cb3084bb5216483be03f9b90f6e026af5f65d077bee0b04522ade7a53418ffea64f5472b35385635d9d3ae774a1572d31ce582db2a888b35d239695f8d59ced722ac7e8f65b64939a6caf1e2540ce0bbd324d980ca1fa872f04afa1c713a849d7a427a0ee8d20a64cc2e3ce463d8a02649493b9b8aeb5470be285eaceb9269e4c31a5e76313", 0x9b}], 0x2, 0x0, 0x12a0}, 0xc010) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x23, 0x0, 0x0) r7 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x100000000000f7) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) keyctl$revoke(0x3, r7) 2m13.010987005s ago: executing program 2 (id=129): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x0, 0x80, 0x7f1b, 0x5, 0x5, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0xf6, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0xff, 0x4000c, 0x20000014, 0x2, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x6, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x0, 0x81, 0x5, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x1008, 0x6, 0x1, 0x8001, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x401, 0xffffb09a, 0x2, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0x2, 0xfffffffc, 0x4, 0x69, 0x80000000, 0x2, 0x6c, 0x0, 0x5, 0x0, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x3ff, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1000, 0x401, 0x3, 0x8002, 0x8, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0xffffffff, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x10000000, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x3, 0x1000, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x0, 0x8000, 0x7, 0x7, 0x7, 0x3, 0x7, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x5, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x4, 0x7f, 0x0, {0x6, 0x0, 0x6, 0x7ff, 0x6e6, 0xd74}, {0x8, 0x0, 0xffff, 0x8, 0x7f, 0x7fff}, 0x0, 0x8000, 0xbab2}}]}]}}]}, 0x478}}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 2m12.545881962s ago: executing program 2 (id=130): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "cfae1e8610332aaf073c8d7e23e24149747696f72937d0eaa72f3f6db551129c", "88525cd14f8eed12a8efcbb486d5f94e1f7192a907767ee928726d8541593048", "94ed2609f31e59a9041429955c25747ddc5a9aa68b65f79d739539ff50fe6bbc", "e6ece6330b875a499a782bbd0bde05326e338adc8f3a60c5212b04fb64fff642", "a4e30583baf6fdc385302137f3f6b686903632a36dd691e2f0de22424c816b2b", "69dcedab10ae79d6206beff9", 0x7fffffff, 0x0, 0x4, 0x1, 0x1000}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200140, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0'}, 0x2b) open$dir(&(0x7f0000000200)='./file0\x00', 0x1e9240, 0x180) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) msgrcv(0x0, 0x0, 0x0, 0x5, 0x4c00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2m11.506853839s ago: executing program 2 (id=133): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000000)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4020bc10, &(0x7f0000000280)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@enum64={0x3, 0x4, 0x0, 0x13, 0x1, 0x1, [{0xfffffffd, 0x9}, {0x7, 0xd2, 0x3}, {0x42, 0x7fff, 0xffff3c36}, {0x5, 0x7, 0x9}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x4f]}}, 0x0, 0x5a, 0x0, 0x1, 0x1}, 0x28) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r8 = epoll_create(0x6) dup3(r4, r8, 0x0) 2m10.085633571s ago: executing program 2 (id=135): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x1) r2 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) io_setup(0x9, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x1, 0x8000000000}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000000008010200000000000000000e00000105000300060000001c00048008000a400000000a080005400000000808000b40000100000600024088fb0000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x80) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400", @ANYRES8], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 1m53.184629198s ago: executing program 32 (id=135): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x1) r2 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) io_setup(0x9, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x1, 0x8000000000}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000000008010200000000000000000e00000105000300060000001c00048008000a400000000a080005400000000808000b40000100000600024088fb0000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x80) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400", @ANYRES8], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 40.180947139s ago: executing program 0 (id=328): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c000400", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 38.727293806s ago: executing program 0 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) 38.542818436s ago: executing program 0 (id=334): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b0000000000000000000000a10a00000000", @ANYRES32, @ANYBLOB="f0050000000000000000000000400000000000002e7d056edeb8f70fc002238e49a5ac0e6e8ca545907206"], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 37.347653684s ago: executing program 0 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) 37.114911695s ago: executing program 0 (id=338): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000000)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x4020bc10, &(0x7f0000000280)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = epoll_create(0x6) r8 = dup3(r3, r7, 0x0) read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) 34.981672882s ago: executing program 0 (id=344): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r4, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) unshare(0x6060400) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22.208368622s ago: executing program 4 (id=369): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r4, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) unshare(0x6060400) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.587673832s ago: executing program 33 (id=344): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r4, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) unshare(0x6060400) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.176646953s ago: executing program 1 (id=380): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TCFLSH(r3, 0x40045436, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r5}) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x2}, 0x14}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x30, 0x0, 0x0, 0x2e, 0x0, 0x2e, 0x0]}}, &(0x7f00000001c0)=""/257, 0x21, 0x101, 0x4006, 0x8}, 0x28) 16.032690099s ago: executing program 1 (id=381): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) lseek(0xffffffffffffffff, 0xcbe, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x9) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) 14.596693509s ago: executing program 3 (id=384): syz_open_dev$hidraw(&(0x7f0000000180), 0x2, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000080009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 14.306372064s ago: executing program 1 (id=385): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "cfae1e8610332aaf073c8d7e23e24149747696f72937d0eaa72f3f6db551129c", "88525cd14f8eed12a8efcbb486d5f94e1f7192a907767ee928726d8541593048", "94ed2609f31e59a9041429955c25747ddc5a9aa68b65f79d739539ff50fe6bbc", "e6ece6330b875a499a782bbd0bde05326e338adc8f3a60c5212b04fb64fff642", "a4e30583baf6fdc385302137f3f6b686903632a36dd691e2f0de22424c816b2b", "69dcedab10ae79d6206beff9", 0x7fffffff, 0x0, 0x4, 0x1, 0x1000}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200140, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0'}, 0x2b) open$dir(&(0x7f0000000200)='./file0\x00', 0x1e9240, 0x180) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x5, 0x4c00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_setup(0x5c79, &(0x7f0000000180)={0x0, 0x83c6, 0x20000, 0x0, 0x1b3}) 14.25161863s ago: executing program 3 (id=386): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020425bd7000fedbdf250e0000004c00018008000300ffffffff480004001400010002004e22640101010000000000000000200002000a004e2080000001ff0100000000000000000000000000017a000000080003000080ffff0c0009800800010022000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x802) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x52, 0x0, 0x80000000, 0x11000, 0x1, 0xfffffe01, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xb, @void, @value, @value=r2}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x4, 0x4, 0x644, 0xffffffff, 0x100, 0x3f8, 0x0, 0xfeffffff, 0xffffffff, 0x57c, 0x57c, 0x57c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @empty, [], [], 'pimreg\x00', 'batadv_slave_1\x00'}, 0x0, 0x2d4, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1000}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a01d432a8fc898ed85c1aa68e1e7d3e2874b1357c9dce87f6f4c5ad203a7385415d49eeb76ef6436311d431404c6755eee43b4634640dc031df91404c9f80618ed7c03054b948da28662bcd051ed0a06a5a9ea633708642879dd5e0b7a5993f87fa318f3a5c727a0997e2bd938ee35f3c2c2", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b4", 0x1f) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fd67bcd1c6ffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xfffffffffffffdb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30}, 0x50) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000340)="016b78d7ae96996dd6420002000000000000", 0x12, 0xfffffffffffffffb) listen(r1, 0xc4d) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) 13.061756909s ago: executing program 3 (id=387): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x427) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000100)=0x8) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12.512142478s ago: executing program 1 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x74, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x48, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}]}]}], {0x14, 0x10}}, 0x114}}, 0x0) 12.326811959s ago: executing program 1 (id=389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000000)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_io_uring_setup(0xecb, 0x0, &(0x7f0000000300), &(0x7f0000000440)) open_by_handle_at(r3, &(0x7f0000000240)=ANY=[], 0x10000) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 8.918986897s ago: executing program 3 (id=392): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) write$binfmt_script(r1, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) 8.268823356s ago: executing program 4 (id=393): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x20, 0x37, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10000}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 6.435624589s ago: executing program 4 (id=394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x20004000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000002f00)=0x2) ioctl$PPPIOCSMAXCID(r2, 0x4004743c, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000000}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) 5.812632019s ago: executing program 5 (id=395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000080009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 5.388153452s ago: executing program 5 (id=396): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020425bd7000fedbdf250e0000004c00018008000300ffffffff480004001400010002004e22640101010000000000000000200002000a004e2080000001ff0100000000000000000000000000017a000000080003000080ffff0c0009800800010022000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x802) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x52, 0x0, 0x80000000, 0x11000, 0x1, 0xfffffe01, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xb, @void, @value, @value=r2}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x4, 0x4, 0x644, 0xffffffff, 0x100, 0x3f8, 0x0, 0xfeffffff, 0xffffffff, 0x57c, 0x57c, 0x57c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @empty, [], [], 'pimreg\x00', 'batadv_slave_1\x00'}, 0x0, 0x2d4, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1000}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a01d432a8fc898ed85c1aa68e1e7d3e2874b1357c9dce87f6f4c5ad203a7385415d49eeb76ef6436311d431404c6755eee43b4634640dc031df91404c9f80618ed7c03054b948da28662bcd051ed0a06a5a9ea633708642879dd5e0b7a5993f87fa318f3a5c727a0997e2bd938ee35f3c2c2", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b4", 0x1f) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fd67bcd1c6ffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xfffffffffffffdb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30}, 0x50) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000340)="016b78d7ae96996dd6420002000000000000", 0x12, 0xfffffffffffffffb) listen(r1, 0xc4d) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) 4.230828291s ago: executing program 5 (id=397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r6, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r6) listen(r1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000001100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)}], 0x1}}], 0x2, 0x0) 4.211074617s ago: executing program 3 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x74, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x48, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}]}]}], {0x14, 0x10}}, 0x114}}, 0x0) 3.878288271s ago: executing program 3 (id=399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.111740415s ago: executing program 5 (id=400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x46795000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x955d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2.827604318s ago: executing program 4 (id=401): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x10, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c}, 0x94) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) r2 = gettid() r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000000)='!