last executing test programs: 16m26.562203562s ago: executing program 32 (id=40): bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x100002}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x7000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m42.99363965s ago: executing program 33 (id=78): open(0x0, 0x47a540, 0x34) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socket(0x1000000010, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="81", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000008413000000000000620000000000000010000000000000008400000008"], 0x28}, 0x41) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, r5, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0x2, 0x1}}, 0xb8}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000080)={0x4, r6, 0x2c, {0x6, 0xd377}, 0x43}, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r7, &(0x7f0000000080), 0x0, 0x0, 0x1) fgetxattr(r7, &(0x7f0000000140)=@known='user.incfs.size\x00', &(0x7f00000002c0)=""/90, 0x5a) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f00000003c0)={0x80, 0xa, 0x1, 0x3, 0x0, 0x7, 0x0}) 13m9.301198676s ago: executing program 34 (id=197): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x94c82000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x8000, @empty}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) fchdir(r1) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r7, r6, 0x0, 0x40001) ftruncate(r5, 0x2007ffb) 12m42.044250356s ago: executing program 35 (id=222): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000780)=[{&(0x7f0000000740)=""/55, 0x37}], 0x1) 10m35.821422596s ago: executing program 8 (id=344): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) open(&(0x7f00000001c0)='./file0\x00', 0x480ff, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)) socket$l2tp6(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 10m34.106954635s ago: executing program 8 (id=347): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 10m28.221798616s ago: executing program 8 (id=354): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000006c0)="4c0f742e9cb62dffba72a942ab132eee4537258721e7c2166a42ab1efd9851930e1f0552e074037a77fccb6368860d24145db745edb5fb0b030f3dc03e5bde6a9b1dcea779e6095f0108d3b32f2e38e659fbdb0dd1e40217b3092dd138fa87b808e5", 0x62, 0x440dc, 0x0, 0x0) 10m27.447644368s ago: executing program 8 (id=356): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) io_submit(0x0, 0x0, &(0x7f00000001c0)) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_submit(0x0, 0x0, &(0x7f0000000780)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000003c0)) 10m24.051468452s ago: executing program 8 (id=363): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x40740) unshare(0x400) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) 10m23.243640268s ago: executing program 8 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 10m5.037314647s ago: executing program 36 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 9m55.131505647s ago: executing program 37 (id=378): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 9m37.317261296s ago: executing program 6 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x20000000000005, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 9m35.673977624s ago: executing program 7 (id=411): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 9m34.659921083s ago: executing program 6 (id=412): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r5, 0x1) 9m31.438315231s ago: executing program 7 (id=414): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{&(0x7f00000000c0)={0x2, 0x6e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x20, 0x1, 0x4, [{@empty, 0x8001}, {@loopback, 0x10000}, {@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}]}]}}}], 0x38}}], 0x18, 0x0) 9m30.767731795s ago: executing program 7 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 9m29.219409519s ago: executing program 6 (id=417): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000001c0)='./file0\x00', 0x480ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x12141}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 9m27.957069005s ago: executing program 7 (id=419): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 9m27.596997759s ago: executing program 6 (id=420): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x20000000000005, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 9m27.132205749s ago: executing program 7 (id=422): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r0, 0x0, 0x40c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pptp(r6, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x104}, 0x8) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x978, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) 9m25.117723479s ago: executing program 6 (id=424): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f00000000c0)={0x2, 0x6e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x20, 0x1, 0x4, [{@empty, 0x8001}, {@loopback, 0x10000}, {@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}]}]}}}], 0x38}}], 0x18, 0x0) 9m23.650757258s ago: executing program 6 (id=426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x40000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r2, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) 9m23.598800036s ago: executing program 7 (id=427): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x8031, 0xffffffffffffffff, 0xe84df000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_RMID(0x0, 0x0) lstat(0x0, 0x0) getpid() 9m5.44065395s ago: executing program 38 (id=425): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r5, 0x1) 9m5.152481478s ago: executing program 39 (id=427): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x8031, 0xffffffffffffffff, 0xe84df000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_RMID(0x0, 0x0) lstat(0x0, 0x0) getpid() 9m4.840767372s ago: executing program 40 (id=426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x40000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r2, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) 8m11.213078886s ago: executing program 9 (id=382): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001e00)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xebd, 0x7, 0xe6a, 0x4, 0x1, 0x5, 0x7ff, 0x200054, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x240002, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0x1ff, 0x3, 0xa7, 0xeb36, 0x2, 0x5, 0x76c9, 0x7, 0x1, 0x3, 0x1, 0x6, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x20, 0x3, 0x3, 0x4, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d9, 0x149, 0x1], [0x4066ac, 0xfffffff9, 0x4, 0x3, 0x408e, 0x7, 0x13e, 0x9, 0x4, 0xffffffff, 0xdb5, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x0, 0x8, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x5, 0x7f00, 0x4d26, 0x47, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x78, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x9ba5, 0x6, 0x9, 0x4, 0x9, 0x1, 0x8d1, 