\x00', 0x40, 0x10, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.080093943s ago: executing program 5 (id=402): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.439293811s ago: executing program 5 (id=403): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 1.141461103s ago: executing program 4 (id=404): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) 817.585946ms ago: executing program 1 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0xcbe, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x9) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) 0s ago: executing program 4 (id=406): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x0, 0x203, 0x70bd26, 0x25dfdc01, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}]}, 0x2c}}, 0x20000840) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) kernel console output (not intermixed with test programs): 2(bridge_slave_1) entered disabled state [ 90.843482][ T5829] bridge_slave_1: entered allmulticast mode [ 90.851635][ T5829] bridge_slave_1: entered promiscuous mode [ 90.933577][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.943171][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.950345][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.957927][ T5836] bridge_slave_0: entered allmulticast mode [ 90.965415][ T5836] bridge_slave_0: entered promiscuous mode [ 90.975145][ T5834] team0: Port device team_slave_0 added [ 91.005790][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.030502][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.038158][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.045472][ T5836] bridge_slave_1: entered allmulticast mode [ 91.053677][ T5836] bridge_slave_1: entered promiscuous mode [ 91.078051][ T5834] team0: Port device team_slave_1 added [ 91.086961][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.160592][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.188477][ T5841] team0: Port device team_slave_0 added [ 91.200423][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.213684][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.267638][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.276318][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.286419][ T5835] bridge_slave_0: entered allmulticast mode [ 91.295066][ T5835] bridge_slave_0: entered promiscuous mode [ 91.305482][ T5841] team0: Port device team_slave_1 added [ 91.311787][ T5832] Bluetooth: hci1: command tx timeout [ 91.321472][ T5832] Bluetooth: hci3: command tx timeout [ 91.348962][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.356101][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.382742][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.393750][ T5832] Bluetooth: hci0: command tx timeout [ 91.393760][ T5844] Bluetooth: hci2: command tx timeout [ 91.393906][ T5844] Bluetooth: hci4: command tx timeout [ 91.405495][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.417704][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.444441][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.457659][ T5829] team0: Port device team_slave_0 added [ 91.464217][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.471801][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.479038][ T5835] bridge_slave_1: entered allmulticast mode [ 91.487528][ T5835] bridge_slave_1: entered promiscuous mode [ 91.548121][ T5829] team0: Port device team_slave_1 added [ 91.585246][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.595258][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.621852][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.635113][ T5836] team0: Port device team_slave_0 added [ 91.643082][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.650085][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.676502][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.706263][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.717758][ T5836] team0: Port device team_slave_1 added [ 91.748381][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.755584][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.781878][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.795593][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.802711][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.829229][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.844164][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.935909][ T5834] hsr_slave_0: entered promiscuous mode [ 91.942947][ T5834] hsr_slave_1: entered promiscuous mode [ 91.969755][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.979806][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.006345][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.052133][ T5835] team0: Port device team_slave_0 added [ 92.059221][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.066539][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.092864][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.169220][ T5835] team0: Port device team_slave_1 added [ 92.208056][ T5841] hsr_slave_0: entered promiscuous mode [ 92.215269][ T5841] hsr_slave_1: entered promiscuous mode [ 92.222586][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 92.228485][ T5841] Cannot create hsr debugfs directory [ 92.254304][ T5829] hsr_slave_0: entered promiscuous mode [ 92.260784][ T5829] hsr_slave_1: entered promiscuous mode [ 92.267169][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 92.273026][ T5829] Cannot create hsr debugfs directory [ 92.295364][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.302435][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.328440][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.373738][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.380741][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.407036][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.538070][ T5836] hsr_slave_0: entered promiscuous mode [ 92.546939][ T5836] hsr_slave_1: entered promiscuous mode [ 92.553327][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 92.559110][ T5836] Cannot create hsr debugfs directory [ 92.802574][ T5835] hsr_slave_0: entered promiscuous mode [ 92.809372][ T5835] hsr_slave_1: entered promiscuous mode [ 92.817145][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 92.823489][ T5835] Cannot create hsr debugfs directory [ 93.133564][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.164931][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.176706][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.234045][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.344557][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.356165][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.373824][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.388992][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.401627][ T5846] Bluetooth: hci1: command tx timeout [ 93.407342][ T5844] Bluetooth: hci3: command tx timeout [ 93.481258][ T5844] Bluetooth: hci4: command tx timeout [ 93.486729][ T5844] Bluetooth: hci0: command tx timeout [ 93.493172][ T5846] Bluetooth: hci2: command tx timeout [ 93.534709][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.572308][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.589521][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.613504][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.726888][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.752799][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.782963][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.801632][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.880461][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.903560][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.962628][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.987827][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.998793][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.015244][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.029281][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.047763][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.080905][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.088301][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.123146][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.130330][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.175363][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.182618][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.195951][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.203197][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.236304][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.329116][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.377256][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.384451][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.430923][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.438105][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.461944][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.546047][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.617170][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.624439][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.703300][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.710490][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.759292][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.880381][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.929684][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.936949][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.962832][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.970015][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.052468][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.126403][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.230665][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.272075][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.471542][ T5846] Bluetooth: hci1: command tx timeout [ 95.477439][ T5844] Bluetooth: hci3: command tx timeout [ 95.533707][ T5834] veth0_vlan: entered promiscuous mode [ 95.551304][ T5846] Bluetooth: hci0: command tx timeout [ 95.554158][ T5832] Bluetooth: hci2: command tx timeout [ 95.556867][ T5844] Bluetooth: hci4: command tx timeout [ 95.575908][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.606323][ T5834] veth1_vlan: entered promiscuous mode [ 95.817239][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.844852][ T5834] veth0_macvtap: entered promiscuous mode [ 95.890362][ T5834] veth1_macvtap: entered promiscuous mode [ 95.942041][ T5829] veth0_vlan: entered promiscuous mode [ 95.976802][ T5829] veth1_vlan: entered promiscuous mode [ 96.033638][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.064486][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.088458][ T5836] veth0_vlan: entered promiscuous mode [ 96.100379][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.118777][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.143187][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.155831][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.164900][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.184690][ T5841] veth0_vlan: entered promiscuous mode [ 96.195962][ T5836] veth1_vlan: entered promiscuous mode [ 96.255719][ T5841] veth1_vlan: entered promiscuous mode [ 96.325416][ T5829] veth0_macvtap: entered promiscuous mode [ 96.372571][ T5829] veth1_macvtap: entered promiscuous mode [ 96.400240][ T5836] veth0_macvtap: entered promiscuous mode [ 96.414253][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.432626][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.487577][ T5835] veth0_vlan: entered promiscuous mode [ 96.501975][ T5836] veth1_macvtap: entered promiscuous mode [ 96.509402][ T5841] veth0_macvtap: entered promiscuous mode [ 96.526220][ T5841] veth1_macvtap: entered promiscuous mode [ 96.548208][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.561546][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.577731][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.593093][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.608056][ T5835] veth1_vlan: entered promiscuous mode [ 96.620284][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.643595][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.666230][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.678191][ T1141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.695447][ T1141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.719298][ T1141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.752437][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.756122][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.788021][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.798757][ T1162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.834866][ T1162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.856508][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.885127][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.909093][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.194833][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.247625][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.275659][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.527315][ T1212] cfg80211: failed to load regulatory.db [ 97.553819][ T5832] Bluetooth: hci1: command tx timeout [ 97.559611][ T5844] Bluetooth: hci3: command tx timeout [ 97.572766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.633481][ T5832] Bluetooth: hci4: command tx timeout [ 97.639783][ T5832] Bluetooth: hci0: command tx timeout [ 97.652278][ T5844] Bluetooth: hci2: command tx timeout [ 97.980358][ T5835] veth0_macvtap: entered promiscuous mode [ 98.099223][ T5835] veth1_macvtap: entered promiscuous mode [ 98.127145][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.137622][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.237339][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.249764][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.266875][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.714706][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.885237][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.901200][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.939930][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.949780][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.969127][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.006865][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.058663][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.068281][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.139502][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.180994][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.261499][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.291421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.300109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.541291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.549634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.620650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.691258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.723117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.809459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.820802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.224793][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.429570][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.438161][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.521870][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.572445][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 101.637196][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.823287][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 101.876605][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.952600][ T5983] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 101.963168][ T5920] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 101.989629][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.049049][ T5983] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5'. [ 102.172228][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.186095][ T5920] usb 3-1: config 0 descriptor?? [ 102.211214][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.221321][ T5973] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.280999][ T5920] hub 3-1:0.0: USB hub found [ 102.483447][ T5920] hub 3-1:0.0: 2 ports detected [ 103.368184][ T5994] netlink: 120 bytes leftover after parsing attributes in process `syz.0.10'. [ 103.421977][ T978] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 105.310344][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.378116][ T978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.406035][ T1212] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 105.408633][ T5913] usb 3-1: USB disconnect, device number 2 [ 105.454734][ T978] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 105.482912][ T6008] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.499986][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.500028][ T978] usb 2-1: Product: syz [ 105.500045][ T978] usb 2-1: Manufacturer: syz [ 105.500061][ T978] usb 2-1: SerialNumber: syz [ 105.594492][ T978] usb 2-1: config 0 descriptor?? [ 106.512423][ T5913] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.691952][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 106.709418][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 106.880996][ T5899] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.232497][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.431489][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 107.448804][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.513205][ T5913] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.671362][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.679510][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 107.832598][ T5913] usb 3-1: Product: syz [ 107.844599][ T5913] usb 3-1: Manufacturer: syz [ 107.849304][ T5913] usb 3-1: SerialNumber: syz [ 107.855341][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.890979][ T5899] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 107.934949][ T5913] usb 3-1: config 0 descriptor?? [ 107.942110][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.989494][ T5913] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.014557][ T6031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 108.029364][ T5899] usb 5-1: config 0 descriptor?? [ 108.036327][ T5913] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 108.047717][ T6022] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 108.058404][ T5899] hub 5-1:0.0: USB hub found [ 108.081554][ T6031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 108.161443][ T978] usb 2-1: can't set config #0, error -71 [ 108.216521][ T978] usb 2-1: USB disconnect, device number 2 [ 108.281850][ T5899] hub 5-1:0.0: 2 ports detected [ 108.598386][ T5913] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 108.711685][ T5913] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 109.422151][ T5899] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 109.467251][ T5913] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 109.522215][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 109.831072][ T6048] loop1: detected capacity change from 0 to 32768 [ 109.853366][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 109.906420][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 109.947207][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 110.007158][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 110.062948][ T5913] usb 3-1: USB disconnect, device number 3 [ 110.158458][ T9] usb 5-1: USB disconnect, device number 2 [ 110.386141][ T6048] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 110.386176][ T6048] allowing incompatible features above 0.0: (unknown version) [ 110.386188][ T6048] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 110.431694][ T6048] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 110.440039][ T6048] bcachefs (loop1): initializing new filesystem [ 110.456817][ T6048] bcachefs (loop1): going read-write [ 110.472575][ T6048] bcachefs (loop1): marking superblocks [ 110.493989][ T6048] bcachefs (loop1): initializing freespace [ 110.504153][ T6048] bcachefs (loop1): done initializing freespace [ 110.515697][ T6048] bcachefs (loop1): reading snapshots table [ 110.521829][ T6048] bcachefs (loop1): reading snapshots done [ 110.542459][ T6066] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 110.574155][ T6066] netlink: 224 bytes leftover after parsing attributes in process `syz.0.27'. [ 110.589918][ T6048] bcachefs (loop1): done starting filesystem [ 110.715077][ T1212] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 111.239544][ T6073] loop4: detected capacity change from 0 to 128 [ 111.474737][ T6073] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 111.533096][ T1212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.635751][ T1212] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.507197][ T6073] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.560544][ T1212] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.570387][ T1212] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.581037][ T1212] usb 4-1: Manufacturer: syz [ 112.596658][ T1212] usb 4-1: config 0 descriptor?? [ 113.688355][ T5899] usb 4-1: USB disconnect, device number 2 [ 113.767287][ T6048] syz.1.25 (6048) used greatest stack depth: 15608 bytes left [ 113.787009][ T5841] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.755902][ T5844] Bluetooth: Wrong link type (-22) [ 115.931579][ T6092] netlink: 'syz.4.31': attribute type 10 has an invalid length. [ 116.876729][ T6092] team0: Port device geneve1 added [ 117.371325][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 117.441049][ T5913] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 118.102102][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.142925][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.174872][ T5913] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 118.194588][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.206919][ T5913] usb 3-1: Product: syz [ 118.216393][ T5913] usb 3-1: Manufacturer: syz [ 118.224455][ T5913] usb 3-1: SerialNumber: syz [ 118.252435][ T5913] usb 3-1: config 0 descriptor?? [ 118.475160][ T5913] option 3-1:0.0: GSM modem (1-port) converter detected [ 119.130552][ T1212] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.243757][ T5913] usb 3-1: USB disconnect, device number 4 [ 119.335443][ T1212] usb 1-1: Using ep0 maxpacket: 16 [ 119.434516][ T5922] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 119.566848][ T1212] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 119.668334][ T1212] usb 1-1: config 4 has no interface number 0 [ 119.742166][ T1212] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 119.842521][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.891327][ T1212] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.958587][ T5913] option 3-1:0.0: device disconnected [ 119.994694][ T5922] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 119.999197][ T6123] netlink: 48 bytes leftover after parsing attributes in process `syz.2.41'. [ 120.027921][ T1212] usb 1-1: config 4 interface 51 has no altsetting 0 [ 120.088181][ T5922] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 120.102618][ T1212] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 120.132622][ T5922] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 120.142050][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.150099][ T1212] usb 1-1: Product: syz [ 120.154895][ T5922] usb 5-1: Manufacturer: syz [ 120.159824][ T1212] usb 1-1: Manufacturer: syz [ 120.166713][ T5834] bcachefs (loop1): shutting down [ 120.167194][ T1212] usb 1-1: SerialNumber: syz [ 120.177828][ T5834] bcachefs (loop1): going read-only [ 120.186509][ T5834] bcachefs (loop1): finished waiting for writes to stop [ 120.197396][ T6107] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.208423][ T5922] usb 5-1: config 0 descriptor?? [ 120.224910][ T6107] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.235112][ T5834] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 120.269413][ T5834] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 120.286330][ T6119] veth0_vlan: entered allmulticast mode [ 120.314763][ T6120] veth0_vlan: left promiscuous mode [ 120.322982][ T6120] veth0_vlan: entered promiscuous mode [ 120.346814][ T1212] usb 1-1: can't set config #4, error -71 [ 120.365638][ T5834] bcachefs (loop1): clean shutdown complete, journal seq 11 [ 120.377497][ T5834] bcachefs (loop1): marking filesystem clean [ 120.474830][ T1212] usb 1-1: USB disconnect, device number 2 [ 120.599616][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.687568][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.825556][ T5834] bcachefs (loop1): shutdown complete [ 121.318122][ T1212] usb 5-1: USB disconnect, device number 3 [ 121.669542][ T5844] Bluetooth: Wrong link type (-22) [ 121.671017][ T6139] netlink: 'syz.3.46': attribute type 10 has an invalid length. [ 121.832118][ T6139] team0: Port device geneve1 added [ 122.193686][ T6144] loop0: detected capacity change from 0 to 24 [ 122.268373][ T6144] ======================================================= [ 122.268373][ T6144] WARNING: The mand mount option has been deprecated and [ 122.268373][ T6144] and is ignored by this kernel. Remove the mand [ 122.268373][ T6144] option from the mount to silence this warning. [ 122.268373][ T6144] ======================================================= [ 122.390993][ T6144] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 122.415261][ T6144] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 122.869123][ T6144] VFS: Lookup of 'file0' in romfs loop0 would have caused loop [ 123.203754][ T6152] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 123.275983][ T6152] netlink: 224 bytes leftover after parsing attributes in process `syz.3.50'. [ 124.221309][ T6168] loop4: detected capacity change from 0 to 128 [ 126.319301][ T6168] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 126.333936][ T6168] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.130360][ T5841] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.905939][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.59'. [ 128.271333][ T5920] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.523110][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 128.839660][ T5920] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 128.980996][ T5920] usb 5-1: config 4 has no interface number 0 [ 129.019360][ T5920] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 129.057790][ T5920] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 129.126328][ T5920] usb 5-1: config 4 interface 51 has no altsetting 0 [ 129.187239][ T5920] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 129.203883][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.222440][ T5920] usb 5-1: Product: syz [ 129.227535][ T5920] usb 5-1: Manufacturer: syz [ 129.235352][ T5920] usb 5-1: SerialNumber: syz [ 129.257390][ T6191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.271118][ T5922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.281327][ T6191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.334251][ T6203] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.467102][ T6205] veth0_vlan: left promiscuous mode [ 129.482815][ T6205] veth0_vlan: entered promiscuous mode [ 130.076885][ T6203] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 130.091017][ T6203] netlink: 208 bytes leftover after parsing attributes in process `syz.1.42'. [ 130.216085][ T5922] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.336603][ T5922] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.349739][ T5922] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.366219][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 130.400959][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 130.409167][ T5922] usb 1-1: Product: syz [ 130.418643][ T6186] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.427485][ T6186] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.435195][ T5922] usb 1-1: Manufacturer: syz [ 130.440374][ T5922] usb 1-1: SerialNumber: syz [ 130.531017][ T5913] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.716590][ T5920] cdc_eem 5-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.4-1, CDC EEM Device, ee:ac:81:58:ec:fb [ 130.780042][ T5922] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 130.781055][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 130.899017][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.999590][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 131.078504][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.105079][ T978] usb 5-1: USB disconnect, device number 4 [ 131.161440][ T978] cdc_eem 5-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.4-1, CDC EEM Device [ 131.194740][ T5913] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 131.209721][ T5920] usb 1-1: USB disconnect, device number 3 [ 131.288818][ T5920] usblp0: removed [ 131.304546][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.420773][ T5913] usb 2-1: config 0 descriptor?? [ 131.428616][ T6209] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 131.470197][ T5913] hub 2-1:0.0: USB hub found [ 131.666795][ T5913] hub 2-1:0.0: 2 ports detected [ 133.260011][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 133.281022][ T978] usb 2-1: USB disconnect, device number 3 [ 133.601027][ T5920] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.227477][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 135.180918][ T5920] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 135.217157][ T5920] usb 3-1: config 0 has no interface number 0 [ 135.260913][ T5920] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.290674][ T5920] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 135.328106][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.361985][ T5920] usb 3-1: Product: syz [ 135.366266][ T5920] usb 3-1: Manufacturer: syz [ 135.395448][ T5920] usb 3-1: SerialNumber: syz [ 135.438760][ T5920] usb 3-1: config 0 descriptor?? [ 135.473722][ T5920] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 135.518618][ T5920] em28xx 3-1:0.132: Video interface 132 found: [ 135.891120][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.067527][ T5920] em28xx 3-1:0.132: unknown em28xx chip ID (39) [ 136.081157][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 136.341293][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.397995][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.419397][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.437896][ T5920] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 136.465607][ T5920] em28xx 3-1:0.132: board has no eeprom [ 136.466168][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 136.512668][ T6276] netlink: 120 bytes leftover after parsing attributes in process `syz.3.82'. [ 136.530883][ T9] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 136.550306][ T9] usb 1-1: Product: syz [ 136.571012][ T5920] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 136.578905][ T5920] em28xx 3-1:0.132: analog set to bulk mode. [ 136.590496][ T9] usb 1-1: Manufacturer: syz [ 136.606016][ T9] usb 1-1: SerialNumber: syz [ 136.612486][ T5953] em28xx 3-1:0.132: Registering V4L2 extension [ 136.644572][ T5920] usb 3-1: USB disconnect, device number 5 [ 136.671401][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 136.680478][ T6279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.83'. [ 136.703372][ T5920] em28xx 3-1:0.132: Disconnecting em28xx [ 136.706875][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 136.945288][ T6283] netlink: 788 bytes leftover after parsing attributes in process `syz.3.84'. [ 136.997615][ T9] usb 1-1: USB disconnect, device number 4 [ 137.122185][ T6291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.84'. [ 137.175533][ T9] appletouch 1-1:1.0: input: appletouch disconnected [ 137.223403][ T5953] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 137.253473][ T5953] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 137.274814][ T5953] em28xx 3-1:0.132: No AC97 audio processor [ 137.334505][ T5953] usb 3-1: Decoder not found [ 137.339297][ T5953] em28xx 