0xb4, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0x8e2, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x4e8, 0x80000000, 0x0, 0x400, 0x1000, 0x9, 0x400006e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x7, 0x401, 0xae5, 0x3, 0x0, 0x2, 0x3, 0xc, 0x6, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x80000004, 0xd, 0x464b, 0x6, 0x2e7, 0xfffffff8, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x1, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x9, 0xcc, 0x4, 0x4000400, 0xfffffffc, 0xfffffffb, 0x40, 0x0, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x7, 0x5eb31540, 0x8ac1, 0x3, 0x4, 0x3fe, 0x80000002, 0xff, 0x2, 0x3, 0xfffff7fe, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0x2, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 8m10.005983379s ago: executing program 9 (id=437): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8ac40, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) 8m8.866458811s ago: executing program 9 (id=438): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8m6.714995033s ago: executing program 9 (id=440): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 7m49.97265378s ago: executing program 41 (id=440): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 6m46.621991157s ago: executing program 1 (id=552): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x12, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 6m43.0207939s ago: executing program 1 (id=557): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 6m41.935743167s ago: executing program 1 (id=558): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, 0x0, 0x4008000) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x6, 0x1}, 0x18, &(0x7f0000000080)=[{&(0x7f0000000400)="8fff", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 6m40.713498294s ago: executing program 1 (id=562): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8ac40, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 6m39.679054132s ago: executing program 1 (id=564): unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 6m38.269434351s ago: executing program 1 (id=567): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 6m21.334182283s ago: executing program 42 (id=567): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 4m49.411798315s ago: executing program 4 (id=691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b9}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc403}]}, 0x40}}, 0x200000c0) 4m43.993130602s ago: executing program 4 (id=698): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 4m42.084664615s ago: executing program 4 (id=701): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 4m40.928080759s ago: executing program 4 (id=702): unshare(0x2040400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 4m40.20754717s ago: executing program 4 (id=704): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m39.652073826s ago: executing program 4 (id=706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010100000000000000c5000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES16=r1], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r2}, 0x0, &(0x7f00000004c0)='%pB \x00'}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x40090}, 0x28008018) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$inet_mptcp(0x2, 0x1, 0x106) 4m19.396736858s ago: executing program 43 (id=706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010100000000000000c5000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES16=r1], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r2}, 0x0, &(0x7f00000004c0)='%pB \x00'}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x40090}, 0x28008018) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$inet_mptcp(0x2, 0x1, 0x106) 3m45.971013345s ago: executing program 3 (id=749): readv(0xffffffffffffffff, 0x0, 0x0) 3m45.353556798s ago: executing program 3 (id=750): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) write$binfmt_misc(r0, &(0x7f0000000440)="dba3", 0x2) 3m44.74368511s ago: executing program 3 (id=751): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setfsgid(0xee00) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0xfffffff9, 0x10100, 0xfffffffd}, &(0x7f0000000400)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x1}}) shutdown(0xffffffffffffffff, 0x1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m41.130181107s ago: executing program 3 (id=755): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 3m40.595545363s ago: executing program 3 (id=757): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x405, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) listen(r0, 0x200b) 3m39.111723758s ago: executing program 3 (id=760): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x44, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xc}]}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x1, 0x4}, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) socket$rds(0x15, 0x5, 0x0) 3m22.795463201s ago: executing program 44 (id=760): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x44, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xc}]}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x1, 0x4}, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) socket$rds(0x15, 0x5, 0x0) 14.046625871s ago: executing program 2 (id=1016): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) socket$kcm(0x2d, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/229, 0xe5, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 13.921863446s ago: executing program 5 (id=1017): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) 12.354127526s ago: executing program 2 (id=1018): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file4\x00', 0xa18c14, &(0x7f0000000480)=ANY=[@ANYBLOB='uni_xla=0,\x00'/25], 0x89, 0x2d0, &(0x7f0000000b00)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f0000000407000000000000000200000002000000020000f5ffffff030000000000000061"], &(0x7f0000000f40)=""/4110, 0x45, 0x100e, 0x9}, 0x28) 12.29781368s ago: executing program 0 (id=1019): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r0, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x240c6050}, 0x8040) 11.530241225s ago: executing program 2 (id=1020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) listen(0xffffffffffffffff, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) listen(0xffffffffffffffff, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x3a0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x700, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x7, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000009512043c190b360753bf92f6e969a7e289b107094f95401555b0cbd214dc74ad044cabbb2ecda382db9ef08010471426eefcf2bef7601253ce39a7a1fcea6650bf57f88ef6bcaf24deaf9eead2943a0be3f90abf00a96c00080000000000000c044f0e5b0df652bf70130782b217ae37d18b4584069654ec268ca0", @ANYRES16], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 11.529960741s ago: executing program 0 (id=1021): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300), 