3-1:0.132: failed to create media graph [ 137.369646][ T5953] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 137.431131][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.567994][ T5953] em28xx 3-1:0.132: Remote control support is not available for this card. [ 138.028977][ T5920] em28xx 3-1:0.132: Closing input extension [ 138.035406][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 138.078635][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.127576][ T5920] em28xx 3-1:0.132: Freeing device [ 138.139431][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 138.201834][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.220652][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 138.240600][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.278930][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.325115][ T43] usb 2-1: config 0 descriptor?? [ 138.354452][ T6296] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.375722][ T43] hub 2-1:0.0: USB hub found [ 139.024152][ T43] hub 2-1:0.0: 2 ports detected [ 140.581987][ T1212] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 140.600734][ T978] usb 2-1: USB disconnect, device number 4 [ 142.579528][ T6330] option changes via remount are deprecated (pid=6329 comm=syz.0.91) [ 142.613190][ T6340] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 142.712354][ T6340] netlink: 208 bytes leftover after parsing attributes in process `syz.1.92'. [ 142.772381][ T5844] Bluetooth: Wrong link type (-22) [ 142.806113][ T6344] netlink: 'syz.4.95': attribute type 10 has an invalid length. [ 143.968861][ T6357] loop3: detected capacity change from 0 to 32768 [ 144.890474][ T6369] tipc: Started in network mode [ 144.920373][ T6369] tipc: Node identity 8e44c753cdff, cluster identity 4711 [ 144.997701][ T6366] loop4: detected capacity change from 0 to 32768 [ 145.073039][ T6369] tipc: Enabled bearer , priority 10 [ 145.102221][ T6357] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 145.102253][ T6357] allowing incompatible features above 0.0: (unknown version) [ 145.102267][ T6357] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 145.147196][ T6357] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 145.155698][ T6357] bcachefs (loop3): initializing new filesystem [ 145.176693][ T6357] bcachefs (loop3): going read-write [ 145.275184][ T6366] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 145.275225][ T6366] allowing incompatible features above 0.0: (unknown version) [ 145.275239][ T6366] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 145.321520][ T6366] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 145.329746][ T6366] bcachefs (loop4): initializing new filesystem [ 145.333248][ T6357] bcachefs (loop3): marking superblocks [ 145.346360][ T6366] bcachefs (loop4): going read-write [ 145.351674][ T6357] bcachefs (loop3): initializing freespace [ 145.361896][ T6357] bcachefs (loop3): done initializing freespace [ 145.370956][ T6357] bcachefs (loop3): reading snapshots table [ 145.376971][ T6357] bcachefs (loop3): reading snapshots done [ 145.414464][ T6357] bcachefs (loop3): done starting filesystem [ 145.425982][ T6366] bcachefs (loop4): marking superblocks [ 145.442430][ T6366] bcachefs (loop4): initializing freespace [ 145.452039][ T6366] bcachefs (loop4): done initializing freespace [ 145.461637][ T6366] bcachefs (loop4): reading snapshots table [ 145.467671][ T6366] bcachefs (loop4): reading snapshots done [ 145.510928][ T6366] bcachefs (loop4): done starting filesystem [ 146.315951][ T5913] tipc: Node number set to 1136379731 [ 146.618960][ T6358] tipc: Resetting bearer [ 146.626244][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.646648][ T5841] bcachefs (loop4): shutting down [ 146.656676][ T5841] bcachefs (loop4): going read-only [ 146.663679][ T5841] bcachefs (loop4): finished waiting for writes to stop [ 146.686898][ T5835] bcachefs (loop3): shutting down [ 146.697033][ T6356] tipc: Resetting bearer [ 146.706971][ T5841] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 146.715816][ T5835] bcachefs (loop3): going read-only [ 146.751229][ T5835] bcachefs (loop3): finished waiting for writes to stop [ 146.803421][ T5835] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 146.833388][ T43] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 146.877102][ T5841] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4 [ 146.878897][ T43] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 146.906306][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 146.922103][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.940283][ T5835] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 146.976512][ T5841] bcachefs (loop4): clean shutdown complete, journal seq 5 [ 146.988450][ T5835] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 147.001783][ T5841] bcachefs (loop4): marking filesystem clean [ 147.012053][ T5835] bcachefs (loop3): marking filesystem clean [ 147.147671][ T5841] bcachefs (loop4): shutdown complete [ 147.166019][ T5835] bcachefs (loop3): shutdown complete [ 147.315666][ T5953] usb 2-1: USB disconnect, device number 5 [ 147.499813][ T5913] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 147.683864][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.723824][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.736960][ T5913] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 147.762329][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.781144][ T5913] usb 1-1: Product: syz [ 147.785389][ T5913] usb 1-1: Manufacturer: syz [ 147.790032][ T5913] usb 1-1: SerialNumber: syz [ 147.823212][ T5913] usb 1-1: config 0 descriptor?? [ 147.848779][ T5913] option 1-1:0.0: GSM modem (1-port) converter detected [ 151.407082][ T6417] netlink: 48 bytes leftover after parsing attributes in process `syz.4.112'. [ 151.422108][ T6417] netlink: 48 bytes leftover after parsing attributes in process `syz.4.112'. [ 151.517782][ T6419] loop1: detected capacity change from 0 to 128 [ 152.295699][ T6419] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 152.310651][ T6419] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.691211][ T5834] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.439803][ T6429] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 153.450362][ T6429] netlink: 208 bytes leftover after parsing attributes in process `syz.1.115'. [ 154.145047][ T5913] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.302899][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 154.321550][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.332002][ T5913] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.348143][ T5913] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.358148][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.364923][ T5913] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 154.374232][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.386511][ T5913] usb 5-1: config 0 descriptor?? [ 154.825627][ T6356] tipc: Disabling bearer [ 154.987695][ T5913] usbhid 5-1:0.0: can't add hid device: -71 [ 155.007075][ T5913] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 155.021668][ T5913] usb 5-1: USB disconnect, device number 5 [ 155.321573][ T6439] loop1: detected capacity change from 0 to 32768 [ 155.980056][ T6439] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 155.980081][ T6439] allowing incompatible features above 0.0: (unknown version) [ 155.980091][ T6439] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 155.994600][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 156.002898][ T6439] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 156.002950][ T6439] bcachefs (loop1): initializing new filesystem [ 156.056773][ T6439] bcachefs (loop1): going read-write [ 156.109323][ T6439] bcachefs (loop1): marking superblocks [ 156.123353][ T6439] bcachefs (loop1): initializing freespace [ 156.132812][ T6439] bcachefs (loop1): done initializing freespace [ 156.144120][ T6439] bcachefs (loop1): reading snapshots table [ 156.150914][ T6439] bcachefs (loop1): reading snapshots done [ 156.216594][ T6439] bcachefs (loop1): done starting filesystem [ 156.223881][ T5953] usb 1-1: USB disconnect, device number 5 [ 156.280638][ T5953] option 1-1:0.0: device disconnected [ 156.493891][ T1212] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.890515][ T5834] bcachefs (loop1): shutting down [ 156.996039][ T5834] bcachefs (loop1): going read-only [ 157.001792][ T5834] bcachefs (loop1): finished waiting for writes to stop [ 157.012275][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 157.024287][ T5834] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 157.045929][ T1212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.822688][ T1212] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.931307][ T1212] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.979348][ T1212] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 157.991346][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 157.999924][ T1212] usb 3-1: Product: syz [ 158.004518][ T1212] usb 3-1: Manufacturer: syz [ 158.009330][ T1212] usb 3-1: SerialNumber: syz [ 158.222838][ T5834] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 158.226551][ T5834] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 158.227120][ T5834] bcachefs (loop1): marking filesystem clean [ 158.279119][ T1212] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6 [ 158.308578][ T6463] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.593475][ T6471] option changes via remount are deprecated (pid=6469 comm=syz.3.124) [ 158.898015][ T5834] bcachefs (loop1): shutdown complete [ 159.014646][ T5899] usb 3-1: USB disconnect, device number 6 [ 159.160136][ T5899] appletouch 3-1:1.0: input: appletouch disconnected [ 161.748703][ T1212] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 162.116320][ T6505] loop2: detected capacity change from 0 to 32768 [ 162.195474][ T1212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.206135][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.265361][ T1212] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 162.297861][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.343488][ T6505] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 162.343514][ T6505] allowing incompatible features above 0.0: (unknown version) [ 162.343524][ T6505] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 162.388320][ T6505] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 162.397828][ T6505] bcachefs (loop2): initializing new filesystem [ 162.410869][ T6505] bcachefs (loop2): going read-write [ 162.417816][ T1212] usb 1-1: Product: syz [ 162.422118][ T1212] usb 1-1: Manufacturer: syz [ 162.426738][ T1212] usb 1-1: SerialNumber: syz [ 162.450141][ T1212] usb 1-1: config 0 descriptor?? [ 162.486389][ T6505] bcachefs (loop2): marking superblocks [ 162.502212][ T6505] bcachefs (loop2): initializing freespace [ 162.511913][ T6505] bcachefs (loop2): done initializing freespace [ 162.520495][ T6505] bcachefs (loop2): reading snapshots table [ 162.526536][ T6505] bcachefs (loop2): reading snapshots done [ 162.558362][ T1212] option 1-1:0.0: GSM modem (1-port) converter detected [ 162.702747][ T6505] bcachefs (loop2): done starting filesystem [ 162.919341][ T5913] usb 1-1: USB disconnect, device number 6 [ 162.983053][ T5913] option 1-1:0.0: device disconnected [ 163.669201][ T5836] bcachefs (loop2): shutting down [ 163.747900][ T5836] bcachefs (loop2): going read-only [ 163.772963][ T5836] bcachefs (loop2): finished waiting for writes to stop [ 163.838304][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4 [ 164.122812][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 164.192749][ T5836] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 164.200582][ T5836] bcachefs (loop2): marking filesystem clean [ 165.626073][ T5836] bcachefs (loop2): shutdown complete [ 166.556949][ T6542] netlink: 'syz.1.141': attribute type 10 has an invalid length. [ 166.647684][ T6544] netlink: 48 bytes leftover after parsing attributes in process `syz.0.142'. [ 166.662447][ T6542] team0: Port device geneve1 added [ 168.627265][ T6555] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 168.745952][ T6555] netlink: 224 bytes leftover after parsing attributes in process `syz.1.145'. [ 169.080928][ T5953] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 169.561355][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.591139][ T5953] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.633603][ T5953] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 169.663513][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.686629][ T6569] netlink: 'syz.0.149': attribute type 10 has an invalid length. [ 169.688114][ T5844] Bluetooth: Wrong link type (-22) [ 169.705837][ T5953] usb 4-1: Product: syz [ 169.710090][ T5953] usb 4-1: Manufacturer: syz [ 169.720557][ T5953] usb 4-1: SerialNumber: syz [ 169.729819][ T5953] usb 4-1: config 0 descriptor?? [ 169.783522][ T5953] option 4-1:0.0: GSM modem (1-port) converter detected [ 169.799954][ T6569] team0: Port device geneve1 added [ 169.866226][ T6571] loop4: detected capacity change from 0 to 1024 [ 169.995694][ T5953] usb 4-1: USB disconnect, device number 3 [ 170.786826][ T5953] option 4-1:0.0: device disconnected [ 171.322855][ T5844] Bluetooth: Wrong link type (-22) [ 171.350423][ T6578] netlink: 'syz.0.152': attribute type 10 has an invalid length. [ 171.811111][ T5913] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 171.997711][ T6588] Zero length message leads to an empty skb [ 172.049678][ T6588] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.990908][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 173.008347][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.040979][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.506177][ T5913] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.652160][ T5913] usb 4-1: string descriptor 0 read error: -71 [ 174.661104][ T5913] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 174.670243][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 174.744042][ T5953] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.811628][ T5913] usb 4-1: can't set config #1, error -71 [ 174.868108][ T5913] usb 4-1: USB disconnect, device number 4 [ 174.931152][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 175.341372][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.371841][ T6606] netlink: 788 bytes leftover after parsing attributes in process `syz.3.161'. [ 175.373433][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 175.412029][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.461275][ T5953] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 175.520913][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.552675][ T5953] usb 1-1: config 0 descriptor?? [ 175.558595][ T6602] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 175.575437][ T5953] hub 1-1:0.0: USB hub found [ 176.192797][ T5913] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 176.293354][ T5953] hub 1-1:0.0: 2 ports detected [ 176.305191][ T6606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.161'. [ 176.463448][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.498908][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 176.545352][ T5913] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 176.560478][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.626133][ T5913] usb 3-1: Product: syz [ 176.630391][ T5913] usb 3-1: Manufacturer: syz [ 176.635800][ T5913] usb 3-1: SerialNumber: syz [ 176.665206][ T5913] usb 3-1: config 0 descriptor?? [ 176.675329][ T5913] option 3-1:0.0: GSM modem (1-port) converter detected [ 176.943714][ T5913] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 176.996362][ T1212] usb 3-1: USB disconnect, device number 7 [ 177.008715][ T1212] option 3-1:0.0: device disconnected [ 177.121337][ T5953] usb 1-1: USB disconnect, device number 7 [ 177.204599][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.229449][ T6623] loop1: detected capacity change from 0 to 1024 [ 177.247683][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.259303][ T5913] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 177.274366][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.283581][ T5913] usb 4-1: Product: syz [ 177.288280][ T5913] usb 4-1: Manufacturer: syz [ 177.298770][ T5913] usb 4-1: SerialNumber: syz [ 177.329732][ T5913] usb 4-1: config 0 descriptor?? [ 177.428508][ T5913] option 4-1:0.0: GSM modem (1-port) converter detected [ 177.792769][ T5913] usb 4-1: USB disconnect, device number 5 [ 177.826151][ T5913] option 4-1:0.0: device disconnected [ 180.467842][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 180.711315][ T5913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 182.050162][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.063364][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.074602][ T5913] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.084568][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.093482][ T5913] usb 4-1: SerialNumber: syz [ 182.484889][ T5913] usb 4-1: cannot find UAC_HEADER [ 182.621467][ T5913] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 182.670320][ T5913] usb 4-1: USB disconnect, device number 6 [ 182.794050][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.008797][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.018407][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.037358][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.052216][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.066839][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.552063][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.660379][ T6660] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 185.149752][ T6664] loop4: detected capacity change from 0 to 1024 [ 185.156598][ T5844] Bluetooth: hci2: command tx timeout [ 185.324433][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.504034][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.916995][ T1212] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 187.209854][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.230958][ T5844] Bluetooth: hci2: command tx timeout [ 187.343701][ T1212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.370896][ T1212] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.395578][ T1212] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 187.424236][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.432394][ T1212] usb 4-1: Product: syz [ 187.436613][ T1212] usb 4-1: Manufacturer: syz [ 187.450885][ T1212] usb 4-1: SerialNumber: syz [ 187.511038][ T1212] usb 4-1: config 0 descriptor?? [ 187.525772][ T1212] option 4-1:0.0: GSM modem (1-port) converter detected [ 188.753201][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 189.291347][ T1212] usb 4-1: USB disconnect, device number 7 [ 189.310970][ T5844] Bluetooth: hci2: command tx timeout [ 189.372398][ T1212] option 4-1:0.0: device disconnected [ 190.798325][ T1212] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 191.253664][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 191.272405][ T1212] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 191.290862][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 191.317717][ T1212] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 191.332191][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.340416][ T1212] usb 4-1: Product: syz [ 191.345209][ T1212] usb 4-1: Manufacturer: syz [ 191.349870][ T1212] usb 4-1: SerialNumber: syz [ 191.362525][ T1212] usb 4-1: config 0 descriptor?? [ 191.368742][ T6699] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 191.380413][ T6699] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 191.391100][ T5844] Bluetooth: hci2: command tx timeout [ 191.402171][ T1212] usb 4-1: ucan: probing device on interface #0 [ 191.500542][ T13] bridge_slave_1: left allmulticast mode [ 191.519313][ T13] bridge_slave_1: left promiscuous mode [ 191.531459][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.558052][ T13] bridge_slave_0: left allmulticast mode [ 191.564575][ T6722] netlink: 788 bytes leftover after parsing attributes in process `syz.0.191'. [ 191.598383][ T13] bridge_slave_0: left promiscuous mode [ 191.605678][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.735858][ T6725] netlink: 32 bytes leftover after parsing attributes in process `syz.0.191'. [ 191.884385][ T1212] usb 4-1: ucan: device reported invalid tx-fifo size [ 191.900662][ T1212] usb 4-1: ucan: probe failed; try to update the device firmware [ 193.218109][ T1212] usb 4-1: USB disconnect, device number 8 [ 194.190084][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.210626][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.228754][ T13] bond0 (unregistering): Released all slaves [ 194.241535][ T1212] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 194.281104][ T5913] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 194.410982][ T1212] usb 4-1: Using ep0 maxpacket: 32 [ 194.420740][ T1212] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 194.436310][ T1212] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.462384][ T1212] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.473310][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.478218][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.516657][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.521066][ T1212] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 194.550693][ T5913] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 194.568384][ T1212] usb 4-1: no configuration chosen from 1 choice [ 194.596410][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.638026][ T5913] usb 5-1: Product: syz [ 194.650335][ T5913] usb 5-1: Manufacturer: syz [ 194.661059][ T5913] usb 5-1: SerialNumber: syz [ 194.691979][ T5913] usb 5-1: config 0 descriptor?? [ 194.698375][ T13] tipc: Left network mode [ 194.742326][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.759144][ T5913] option 5-1:0.0: GSM modem (1-port) converter detected [ 194.767319][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.803645][ T6653] bridge_slave_0: entered allmulticast mode [ 194.823397][ T6653] bridge_slave_0: entered promiscuous mode [ 194.967958][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.981550][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.988965][ T6653] bridge_slave_1: entered allmulticast mode [ 195.000669][ T6653] bridge_slave_1: entered promiscuous mode [ 195.051071][ T1212] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.243655][ T1212] usb 1-1: Using ep0 maxpacket: 32 [ 195.683369][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.695184][ T1212] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 195.706601][ T1212] usb 1-1: config 0 has no interface number 0 [ 195.730998][ T1212] usb 1-1: config 0 interface 184 has no altsetting 0 [ 195.767820][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.809493][ T1212] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 195.820248][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.840392][ T1212] usb 1-1: Product: syz [ 195.863679][ T1212] usb 1-1: Manufacturer: syz [ 195.889174][ T1212] usb 1-1: SerialNumber: syz [ 195.900372][ T5921] usb 5-1: USB disconnect, device number 6 [ 195.927172][ T5921] option 5-1:0.0: device disconnected [ 195.949935][ T1212] usb 1-1: config 0 descriptor?? [ 196.002132][ T1212] smsc75xx v1.0.0 [ 196.044047][ T6653] team0: Port device team_slave_0 added [ 196.066016][ T6653] team0: Port device team_slave_1 added [ 196.093244][ T13] hsr_slave_0: left promiscuous mode [ 196.102252][ T13] hsr_slave_1: left promiscuous mode [ 196.108846][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.127095][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.142358][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.149883][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.171337][ T6712] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 196.203694][ T13] veth1_macvtap: left promiscuous mode [ 196.216912][ T13] veth0_macvtap: left promiscuous mode [ 196.225033][ T13] veth1_vlan: left promiscuous mode [ 196.231708][ T13] veth0_vlan: left promiscuous mode [ 196.341451][ T6712] usb 2-1: Using ep0 maxpacket: 32 [ 196.372388][ T6712] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 196.380601][ T6712] usb 2-1: config 0 has no interface number 0 [ 196.418668][ T6712] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 196.458850][ T6712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.690918][ T6712] usb 2-1: Product: syz [ 196.699205][ T6712] usb 2-1: Manufacturer: syz [ 196.719806][ T6712] usb 2-1: SerialNumber: syz [ 196.770061][ T6712] usb 2-1: config 0 descriptor?? [ 197.461053][ T1212] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 197.478791][ T1212] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 197.498337][ T6712] smsc95xx v2.0.0 [ 197.506390][ T1212] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 197.526954][ T1212] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 197.627094][ T9] usb 4-1: USB disconnect, device number 9 [ 197.916950][ T6712] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 197.948527][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'. [ 197.959109][ T6805] netlink: 48 bytes leftover after parsing attributes in process `syz.4.204'. [ 197.962781][ T6712] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 198.357948][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 198.488605][ T13] team0 (unregistering): Port device team_slave_1 removed [ 198.521046][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 198.547847][ T9] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 198.563761][ T9] usb 4-1: config 4 has no interface number 0 [ 198.588938][ T9] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 198.610077][ T9] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 198.624545][ T43] usb 1-1: USB disconnect, device number 8 [ 198.662007][ T9] usb 4-1: config 4 interface 51 has no altsetting 0 [ 198.678616][ T9] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 198.688902][ T13] team0 (unregistering): Port device team_slave_0 removed [ 198.700932][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.729292][ T9] usb 4-1: Product: syz [ 198.748867][ T9] usb 4-1: Manufacturer: syz [ 198.795728][ T9] usb 4-1: SerialNumber: syz [ 198.831337][ T6712] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 198.886647][ T6712] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 198.898519][ T6802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 198.912750][ T6802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 199.421859][ T6801] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 199.434247][ T6801] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 199.728951][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.068454][ T6816] warning: `syz.0.207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 200.068447][ T9] cdc_eem 4-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.3-1, CDC EEM Device, f6:11:69:17:e4:1f [ 200.098349][ T9] usb 4-1: USB disconnect, device number 10 [ 200.125334][ T9] cdc_eem 4-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.3-1, CDC EEM Device [ 200.751619][ T5913] usb 2-1: USB disconnect, device number 6 [ 200.811937][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.819038][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.983706][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.570479][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.608338][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.751028][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.769831][ T6712] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 202.011197][ T6712] usb 2-1: Using ep0 maxpacket: 32 [ 202.031859][ T6712] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 202.104477][ T6712] usb 2-1: config 0 has no interface number 0 [ 202.191188][ T6712] usb 2-1: config 0 interface 184 has no altsetting 0 [ 202.316867][ T6712] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 202.391478][ T6712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.400354][ T6712] usb 2-1: Product: syz [ 202.408952][ T6712] usb 2-1: Manufacturer: syz [ 202.414164][ T1212] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 202.423694][ T6712] usb 2-1: SerialNumber: syz [ 202.445112][ T6712] usb 2-1: config 0 descriptor?? [ 203.137726][ T6843] Bluetooth: MGMT ver 1.23 [ 203.202200][ T6712] smsc75xx v1.0.0 [ 203.220148][ T1212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.244224][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.274042][ T1212] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 203.290875][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.430934][ T1212] usb 1-1: Product: syz [ 203.436447][ T1212] usb 1-1: Manufacturer: syz [ 203.446337][ T1212] usb 1-1: SerialNumber: syz [ 203.455230][ T1212] usb 1-1: config 0 descriptor?? [ 203.579070][ T1212] option 1-1:0.0: GSM modem (1-port) converter detected [ 204.631042][ T6712] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 204.748592][ T6712] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 204.938007][ T6712] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 204.959143][ T6712] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 205.068544][ T6653] hsr_slave_0: entered promiscuous mode [ 205.111781][ T6653] hsr_slave_1: entered promiscuous mode [ 205.139441][ T6653] debugfs: 'hsr0' already exists in 'hsr' [ 205.165878][ T6653] Cannot create hsr debugfs directory [ 205.231690][ T5844] Bluetooth: hci0: command tx timeout [ 206.273548][ T978] usb 2-1: USB disconnect, device number 7 [ 206.941082][ T6712] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 207.101102][ T6712] usb 5-1: Using ep0 maxpacket: 16 [ 207.184506][ T6712] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 207.299036][ T6712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.414169][ T6712] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 207.557795][ T6712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.576314][ T6712] usb 5-1: Product: syz [ 207.580563][ T6712] usb 5-1: Manufacturer: syz [ 207.595534][ T6712] usb 5-1: SerialNumber: syz [ 207.683812][ T5922] usb 1-1: USB disconnect, device number 9 [ 207.721977][ T6712] usb 5-1: config 0 descriptor?? [ 207.729938][ T5922] option 1-1:0.0: device disconnected [ 207.739339][ T6712] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 207.784280][ T6712] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 207.842853][ T6869] netlink: 788 bytes leftover after parsing attributes in process `syz.1.224'. [ 208.139244][ T6875] netlink: 32 bytes leftover after parsing attributes in process `syz.1.224'. [ 208.262467][ T5922] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 208.573078][ T6712] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 