0x9, &(0x7f0000000040)}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @mcast1, 0x4}, 0x1c) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000040)=0xb) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x8000000) 11.255522706s ago: executing program 5 (id=1022): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x20000000000005, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 8.551923804s ago: executing program 0 (id=1023): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x6) 4.240037348s ago: executing program 2 (id=1024): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4, 0x0, 0x0, 0xa4}, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 4.131437398s ago: executing program 5 (id=1025): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000480)=0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a006da800000000000000001c1400000000000000000000070001"], 0x24}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$loop(0x0, 0x47ffffa, 0xa7dc2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x6005, 0x0, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@expire={0xf8, 0x18, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in=@broadcast, @in6=@private2, 0x4e22, 0x2, 0x4e20, 0x3e9, 0x2, 0x20, 0x80}, {@in6=@remote, 0x4d2, 0x3c}, @in=@broadcast, {0xb4ca, 0x9af, 0x8, 0x8, 0x1aea, 0xfffffffffffffffe, 0x8, 0x100}, {0x3, 0x7, 0x8000000000000000, 0x80000001}, {0x800, 0xaa1, 0x2}, 0x70bd28, 0x3505, 0xa, 0x1, 0x2}, 0xf}}, 0xf8}, 0x1, 0x0, 0x0, 0x8080}, 0x2000402c) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000a00)=[@nested_load_code={0x12e, 0x5e, {0x3, "b94c0800000f32670f3066410f3a0ab192460000092e0fc7b2c58ac7c8640fc75a4ff0807055800f3264360f011966baf80cb8aeda348def66bafc0c66b8523966ef470f21d3"}}, @uexit={0x0, 0x18, 0x1000}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @code={0xa, 0x69, {"f30f1efc460f01c4c4e1ffe623b9800000c00f3235004000000f3066400fbe8849000000f3470fc7760ac4a1a45f74c700c4027d1931c74424003b000000c74424020c000000c7442406000000000f011424c42255085940"}}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x0, 0x8}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x37, 0x1, 0x3, 0x1}}, @in_dx={0x69, 0x20, {0xd50c, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x95, 0x2}}, @in_dx={0x69, 0x20, {0x3350, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x53, 0x2}}, @out_dx={0x6a, 0x28, {0xa4e4, 0x1, 0x55}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x80, 0xfffffffffffffffd, 0xcec, 0x9600000000000000}}, @uexit={0x0, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x0, 0x80000000}}, @nested_load_syzos={0x136, 0xa0, {0x0, 0xffffffffffffffff, [@nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0x9ca, 0x2}}, @cpuid={0x64, 0x18, {0x101, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0xf000, 0x6cbe}}, @nested_amd_vmsave={0x183, 0x18, 0x2}]}}, @wr_drn={0x68, 0x20, {0x5, 0x100000000}}, @wr_crn={0x67, 0x20, {0x0, 0xe}}, @set_irq_handler={0xc8, 0x20, {0xb6, 0x2}}], 0x3ef}) 3.735729858s ago: executing program 0 (id=1026): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) socket$kcm(0x2d, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/229, 0xe5, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2.877454567s ago: executing program 2 (id=1027): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x3214212, &(0x7f00000001c0)=ANY=[], 0x3, 0xf11, &(0x7f0000002400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendfile(r0, r0, 0x0, 0xfffe82) 2.844216733s ago: executing program 5 (id=1028): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="74000000020802030000000000000000050000000900fb0073797a3100000000040004801c0004800800024000d3746286ad77fb44ec9664f3da0000000800024000010001080002400000000c050003002100000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.465584975s ago: executing program 0 (id=1029): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f0000000407000000000000000200000002000000020000f5ffffff030000000000000061"], &(0x7f0000000f40)=""/4110, 0x45, 0x100e, 0x9}, 0x28) 1.480955774s ago: executing program 0 (id=1030): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) 1.170036462s ago: executing program 5 (id=1031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x80) 112.953281ms ago: executing program 2 (id=1032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r0 = semget(0x3, 0x2, 0x200) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") openat(r1, &(0x7f0000000080)='./file1\x00', 0x42042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000040)=0x8822) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002480)}], 0x1, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x20000414) recvmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)}, 0x10000) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$vim2m(0x0, 0x2, 0x2) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x8, 0x100003, 0x7fffffff, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x400, 0x1, 0x20008, 0x101, 0x10001, 0x10087, 0x3, 0x1, 0x2, 0x289c, 0xf23, 0x2000007, 0xe, 0xbfd, 0x3c, 0x5, 0x20000006, 0x0, 0xfffffff8]}) 0s ago: executing program 5 (id=1033): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000c6, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000001980), 0x18, 0x100) kernel console output (not intermixed with test programs): : config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 935.974698][ T7494] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 935.985031][ T7494] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 935.998682][ T7494] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 936.013295][ T7494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.224020][ T9008] loop3: detected capacity change from 0 to 65536 [ 936.326006][ T9008] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 936.330329][ T7494] usb 1-1: config 0 descriptor?? [ 936.635575][ T8816] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.739410][ T7494] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 936.865598][ T9008] XFS (loop3): Ending clean mount [ 936.894930][ T9008] XFS (loop3): Quotacheck needed: Please wait. [ 936.937203][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.945117][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.999118][ T5839] usb 1-1: USB disconnect, device number 11 [ 937.055156][ T9008] XFS (loop3): Quotacheck: Done. [ 937.234955][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.242948][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.982964][ T5839] usblp0: removed [ 939.645407][ T9032] binder: 9031:9032 ioctl c0306201 0 returned -14 [ 939.838769][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 939.888567][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 939.905316][ T8816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.925941][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 939.963175][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 939.991324][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 940.586136][ T7476] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 940.787991][ T7906] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 940.860523][ T7476] usb 5-1: device descriptor read/64, error -71 [ 941.157205][ T7476] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 941.334618][ T7476] usb 5-1: device descriptor read/64, error -71 [ 941.466725][ T7476] usb usb5-port1: attempt power cycle [ 941.907655][ T7476] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 941.975561][ T7476] usb 5-1: device descriptor read/8, error -71 [ 942.261410][ T7476] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 942.305899][ T7776] Bluetooth: hci4: command tx timeout [ 942.360616][ T7476] usb 5-1: device descriptor read/8, error -71 [ 942.503181][ T7476] usb usb5-port1: unable to enumerate USB device [ 943.045166][ T8816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.535151][ T9033] chnl_net:caif_netlink_parms(): no params data found [ 944.017850][ T9059] loop4: detected capacity change from 0 to 256 [ 944.067976][ T9059] vfat: Unknown parameter 'uni_xla' [ 944.666821][ T7776] Bluetooth: hci4: command tx timeout [ 946.439326][ T9062] 9p: Could not find request transport: fd0x0000000000000091 [ 946.972012][ T7776] Bluetooth: hci4: command tx timeout [ 947.855698][ T8514] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.892242][ T8816] veth0_vlan: entered promiscuous mode [ 947.986257][ T8514] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.170114][ T8514] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.345909][ T8816] veth1_vlan: entered promiscuous mode [ 948.501119][ T8514] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.589614][ T7999] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 948.846880][ T7999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.858460][ T7999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.868911][ T7999] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.882412][ T7999] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.891826][ T7999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.148287][ T7776] Bluetooth: hci4: command tx timeout [ 949.163208][ T7999] usb 5-1: config 0 descriptor?? [ 949.739908][ T8816] veth0_macvtap: entered promiscuous mode [ 949.958687][ T7999] usbhid 5-1:0.0: can't add hid device: -71 [ 949.965547][ T7999] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 950.051504][ T7999] usb 5-1: USB disconnect, device number 10 [ 950.275741][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.286186][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.355515][ T9086] binder: BINDER_SET_CONTEXT_MGR already set [ 950.361899][ T9086] binder: 9084:9086 ioctl 4018620d 200000000040 returned -16 [ 950.980124][ T9077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.035694][ T9077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.133791][ T5839] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 951.351265][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 951.395810][ T5839] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 951.404771][ T5839] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 951.415933][ T5839] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 951.499798][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 951.510214][ T5839] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 951.520989][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 951.534514][ T5839] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 951.544321][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.655975][ T5839] usb 1-1: config 0 descriptor?? [ 951.850256][ T7494] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 951.906442][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.914576][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.941074][ T5839] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 951.973768][ T9033] bridge_slave_0: entered allmulticast mode [ 952.011513][ T9033] bridge_slave_0: entered promiscuous mode [ 952.060714][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.071130][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.079424][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.111362][ T7494] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 952.121364][ T7494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.130239][ T7494] usb 5-1: Product: syz [ 952.134728][ T7494] usb 5-1: Manufacturer: syz [ 952.139800][ T7494] usb 5-1: SerialNumber: syz [ 952.151284][ T9033] bridge_slave_1: entered allmulticast mode [ 952.179472][ T9033] bridge_slave_1: entered promiscuous mode [ 952.263769][ C1] usblp0: nonzero read bulk status received: -71 [ 952.266730][ T5839] usb 1-1: USB disconnect, device number 12 [ 952.272492][ T7494] usb 5-1: config 0 descriptor?? [ 952.289012][ T9092] usblp0: error -71 reading from printer [ 952.309762][ T7494] asix 5-1:0.0: probe with driver asix failed with error -22 [ 952.327666][ T5839] usblp0: removed [ 952.402041][ T3450] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.413974][ T8514] bridge_slave_1: left allmulticast mode [ 952.420510][ T8514] bridge_slave_1: left promiscuous mode [ 952.427584][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.540000][ T8514] bridge_slave_0: left allmulticast mode [ 952.546183][ T8514] bridge_slave_0: left promiscuous mode [ 952.553318][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.590510][ T9098] loop4: detected capacity change from 0 to 512 [ 952.757927][ T9098] EXT4-fs (loop4): 1 truncate cleaned up [ 952.847156][ T9098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.978741][ T29] audit: type=1800 audit(1770761024.079:26): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.644" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 953.573284][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 953.580086][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 953.912101][ T7999] usb 5-1: USB disconnect, device number 11 [ 954.839869][ T7904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.326307][ T8514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.376434][ T8514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.417044][ T8514] bond0 (unregistering): Released all slaves [ 955.455477][ T8816] veth1_macvtap: entered promiscuous mode [ 955.725135][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.890167][ T8514] hsr_slave_0: left promiscuous mode [ 955.905646][ T8514] hsr_slave_1: left promiscuous mode [ 955.935885][ T8514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.943569][ T8514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.958636][ T8514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.966509][ T8514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.062069][ T7494] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 956.089477][ T8514] veth1_macvtap: left promiscuous mode [ 956.106765][ T8514] veth0_macvtap: left promiscuous mode [ 956.112838][ T8514] veth1_vlan: left promiscuous mode [ 956.144982][ T8514] veth0_vlan: left promiscuous mode [ 956.271438][ T9132] binder: BINDER_SET_CONTEXT_MGR