208.601607][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 208.616561][ T6712] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 208.624453][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.655931][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.680974][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 208.716461][ T5922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 208.745504][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.768988][ T5922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 208.793296][ T5922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 208.824352][ T5922] usb 1-1: Manufacturer: syz [ 208.838980][ T5922] usb 1-1: config 0 descriptor?? [ 209.046388][ T6653] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.053512][ T6712] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 209.060559][ T6712] em28xx 5-1:0.0: No AC97 audio processor [ 209.075123][ T6871] 9pnet_fd: Insufficient options for proto=fd [ 209.095676][ T6653] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.153133][ T6653] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.190508][ T6653] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.234512][ T5922] rc_core: IR keymap rc-hauppauge not found [ 209.240528][ T5922] Registered IR keymap rc-empty [ 209.247819][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.303299][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.325711][ T5922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 209.353924][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 209.409008][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.441349][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.446042][ T5913] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 209.475257][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.482429][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.518164][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.527650][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.546579][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.553939][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.561169][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.581076][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.609417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.611158][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.616732][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.651032][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 209.651518][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.658485][ T5913] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 209.678100][ T5913] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.697871][ T5913] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 209.719178][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.732445][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.761682][ T5922] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.775427][ T5913] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 209.816807][ T5913] usb 2-1: no configuration chosen from 1 choice [ 209.825949][ T5922] mceusb 1-1:0.0: Registered 爬 with mce emulator interface version 1 [ 209.849762][ T5922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 209.870298][ T5922] usb 1-1: USB disconnect, device number 10 [ 210.098301][ T5921] usb 5-1: USB disconnect, device number 7 [ 210.105915][ T5921] em28xx 5-1:0.0: Disconnecting em28xx [ 210.137581][ T5921] em28xx 5-1:0.0: Freeing device [ 210.491222][ T5833] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 210.620849][ T6909] option changes via remount are deprecated (pid=6903 comm=syz.4.231) [ 210.735661][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 210.956972][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.979644][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.987991][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 211.036532][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 211.067758][ T5833] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 211.083917][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.209405][ T5833] usb 4-1: config 0 descriptor?? [ 211.224003][ T6908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.697201][ T5833] hub 4-1:0.0: USB hub found [ 212.045152][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 212.058485][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 212.060936][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 212.064694][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 212.791363][ T5833] hub 4-1:0.0: 2 ports detected [ 212.844563][ T9] usb 2-1: USB disconnect, device number 8 [ 213.062044][ T6929] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.236'. [ 213.071696][ T5922] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 213.251027][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 213.265419][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.296969][ T5922] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 213.307876][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.324591][ T5922] usb 5-1: config 0 descriptor?? [ 213.343328][ T5922] hub 5-1:0.0: bad descriptor, ignoring hub [ 213.349395][ T5922] hub 5-1:0.0: probe with driver hub failed with error -5 [ 213.370969][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.380343][ T5922] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 213.436588][ T6653] veth0_vlan: entered promiscuous mode [ 213.467314][ T6653] veth1_vlan: entered promiscuous mode [ 213.541147][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 213.553399][ T6653] veth0_macvtap: entered promiscuous mode [ 213.566537][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 213.595729][ T6653] veth1_macvtap: entered promiscuous mode [ 213.602020][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.602704][ T5921] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 213.624108][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 213.633920][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.642634][ T9] usb 2-1: Product: syz [ 213.654313][ T9] usb 2-1: Manufacturer: syz [ 213.659145][ T9] usb 2-1: SerialNumber: syz [ 213.671393][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.684201][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.722022][ T9] usb 2-1: config 0 descriptor?? [ 213.734642][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 213.741421][ T1109] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.763689][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.772786][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 213.806131][ T5921] usb 1-1: config 0 has no interfaces? [ 213.825538][ T5921] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 213.836466][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.849651][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.850994][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.878220][ T5921] usb 1-1: config 0 descriptor?? [ 214.017744][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.040845][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.111492][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.119438][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.151583][ T978] usb 4-1: USB disconnect, device number 11 [ 214.235588][ T5913] usb 1-1: USB disconnect, device number 11 [ 214.351356][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 214.358678][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 214.366126][ T5844] Bluetooth: Wrong link type (-22) [ 214.374923][ T6940] netlink: 'syz.5.168': attribute type 10 has an invalid length. [ 214.406367][ T6940] team0: Port device geneve1 added [ 216.334936][ T9] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 216.355326][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 216.371323][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 216.503787][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 216.510633][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 216.517639][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 216.527723][ T9] usb 2-1: USB disconnect, device number 9 [ 216.591297][ T5922] usb 5-1: USB disconnect, device number 8 [ 218.319934][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 218.708070][ T9] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 218.920836][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.115620][ T9] usb 6-1: Product: syz [ 219.119841][ T9] usb 6-1: Manufacturer: syz [ 219.160905][ T9] usb 6-1: SerialNumber: syz [ 219.199838][ T9] usb 6-1: config 0 descriptor?? [ 219.275848][ T5844] Bluetooth: hci5: urb ffff888055940500 submission failed (2) [ 219.497794][ T6985] option changes via remount are deprecated (pid=6981 comm=syz.0.252) [ 220.022658][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 220.497921][ T978] usb 6-1: USB disconnect, device number 2 [ 220.653547][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 220.663087][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 220.680931][ T9] usb 5-1: config 0 has no interface number 0 [ 220.687130][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 220.734099][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 220.762346][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.782431][ T9] usb 5-1: Product: syz [ 220.793618][ T9] usb 5-1: Manufacturer: syz [ 220.820430][ T6993] loop1: detected capacity change from 0 to 128 [ 220.860641][ T9] usb 5-1: SerialNumber: syz [ 221.528664][ T9] usb 5-1: config 0 descriptor?? [ 221.567463][ T9] smsc75xx v1.0.0 [ 221.697907][ T5921] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 221.745167][ T6993] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 221.759723][ T6993] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.921250][ T6712] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 221.943862][ T5921] usb 4-1: config 0 has no interfaces? [ 221.955523][ T5921] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 221.965703][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.989991][ T5921] usb 4-1: config 0 descriptor?? [ 222.210882][ T6712] usb 1-1: Using ep0 maxpacket: 32 [ 222.383557][ T6712] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.127571][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 223.321317][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 223.331139][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 223.351380][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 223.394051][ T6712] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 223.416279][ T5834] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.427052][ T6712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.442351][ T6712] usb 1-1: config 0 descriptor?? [ 223.460174][ T6712] hub 1-1:0.0: bad descriptor, ignoring hub [ 223.469026][ T6712] hub 1-1:0.0: probe with driver hub failed with error -5 [ 223.474830][ T5913] usb 4-1: USB disconnect, device number 12 [ 223.492570][ T6712] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 223.849909][ T7011] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 224.875808][ T9] usb 5-1: USB disconnect, device number 9 [ 225.803795][ T5833] usb 1-1: USB disconnect, device number 12 [ 228.222910][ T7040] netlink: 'syz.0.268': attribute type 1 has an invalid length. [ 228.230631][ T7040] netlink: 208 bytes leftover after parsing attributes in process `syz.0.268'. [ 228.743271][ T9] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 229.811268][ T9] usb 6-1: config 0 has no interfaces? [ 229.817021][ T9] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 229.868887][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.949538][ T9] usb 6-1: config 0 descriptor?? [ 230.136616][ T7063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.273'. [ 230.346711][ T5913] usb 6-1: USB disconnect, device number 3 [ 230.448370][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 230.473357][ T5833] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 230.630831][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 230.661133][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 230.678636][ T5833] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 230.687394][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 230.699578][ T5833] usb 2-1: config 4 has no interface number 0 [ 230.719016][ T5833] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 230.728298][ T9] usb 5-1: config 0 has no interface number 0 [ 230.755969][ T5833] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 230.760935][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 230.824028][ T5833] usb 2-1: config 4 interface 51 has no altsetting 0 [ 231.380251][ T5833] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 231.427278][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.449598][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 231.450298][ T5833] usb 2-1: Product: syz [ 231.450384][ T5833] usb 2-1: Manufacturer: syz [ 231.659305][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.675896][ T9] usb 5-1: Product: syz [ 231.680257][ T9] usb 5-1: Manufacturer: syz [ 231.681068][ T5833] usb 2-1: SerialNumber: syz [ 231.688991][ T9] usb 5-1: SerialNumber: syz [ 231.697663][ T9] usb 5-1: config 0 descriptor?? [ 231.705822][ T9] smsc75xx v1.0.0 [ 231.708084][ T7073] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 231.767252][ T7073] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 233.074461][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 233.086381][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 233.096247][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 233.107269][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 233.222180][ T5913] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 233.257113][ T5833] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -71 [ 233.296118][ T5833] usb 2-1: USB disconnect, device number 10 [ 233.420880][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 233.464952][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 233.627990][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 233.669777][ T5913] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 234.220843][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.241499][ T5913] usb 1-1: Product: syz [ 234.252422][ T5913] usb 1-1: Manufacturer: syz [ 234.259930][ T5913] usb 1-1: SerialNumber: syz [ 234.474736][ T5913] usb 1-1: config 0 descriptor?? [ 234.545523][ T9] usb 5-1: USB disconnect, device number 10 [ 234.605164][ T5913] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 234.621382][ T5913] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 234.972141][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 235.753541][ T5913] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 235.761227][ T5913] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 235.789122][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 235.823861][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.880962][ T10] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.910862][ T10] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.934225][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 235.966339][ T10] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 235.991824][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.115369][ T7118] netlink: 'syz.4.289': attribute type 1 has an invalid length. [ 236.144671][ T10] usb 4-1: config 0 descriptor?? [ 236.179984][ T7118] netlink: 224 bytes leftover after