already set [ 956.279077][ T9132] binder: 9131:9132 ioctl 4018620d 200000000040 returned -16 [ 956.300547][ T7494] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.313015][ T7494] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.323422][ T7494] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 956.338005][ T7494] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 956.348861][ T7494] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.431786][ T7494] usb 5-1: config 0 descriptor?? [ 957.187766][ T7494] usbhid 5-1:0.0: can't add hid device: -71 [ 957.194516][ T7494] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 957.271793][ T7494] usb 5-1: USB disconnect, device number 12 [ 957.920784][ T8514] team0 (unregistering): Port device team_slave_1 removed [ 957.975063][ T8514] team0 (unregistering): Port device team_slave_0 removed [ 958.509588][ T9033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.526960][ T8582] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.705792][ T9033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.803669][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.971903][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 959.018305][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.177205][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 959.304252][ T9033] team0: Port device team_slave_0 added [ 959.363201][ T9033] team0: Port device team_slave_1 added [ 959.377746][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 959.387366][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.395711][ T9] usb 5-1: Product: syz [ 959.400430][ T9] usb 5-1: Manufacturer: syz [ 959.405244][ T9] usb 5-1: SerialNumber: syz [ 959.411429][ T6016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.421389][ T5839] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 959.433343][ T6016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.581332][ T6016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.622547][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 959.653182][ T5839] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 959.662280][ T5839] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 959.671724][ T5839] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 959.693828][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 959.704633][ T5839] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 959.714882][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 959.728396][ T5839] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 959.737239][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.737970][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.745352][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.755898][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 959.785680][ T9033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.792634][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 959.793480][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 959.840871][ T6016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.865089][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.877916][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.879770][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 959.906525][ T9033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.997733][ T5839] usb 4-1: config 0 descriptor?? [ 960.276445][ T7999] usb 5-1: USB disconnect, device number 13 [ 960.365400][ T5839] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 960.537175][ T9033] hsr_slave_0: entered promiscuous mode [ 960.581578][ T9033] hsr_slave_1: entered promiscuous mode [ 960.661067][ C0] usblp0: nonzero read bulk status received: -71 [ 960.663053][ T7999] usb 4-1: USB disconnect, device number 15 [ 960.703983][ T9143] usblp0: error -71 reading from printer [ 960.819857][ T7999] usblp0: removed [ 961.176305][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 961.191459][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 961.201686][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 961.219381][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 961.232561][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 962.374471][ T5839] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 962.590102][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.602188][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.612378][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 962.625910][ T5839] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 962.635340][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.536606][ T5785] Bluetooth: hci5: command tx timeout [ 969.700397][ T5785] Bluetooth: hci5: command tx timeout [ 970.807480][ T5839] usb 1-1: config 0 descriptor?? [ 971.104106][ T5839] usb 1-1: can't set config #0, error -71 [ 971.158514][ T5839] usb 1-1: USB disconnect, device number 13 [ 971.300738][ T9173] loop3: detected capacity change from 0 to 1024 [ 971.610249][ T9173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.897924][ T5785] Bluetooth: hci5: command tx timeout [ 974.118822][ T5785] Bluetooth: hci5: command tx timeout [ 975.130898][ T7896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.266756][ T7896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.506590][ T7906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.549522][ T9194] loop0: detected capacity change from 0 to 128 [ 976.689932][ T9194] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 976.814495][ T9194] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 976.830007][ T7896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.922769][ T9153] chnl_net:caif_netlink_parms(): no params data found [ 977.640830][ T7966] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 977.774949][ T9033] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 977.875407][ T9033] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 978.087036][ T7896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.331010][ T9033] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 978.492745][ T9033] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 979.090592][ T7999] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 979.261968][ T7999] usb 1-1: device descriptor read/64, error -71 [ 979.310376][ T7896] bridge_slave_1: left allmulticast mode [ 979.316802][ T7896] bridge_slave_1: left promiscuous mode [ 979.323718][ T7896] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.433346][ T7896] bridge_slave_0: left allmulticast mode [ 979.439419][ T7896] bridge_slave_0: left promiscuous mode [ 979.446568][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.554382][ T7999] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 979.753017][ T7999] usb 1-1: device descriptor read/64, error -71 [ 979.880975][ T7999] usb usb1-port1: attempt power cycle [ 980.320175][ T7999] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 980.995460][ T7999] usb 1-1: device descriptor read/8, error -71 [ 981.423734][ T7999] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 981.587402][ T7999] usb 1-1: device descriptor read/8, error -71 [ 981.725800][ T7999] usb usb1-port1: unable to enumerate USB device [ 982.263570][ T7896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.354763][ T7896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.432587][ T7896] bond0 (unregistering): Released all slaves [ 984.186825][ T7896] hsr_slave_0: left promiscuous mode [ 984.331888][ T7896] hsr_slave_1: left promiscuous mode [ 984.395783][ T7896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.403798][ T7896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.574766][ T7896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.582387][ T7896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.717398][ T9245] loop4: detected capacity change from 0 to 256 [ 984.749272][ T7896] veth1_macvtap: left promiscuous mode [ 984.786348][ T7896] veth0_macvtap: left promiscuous mode [ 984.810310][ T7896] veth1_vlan: left promiscuous mode [ 984.816029][ T7896] veth0_vlan: left promiscuous mode [ 989.235414][ T7896] team0 (unregistering): Port device team_slave_1 removed [ 989.468157][ T7896] team0 (unregistering): Port device team_slave_0 removed [ 991.627497][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.636342][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.680579][ T9153] bridge_slave_0: entered allmulticast mode [ 991.762439][ T9153] bridge_slave_0: entered promiscuous mode [ 992.023253][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.034379][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.181857][ T9153] bridge_slave_1: entered allmulticast mode [ 992.280047][ T9153] bridge_slave_1: entered promiscuous mode [ 993.507400][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.667954][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.341470][ T9153] team0: Port device team_slave_0 added [ 994.397727][ T9153] team0: Port device team_slave_1 added [ 995.107521][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.115391][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.145088][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.890235][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.898047][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.924788][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.465062][ T9153] hsr_slave_0: entered promiscuous mode [ 996.497938][ T9153] hsr_slave_1: entered promiscuous mode [ 996.546858][ T9153] debugfs: 'hsr0' already exists in 'hsr' [ 996.553163][ T9153] Cannot create hsr debugfs directory [ 996.586450][ T9033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.712782][ T9314] binder: 9312:9314 ioctl c0306201 0 returned -14 [ 997.279683][ T9033] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.405814][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.413760][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.681263][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.688975][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.788622][ T9350] binder: 9348:9350 ioctl c0306201 0 returned -14 [ 1006.016486][ T9153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1006.310737][ T9153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1006.456916][ T9153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1006.600445][ T7776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1006.651324][ T7776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1006.664909][ T7776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1006.680924][ T9153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1006.706303][ T7776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1006.736255][ T7776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1008.927112][ T7776] Bluetooth: hci2: command tx timeout [ 1011.421073][ T7776] Bluetooth: hci2: command tx timeout [ 1013.727456][ T7776] Bluetooth: hci2: command tx timeout [ 1016.068589][ T7776] Bluetooth: hci2: command tx timeout [ 1019.375335][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1019.382525][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.082792][ T9399] binder: 9391:9399 ioctl c0306201 0 returned -14 [ 1028.406775][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1028.418863][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1028.471361][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1028.512577][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1028.532014][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1028.838148][ T9361] chnl_net:caif_netlink_parms(): no params data found [ 1030.823602][ T5785] Bluetooth: hci4: command tx timeout [ 1030.856486][ T5793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1030.875881][ T5793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1030.888020][ T5793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1030.957041][ T5793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1030.970187][ T5793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1032.296788][ T5838] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1032.305279][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1032.838930][ T12] bridge_slave_1: left allmulticast mode [ 1032.845264][ T12] bridge_slave_1: left promiscuous mode [ 1032.852175][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.863407][ T5838] usb 4-1: device descriptor read/64, error -32 [ 1032.930967][ T12] bridge_slave_0: left allmulticast mode [ 1032.936870][ T12] bridge_slave_0: left promiscuous mode [ 1032.944134][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.045657][ T5793] Bluetooth: hci4: command tx timeout [ 1033.142530][ T5838] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1033.227952][ T5793] Bluetooth: hci6: command tx timeout [ 1033.372655][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.384308][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.394840][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1033.408654][ T5838] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1033.418017][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.630277][ T5838] usb 4-1: config 0 descriptor?? [ 1033.988365][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.069150][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.140360][ T12] bond0 (unregistering): Released all slaves [ 1034.443587][ T5838] usbhid 4-1:0.0: can't add hid device: -71 [ 1034.451635][ T5838] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1034.562659][ T5838] usb 4-1: USB disconnect, device number 17 [ 1034.693088][ T12] hsr_slave_0: left promiscuous mode [ 1034.709862][ T12] hsr_slave_1: left promiscuous mode [ 1034.764003][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.814866][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.270346][ T5793] Bluetooth: hci4: command tx timeout [ 1035.477855][ T5793] Bluetooth: hci6: command tx timeout [ 1037.492490][ T5793] Bluetooth: hci4: command tx timeout [ 1037.663513][ T5793] Bluetooth: hci6: command tx timeout [ 1039.973485][ T5793] Bluetooth: hci6: command tx