parsing attributes in process `syz.4.289'. [ 236.190543][ T5913] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 236.210313][ T5913] em28xx 1-1:0.0: No AC97 audio processor [ 237.464976][ T7126] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.927959][ T5913] usb 1-1: USB disconnect, device number 13 [ 237.982637][ T5913] em28xx 1-1:0.0: Disconnecting em28xx [ 238.076496][ T5913] em28xx 1-1:0.0: Freeing device [ 238.203612][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 238.209690][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 238.234879][ T10] usb 4-1: USB disconnect, device number 13 [ 238.717984][ T7135] netlink: 'syz.5.293': attribute type 1 has an invalid length. [ 238.740226][ T7135] netlink: 208 bytes leftover after parsing attributes in process `syz.5.293'. [ 238.831753][ T5844] Bluetooth: Wrong link type (-22) [ 238.841431][ T7137] netlink: 'syz.4.294': attribute type 10 has an invalid length. [ 239.901266][ T7147] netlink: 120 bytes leftover after parsing attributes in process `syz.0.296'. [ 240.742481][ T7164] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 241.614308][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 241.960898][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 242.033009][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 242.074750][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.121670][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 242.190308][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.291091][ T10] usb 2-1: Product: syz [ 242.340542][ T10] usb 2-1: Manufacturer: syz [ 242.845757][ T10] usb 2-1: SerialNumber: syz [ 242.903170][ T10] usb 2-1: config 0 descriptor?? [ 242.944288][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 243.004044][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 243.104525][ T7180] veth0_vlan: entered allmulticast mode [ 244.131163][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 244.232082][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 244.252785][ T10] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 244.293926][ T10] em28xx 2-1:0.0: No AC97 audio processor [ 244.401770][ T10] usb 2-1: USB disconnect, device number 11 [ 244.409260][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 244.498401][ T7192] option changes via remount are deprecated (pid=7187 comm=syz.0.308) [ 245.395994][ T10] em28xx 2-1:0.0: Freeing device [ 246.961774][ T7206] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 247.034696][ T7206] netlink: 224 bytes leftover after parsing attributes in process `syz.0.312'. [ 248.696671][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 249.647907][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 249.657298][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 249.670817][ T10] usb 5-1: config 0 has no interface number 0 [ 249.688248][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 249.720214][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 249.754879][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 249.783353][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 249.798324][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.828782][ T10] usb 5-1: Product: syz [ 249.853571][ T10] usb 5-1: Manufacturer: syz [ 249.858241][ T10] usb 5-1: SerialNumber: syz [ 249.863146][ T5913] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 249.922092][ T10] usb 5-1: config 0 descriptor?? [ 249.954731][ T7214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 249.963778][ T7214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 250.055313][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 250.124415][ T5913] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 250.180081][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 250.245325][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.428932][ T5913] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 250.538102][ T7214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 250.549832][ T7214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 250.671801][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.691343][ T9] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 250.700587][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.712417][ T5913] usb 4-1: config 0 descriptor?? [ 250.719310][ T9] usb 2-1: Product: syz [ 250.720913][ T5913] hub 4-1:0.0: bad descriptor, ignoring hub [ 250.731186][ T9] usb 2-1: Manufacturer: syz [ 250.735830][ T9] usb 2-1: SerialNumber: syz [ 250.740490][ T5913] hub 4-1:0.0: probe with driver hub failed with error -5 [ 250.757519][ T9] usb 2-1: config 0 descriptor?? [ 250.776708][ T5913] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 251.014324][ T5844] Bluetooth: hci5: urb ffff888055940000 submission failed (2) [ 251.159996][ T10] Error reading MAC address [ 251.256113][ T7214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.326465][ T7214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.926501][ T10] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 252.485386][ T5922] usb 2-1: USB disconnect, device number 12 [ 252.740966][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 252.781192][ T6024] usb 4-1: USB disconnect, device number 14 [ 253.032544][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 253.039924][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 253.048870][ T10] usb 6-1: config 0 has no interface number 0 [ 253.060945][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 253.070425][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 253.089829][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.113689][ T10] usb 6-1: Product: syz [ 253.172691][ T10] usb 6-1: Manufacturer: syz [ 253.194896][ T10] usb 6-1: SerialNumber: syz [ 253.734294][ T10] usb 6-1: config 0 descriptor?? [ 253.796784][ T10] smsc75xx v1.0.0 [ 253.854164][ T7260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.328'. [ 253.915942][ T5833] usb 5-1: USB disconnect, device number 11 [ 255.484559][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 255.495562][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 255.503314][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 255.513854][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 255.525734][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 255.782413][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 255.790809][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.816657][ T9] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.846231][ T7283] loop4: detected capacity change from 0 to 32768 [ 255.853463][ T9] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.893610][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.894262][ T7283] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 255.913170][ T9] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 255.932252][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.949810][ T9] usb 2-1: config 0 descriptor?? [ 256.008203][ T7283] XFS (loop4): Ending clean mount [ 256.022290][ T7283] XFS (loop4): Quotacheck needed: Please wait. [ 256.078295][ T7283] XFS (loop4): Quotacheck: Done. [ 256.189453][ T5841] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 256.471213][ T7298] loop0: detected capacity change from 0 to 32768 [ 256.551059][ T5922] usb 6-1: USB disconnect, device number 4 [ 256.686037][ T9] hid-alps 0003:044E:1215.0001: item fetching failed at offset 4/5 [ 256.808817][ T9] hid-alps 0003:044E:1215.0001: parse failed [ 256.885488][ T9] hid-alps 0003:044E:1215.0001: probe with driver hid-alps failed with error -22 [ 256.905639][ T7298] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 256.905672][ T7298] allowing incompatible features above 0.0: (unknown version) [ 256.905685][ T7298] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 256.952265][ T7298] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 256.960518][ T7298] bcachefs (loop0): initializing new filesystem [ 256.970948][ T9] usb 2-1: USB disconnect, device number 13 [ 256.978251][ T7298] bcachefs (loop0): going read-write [ 257.093147][ T7298] bcachefs (loop0): marking superblocks [ 257.106925][ T7298] bcachefs (loop0): initializing freespace [ 257.117441][ T7298] bcachefs (loop0): done initializing freespace [ 257.126642][ T7298] bcachefs (loop0): reading snapshots table [ 257.132729][ T7298] bcachefs (loop0): reading snapshots done [ 257.391055][ T7298] bcachefs (loop0): done starting filesystem [ 258.196375][ T5922] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 258.290971][ T5829] bcachefs (loop0): shutting down [ 258.362560][ T5829] bcachefs (loop0): going read-only [ 258.453797][ T5829] bcachefs (loop0): finished waiting for writes to stop [ 258.521513][ T5922] usb 6-1: Using ep0 maxpacket: 8 [ 258.713253][ T5829] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4 [ 258.968939][ T7327] netlink: 48 bytes leftover after parsing attributes in process `syz.3.343'. [ 259.343920][ T5922] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.354375][ T5922] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.410951][ T5922] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.486818][ T5922] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.509888][ T5922] usb 6-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 259.525939][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.590425][ T5922] usb 6-1: config 0 descriptor?? [ 259.730299][ T5829] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 6 [ 259.817528][ T5829] bcachefs (loop0): clean shutdown complete, journal seq 7 [ 259.848516][ T5829] bcachefs (loop0): marking filesystem clean [ 260.175083][ T5922] usbhid 6-1:0.0: can't add hid device: -71 [ 260.201096][ T5922] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 260.208957][ T5829] bcachefs (loop0): shutdown complete [ 260.214808][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 260.233190][ T5922] usb 6-1: USB disconnect, device number 5 [ 260.374623][ T7338] netlink: 788 bytes leftover after parsing attributes in process `syz.5.348'. [ 260.414363][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 260.625067][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.640873][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 260.757204][ T7343] netlink: 32 bytes leftover after parsing attributes in process `syz.5.348'. [ 261.160584][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.300857][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.315743][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 261.343482][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.399428][ T10] usb 4-1: config 0 descriptor?? [ 261.424029][ T7332] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 261.445961][ T10] hub 4-1:0.0: USB hub found [ 261.625499][ T7349] veth0_vlan: entered allmulticast mode [ 262.662914][ T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 262.685195][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 262.716214][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 262.735497][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 262.781834][ T10] usb 4-1: USB disconnect, device number 15 [ 263.740909][ T5922] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 264.200206][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 264.268219][ T5922] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 264.292646][ T5922] usb 2-1: config 0 has no interface number 0 [ 264.340573][ T5922] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 264.434684][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.453252][ T5922] usb 2-1: Product: syz [ 264.459457][ T5922] usb 2-1: Manufacturer: syz [ 264.505142][ T5922] usb 2-1: SerialNumber: syz [ 264.856145][ T5922] usb 2-1: config 0 descriptor?? [ 264.868490][ T5922] smsc95xx v2.0.0 [ 265.308283][ T5922] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 265.369279][ T5922] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 266.660543][ T5922] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 266.691630][ T5922] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 267.769902][ T5920] usb 2-1: USB disconnect, device number 14 [ 268.877960][ T7408] netlink: 'syz.1.364': attribute type 1 has an invalid length. [ 268.960998][ T7408] netlink: 224 bytes leftover after parsing attributes in process `syz.1.364'. [ 269.201667][ T5922] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 269.370966][ T5922] usb 6-1: Using ep0 maxpacket: 32 [ 269.411751][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.426851][ T5922] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 269.445843][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.486240][ T5922] usb 6-1: config 0 descriptor?? [ 269.509706][ T5922] hub 6-1:0.0: bad descriptor, ignoring hub [ 269.806167][ T7413] loop4: detected capacity change from 0 to 32768 [ 269.825718][ T5922] hub 6-1:0.0: probe with driver hub failed with error -5 [ 269.851519][ T5922] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 269.988832][ T7413] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 269.988865][ T7413] allowing incompatible features above 0.0: (unknown version) [ 269.988879][ T7413] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 270.036013][ T7413] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 270.044395][ T7413] bcachefs (loop4): initializing new filesystem [ 270.060327][ T7413] bcachefs (loop4): going read-write [ 270.105847][ T7413] bcachefs (loop4): marking superblocks [ 270.122776][ T7413] bcachefs (loop4): initializing freespace [ 270.132218][ T7413] bcachefs (loop4): done initializing freespace [ 270.141588][ T7413] bcachefs (loop4): reading snapshots table [ 270.147597][ T7413] bcachefs (loop4): reading snapshots done [ 270.183167][ T7413] bcachefs (loop4): done starting filesystem [ 270.222264][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 270.322379][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 270.380940][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 270.397518][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 270.411370][ T10] usb 1-1: config 0 has no interface number 0 [ 270.448373][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 270.477242][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 270.487078][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 270.639083][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.654459][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.739449][ T10] usb 1-1: Product: syz [ 270.744612][ T9] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.766868][ T10] usb 1-1: Manufacturer: syz [ 270.777978][ T10] usb 1-1: SerialNumber: syz [ 270.791019][ T9] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.812126][ T10] usb 1-1: config 0 descriptor?? [ 270.831332][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.843329][ T10] smsc75xx v1.0.0 [ 270.871012][ T9] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 270.880157][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.926149][ T9] usb 2-1: config 0 descriptor?? [ 271.064290][ T5841] bcachefs (loop4): shutting down [ 271.073556][ T5841] bcachefs (loop4): going read-only [ 271.079235][ T5841] bcachefs (loop4): finished waiting for writes to stop [ 271.101200][ T5841] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 271.198470][ T5841] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 271.215635][ T5841] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 271.233955][ T5841] bcachefs (loop4): marking filesystem clean [ 271.436799][ T9] hid-alps 0003:044E:1215.0002: item fetching failed at offset 4/5 [ 271.471904][ T9] hid-alps 0003:044E:1215.0002: parse failed [ 271.498961][ T9] hid-alps 0003:044E:1215.0002: probe with driver hid-alps failed with error -22 [ 272.201001][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 272.238448][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 272.327374][ T9] usb 2-1: USB disconnect, device number 15 [ 272.335777][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 272.367407][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 272.554987][ T5841] bcachefs (loop4): shutdown complete [ 272.621170][ T5922] usb 6-1: USB disconnect, device number 6 [ 272.719325][ T5152] Bluetooth: Wrong link type (-22) [ 272.732691][ T7437] netlink: 'syz.5.370': attribute type 10 has an invalid length. [ 273.331205][ T978] usb 1-1: USB disconnect, device number 14 [ 274.621272][ T5922] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 275.118093][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.315627][ T5922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 275.395558][ T5922] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 275.430871][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.501089][ T5922] usb 4-1: Product: syz [ 275.505359][ T5922] usb 4-1: Manufacturer: syz [ 275.510001][ T5922] usb 4-1: SerialNumber: syz [ 275.577363][ T5922] usb 4-1: config 0 descriptor?? [ 275.622791][ T5922] option 4-1:0.0: GSM modem (1-port) converter detected [ 275.763516][ T7466] netlink: 788 bytes leftover after parsing attributes in process `syz.1.379'. [ 275.881699][ T7468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.379'. [ 275.918976][ T10] usb 4-1: USB disconnect, device number 16 [ 275.926817][ T10] option 4-1:0.0: device disconnected [ 276.091470][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.105790][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.114894][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.124837][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.326550][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.352389][ T5846] Bluetooth: hci0: command tx timeout [ 278.800940][ T5922] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 278.990891][ T5922] usb 6-1: Using ep0 maxpacket: 32 [ 279.004169][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 279.045063][ T5922] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 279.052050][ T1109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.054529][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.114158][ T5922] usb 6-1: config 0 descriptor?? [ 279.146753][ T5922] hub 6-1:0.0: bad descriptor, ignoring hub [ 279.155502][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 279.164884][ T5922] hub 6-1:0.0: probe with driver hub failed with error -5 [ 279.308872][ T1109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.392004][ T5922] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 280.431236][ T5846] Bluetooth: hci0: command tx timeout [ 280.490898][ T978] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 280.568889][ T1109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.606081][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.614807][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.640389][ T7470] bridge_slave_0: entered allmulticast mode [ 280.657299][ T978] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 280.658561][ T7470] bridge_slave_0: entered promiscuous mode [ 280.669055][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.696521][ T978] usb 4-1: Product: syz [ 280.701176][ T978] usb 4-1: Manufacturer: syz [ 280.705851][ T978] usb 4-1: SerialNumber: syz [ 280.725087][ T978] usb 4-1: config 0 descriptor?? [ 280.734388][ T1109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.758260][ T5846] Bluetooth: hci5: urb ffff888032c0ce00 submission failed (2) [ 280.788807][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.790905][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 280.806673][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.823224][ T7470] bridge_slave_1: entered allmulticast mode [ 280.850352][ T7470] bridge_slave_1: entered promiscuous mode [ 280.951063][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 280.961174][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 280.967961][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.979709][ T10] usb 5-1: config 0 has no interface number 0 [ 280.979777][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 280.989575][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 281.149728][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.155099][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.180920][ T10] usb 5-1: Product: syz [ 281.185160][ T10] usb 5-1: Manufacturer: syz [ 281.308067][ T10] usb 5-1: SerialNumber: syz [ 281.628124][ T10] usb 5-1: config 0 descriptor?? [ 281.653093][ T10] smsc75xx v1.0.0 [ 281.746442][ T7470] team0: Port device team_slave_0 added [ 281.785618][ T7470] team0: Port device team_slave_1 added [ 281.792161][ T978] usb 6-1: USB disconnect, device number 7 [ 282.061918][ T978] usb 4-1: USB disconnect, device number 17 [ 282.510927][ T5846] Bluetooth: hci0: command tx timeout [ 283.774439][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 283.791559][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 283.811082][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 283.831091][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 283.889861][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.897532][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.942500][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.956253][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.963739][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.990357][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.191911][ T978] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 284.278799][ T1109] bridge_slave_1: left allmulticast mode [ 284.294236][ T1109] bridge_slave_1: left promiscuous mode [ 284.301664][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.407184][ T1109] bridge_slave_0: left allmulticast mode [ 284.417378][ T1109] bridge_slave_0: left promiscuous mode [ 284.422184][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 284.429966][ T978] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 284.432154][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.465261][ T978] usb 6-1: config 0 has no interface number 0 [ 284.486488][ T978] usb 6-1: config 0 interface 184 has no altsetting 0 [ 284.547133][ T978] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 284.560571][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.594990][ T978] usb 6-1: Product: syz [ 284.598389][ T5846] Bluetooth: hci0: command tx timeout [ 284.599243][ T978] usb 6-1: Manufacturer: syz [ 284.686856][ T978] usb 6-1: SerialNumber: syz [ 284.729121][ T978] usb 6-1: config 0 descriptor?? [ 284.806017][ T978] smsc75xx v1.0.0 [ 284.956789][ T9] usb 5-1: USB disconnect, device number 12 [ 285.613899][ T978] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 286.370986][ T978] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 286.452188][ T978] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 286.509250][ T978] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 286.812970][ T1109] team0: Port device geneve1 removed [ 287.324548][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.336909][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.421499][ T5922] usb 6-1: USB disconnect, device number 8 [ 287.442662][ T1109] bond0 (unregistering): Released all slaves [ 287.989566][ T7470] hsr_slave_0: entered promiscuous mode [ 288.023722][ T7543] syz.4.394 (7543) used obsolete PPPIOCDETACH ioctl [ 288.232176][ T7470] hsr_slave_1: entered promiscuous mode [ 288.238837][ T7470] debugfs: 'hsr0' already exists in 'hsr' [ 289.071085][ T7470] Cannot create hsr debugfs directory [ 290.370982][ T5953] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 291.241814][ T5953] usb 4-1: device descriptor read/64, error -71 [ 291.840264][ T5953] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 292.011278][ T5953] usb 4-1: device descriptor read/64, error -71 [ 292.140955][ T5953] usb usb4-port1: attempt power cycle [ 292.669994][ T5953] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 293.230308][ T5841] [ 293.232718][ T5841] ============================================ [ 293.238897][ T5841] WARNING: possible recursive locking detected [ 293.245088][ T5841] 6.16.0-rc4-next-20250703-syzkaller #0 Not tainted [ 293.251696][ T5841] -------------------------------------------- [ 293.257867][ T5841] syz-executor/5841 is trying to acquire lock: [ 293.264049][ T5841] ffff88805dfbc8c8 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 293.274408][ T5841] [ 293.274408][ T5841] but task is already holding lock: [ 293.281798][ T5841] ffff88805dfb91c8 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 293.293075][ T5841] [ 293.293075][ T5841] other info that might help us debug this: [ 293.301143][ T5841] Possible unsafe locking scenario: [ 293.301143][ T5841] [ 293.308597][ T5841] CPU0 [ 293.311878][ T5841] ---- [ 293.315163][ T5841] lock(&sb->s_type->i_mutex_key#25); [ 293.320648][ T5841] lock(&sb->s_type->i_mutex_key#25); [ 293.326124][ T5841] [ 293.326124][ T5841] *** DEADLOCK *** [ 293.326124][ T5841] [ 293.334272][ T5841] May be due to missing lock nesting notation [ 293.334272][ T5841] [ 293.342601][ T5841] 4 locks held by syz-executor/5841: [ 293.347891][ T5841] #0: ffff88805c50c0e0 (&type->s_umount_key#68){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 293.358200][ T5841] #1: ffff8880303928a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 293.367794][ T5841] #2: ffffffff8f6d0e30 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 293.379913][ T5841] #3: ffff88805dfb91c8 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 293.391613][ T5841] [ 293.391613][ T5841] stack backtrace: [ 293.397543][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 293.397565][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.397580][ T5841] Call Trace: [ 293.397587][ T5841] [ 293.397595][ T5841] dump_stack_lvl+0x189/0x250 [ 293.397625][ T5841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.397649][ T5841] ? __pfx__printk+0x10/0x10 [ 293.397667][ T5841] ? print_lock_name+0xde/0x100 [ 293.397685][ T5841] print_deadlock_bug+0x28b/0x2a0 [ 293.397710][ T5841] validate_chain+0x1a3f/0x2140 [ 293.397743][ T5841] __lock_acquire+0xab9/0xd20 [ 293.397764][ T5841] ? rpc_close_pipes+0x10a/0x730 [ 293.397784][ T5841] lock_acquire+0x120/0x360 [ 293.397803][ T5841] ? rpc_close_pipes+0x10a/0x730 [ 293.397828][ T5841] down_write+0x96/0x1f0 [ 293.397846][ T5841] ? rpc_close_pipes+0x10a/0x730 [ 293.397865][ T5841] ? __pfx_down_write+0x10/0x10 [ 293.397882][ T5841] ? __pfx_find_submount+0x10/0x10 [ 293.397901][ T5841] ? _raw_spin_unlock+0x28/0x50 [ 293.397922][ T5841] ? d_walk+0x6f4/0x780 [ 293.397939][ T5841] rpc_close_pipes+0x10a/0x730 [ 293.397959][ T5841] ? d_invalidate+0x204/0x260 [ 293.397977][ T5841] ? __pfx_rpc_close_pipes+0x10/0x10 [ 293.397998][ T5841] ? up_write+0x1c4/0x420 [ 293.398021][ T5841] ? __pfx_rpc_close_pipes+0x10/0x10 [ 293.398041][ T5841] __simple_recursive_removal+0x20b/0x510 [ 293.398065][ T5841] ? __pfx_rpc_close_pipes+0x10/0x10 [ 293.398086][ T5841] rpc_unlink+0x56/0x80 [ 293.398105][ T5841] rpc_pipefs_event+0xc0/0x170 [ 293.398122][ T5841] notifier_call_chain+0x1b3/0x3e0 [ 293.398150][ T5841] blocking_notifier_call_chain+0x6a/0x90 [ 293.398174][ T5841] rpc_kill_sb+0xd0/0x190 [ 293.398197][ T5841] deactivate_locked_super+0xb9/0x130 [ 293.398219][ T5841] cleanup_mnt+0x425/0x4c0 [ 293.398237][ T5841] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.398263][ T5841] task_work_run+0x1d1/0x260 [ 293.398281][ T5841] ? __pfx_task_work_run+0x10/0x10 [ 293.398297][ T5841] ? __x64_sys_umount+0x122/0x160 [ 293.398321][ T5841] ? exit_to_user_mode_loop+0x40/0x110 [ 293.398341][ T5841] exit_to_user_mode_loop+0xec/0x110 [ 293.398360][ T5841] do_syscall_64+0x2bd/0x3b0 [ 293.398381][ T5841] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.398405][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.398421][ T5841] ? clear_bhb_loop+0x60/0xb0 [ 293.398438][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.398455][ T5841] RIP: 0033:0x7fa65378fc57 [ 293.398475][ T5841] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 293.398489][ T5841] RSP: 002b:00007ffe23be0b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 293.398507][ T5841] RAX: 0000000000000000 RBX: 00007fa653810925 RCX: 00007fa65378fc57 [ 293.398518][ T5841] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe23be0c00 [ 293.398529][ T5841] RBP: 00007ffe23be0c00 R08: 0000000000000000 R09: 0000000000000000 [ 293.398539][ T5841] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe23be1c90 [ 293.398551][ T5841] R13: 00007fa653810925 R14: 00000000000478c4 R15: 00007ffe23be1cd0 [ 293.398569][ T5841] [ 294.186081][ T5953] usb 4-1: device descriptor read/8, error -71 [ 294.243731][ T1109] hsr_slave_0: left promiscuous mode [ 294.274115][ T1109] hsr_slave_1: left promiscuous mode [ 294.287778][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.295834][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.586314][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.595736][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.668198][ T1109] veth1_macvtap: left promiscuous mode [ 294.674383][ T1109] veth0_macvtap: left promiscuous mode [ 294.680281][ T1109] veth1_vlan: left promiscuous mode [ 295.235202][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 295.266069][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 295.462481][ T7470] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 295.474749][ T7470] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 295.485776][ T7470] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 295.498687][ T7470] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 295.636715][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.654174][ T7470] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.666814][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.673965][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.687387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.694567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.845657][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.014306][ T7470] veth0_vlan: entered promiscuous mode [ 296.025220][ T7470] veth1_vlan: entered promiscuous mode [ 296.051717][ T7470] veth0_macvtap: entered promiscuous mode [ 296.060278][ T7470] veth1_macvtap: entered promiscuous mode [ 296.075332][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.087816][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.100369][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.109969][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.120665][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.131923][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.160225][ T7470] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 296.183745][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.185557][ T7470] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 296.193653][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.218956][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.229550][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50