timeout [ 1044.015328][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1044.089162][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1045.524571][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.534433][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.559246][ T9361] bridge_slave_0: entered allmulticast mode [ 1045.588024][ T9361] bridge_slave_0: entered promiscuous mode [ 1045.708429][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.716149][ T9361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.767887][ T9361] bridge_slave_1: entered allmulticast mode [ 1045.810278][ T9361] bridge_slave_1: entered promiscuous mode [ 1046.244631][ T9361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.394862][ T9361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.968026][ T3450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.366644][ T9361] team0: Port device team_slave_0 added [ 1047.497967][ T9406] chnl_net:caif_netlink_parms(): no params data found [ 1047.634947][ T3450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.794417][ T9361] team0: Port device team_slave_1 added [ 1048.024261][ T3450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.608416][ T3450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.976422][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.986837][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.019838][ T9361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.321718][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.329390][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.356426][ T9361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.988972][ T9422] chnl_net:caif_netlink_parms(): no params data found [ 1051.216732][ T9361] hsr_slave_0: entered promiscuous mode [ 1051.303930][ T9361] hsr_slave_1: entered promiscuous mode [ 1051.450062][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.466570][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.563313][ T9406] bridge_slave_0: entered allmulticast mode [ 1051.585442][ T9406] bridge_slave_0: entered promiscuous mode [ 1051.837701][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.845690][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.907583][ T9406] bridge_slave_1: entered allmulticast mode [ 1051.950878][ T9406] bridge_slave_1: entered promiscuous mode [ 1052.798533][ T9406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.933715][ T9406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.549232][ T9406] team0: Port device team_slave_0 added [ 1054.659266][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.671455][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.774005][ T9422] bridge_slave_0: entered allmulticast mode [ 1054.819482][ T9422] bridge_slave_0: entered promiscuous mode [ 1054.991716][ T9406] team0: Port device team_slave_1 added [ 1055.297479][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.305440][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.332232][ T9422] bridge_slave_1: entered allmulticast mode [ 1055.432047][ T9422] bridge_slave_1: entered promiscuous mode [ 1056.028692][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.036518][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.063112][ T9406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.098927][ T3450] bridge_slave_1: left allmulticast mode [ 1056.105080][ T3450] bridge_slave_1: left promiscuous mode [ 1056.111860][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.133650][ T3450] bridge_slave_0: left allmulticast mode [ 1056.139685][ T3450] bridge_slave_0: left promiscuous mode [ 1056.146637][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.173097][ T3450] bridge_slave_1: left allmulticast mode [ 1056.179018][ T3450] bridge_slave_1: left promiscuous mode [ 1056.190735][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.280453][ T3450] bridge_slave_0: left allmulticast mode [ 1056.286623][ T3450] bridge_slave_0: left promiscuous mode [ 1056.293227][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.692032][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.771619][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.819808][ T3450] bond0 (unregistering): Released all slaves [ 1058.375538][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.425981][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.760'. [ 1058.440567][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.482336][ T3450] bond0 (unregistering): Released all slaves [ 1058.674153][ T9422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.687774][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.695997][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.722628][ T9406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.926719][ T9422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.997769][ T9422] team0: Port device team_slave_0 added [ 1064.059867][ T9422] team0: Port device team_slave_1 added [ 1067.777081][ T3450] hsr_slave_0: left promiscuous mode [ 1067.803209][ T3450] hsr_slave_1: left promiscuous mode [ 1067.823374][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.831059][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.903026][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.910978][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.042329][ T3450] hsr_slave_0: left promiscuous mode [ 1068.062056][ T3450] hsr_slave_1: left promiscuous mode [ 1068.091780][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.144370][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.239121][ T3450] veth1_macvtap: left promiscuous mode [ 1068.244798][ T3450] veth0_macvtap: left promiscuous mode [ 1068.288461][ T3450] veth1_vlan: left promiscuous mode [ 1068.311626][ T3450] veth0_vlan: left promiscuous mode [ 1070.021967][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1070.058984][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1070.070000][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1070.103257][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1070.117966][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1072.479261][ T5793] Bluetooth: hci0: command tx timeout [ 1072.818720][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 1072.987366][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 1073.070252][ T9613] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 1074.873783][ T5793] Bluetooth: hci0: command tx timeout [ 1075.097838][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 1075.226971][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 1075.386758][ T5839] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1075.608102][ T7776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1075.632135][ T7776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1075.647715][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 1075.654562][ T7776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1075.670584][ T7776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1075.685881][ T7776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1075.718710][ T5839] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1075.728563][ T5839] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1075.737859][ T5839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.748790][ T5839] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1075.758373][ T5839] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1075.768016][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.791054][ T5839] usb 1-1: config 0 descriptor?? [ 1075.969597][ T9406] hsr_slave_0: entered promiscuous mode [ 1075.999307][ T9406] hsr_slave_1: entered promiscuous mode [ 1076.009177][ T9406] debugfs: 'hsr0' already exists in 'hsr' [ 1076.015899][ T9406] Cannot create hsr debugfs directory [ 1076.109766][ T9422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.116921][ T9422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.145902][ T9422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.338863][ T9422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.346243][ T9422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.373476][ T9422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.090381][ T7776] Bluetooth: hci0: command tx timeout [ 1077.343732][ T9422] hsr_slave_0: entered promiscuous mode [ 1077.387765][ T9422] hsr_slave_1: entered promiscuous mode [ 1077.438251][ T9422] debugfs: 'hsr0' already exists in 'hsr' [ 1077.447237][ T9422] Cannot create hsr debugfs directory [ 1077.945896][ T7776] Bluetooth: hci5: command tx timeout [ 1078.282003][ T795] usb 1-1: USB disconnect, device number 18 [ 1079.410628][ T7776] Bluetooth: hci0: command tx timeout [ 1080.169301][ T7776] Bluetooth: hci5: command tx timeout [ 1082.393706][ T7776] Bluetooth: hci5: command tx timeout [ 1082.621624][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1082.632765][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1082.645919][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1082.670254][ T7118] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1082.671605][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1082.709180][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1082.883553][ T7118] usb 1-1: Using ep0 maxpacket: 32 [ 1082.913859][ T7118] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1082.925215][ T7118] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1082.935378][ T7118] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1082.984380][ T7118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1082.994715][ T7118] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1083.005388][ T7118] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1083.019169][ T7118] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1083.031641][ T7118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.181621][ T7118] usb 1-1: config 0 descriptor?? [ 1083.436946][ T7118] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1083.782650][ C0] usblp0: nonzero read bulk status received: -71 [ 1083.789601][ T9649] usblp0: error -71 reading from printer [ 1083.799193][ T7118] usb 1-1: USB disconnect, device number 19 [ 1083.860231][ T7118] usblp0: removed [ 1083.995114][ T9603] chnl_net:caif_netlink_parms(): no params data found [ 1084.481329][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.489395][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.627636][ T5793] Bluetooth: hci5: command tx timeout [ 1084.735776][ T9621] chnl_net:caif_netlink_parms(): no params data found [ 1084.958955][ T5793] Bluetooth: hci1: command tx timeout [ 1085.342603][ T58] bridge_slave_1: left allmulticast mode [ 1085.348936][ T58] bridge_slave_1: left promiscuous mode [ 1085.355766][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.397492][ T58] bridge_slave_0: left allmulticast mode [ 1085.403638][ T58] bridge_slave_0: left promiscuous mode [ 1085.410865][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.518249][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.581594][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.652951][ T58] bond0 (unregistering): Released all slaves [ 1087.226228][ T5793] Bluetooth: hci1: command tx timeout [ 1089.407166][ T5793] Bluetooth: hci1: command tx timeout [ 1090.037348][ T58] hsr_slave_0: left promiscuous mode [ 1090.090540][ T58] hsr_slave_1: left promiscuous mode [ 1090.098966][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.146798][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.423535][ T7494] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1090.632922][ T7494] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.643775][ T7494] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1090.653929][ T7494] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1090.663436][ T7494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.682304][ T7494] usb 1-1: config 0 descriptor?? [ 1090.783837][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1090.826639][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1091.641284][ T5793] Bluetooth: hci1: command tx timeout [ 1091.679220][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.687116][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.704294][ T9603] bridge_slave_0: entered allmulticast mode [ 1091.725074][ T9603] bridge_slave_0: entered promiscuous mode [ 1091.865999][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.873731][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.884464][ T9603] bridge_slave_1: entered allmulticast mode [ 1091.899159][ T9603] bridge_slave_1: entered promiscuous mode [ 1091.935640][ T9650] chnl_net:caif_netlink_parms(): no params data found [ 1092.134537][ T9603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.193757][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.201789][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.215454][ T9621] bridge_slave_0: entered allmulticast mode [ 1092.230073][ T9621] bridge_slave_0: entered promiscuous mode [ 1092.244549][ T9422] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1092.287425][ T9603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.416448][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.424562][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.457797][ T9621] bridge_slave_1: entered allmulticast mode [ 1092.478284][ T9621] bridge_slave_1: entered promiscuous mode [ 1092.490910][ T9422] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1092.682288][ T9603] team0: Port device team_slave_0 added [ 1093.055045][ T9603] team0: Port device team_slave_1 added [ 1093.439451][ T7776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1093.449463][ T7776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1093.463176][ T7776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1093.479327][ T7776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1093.479821][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.506311][ T7776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1093.744753][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.773614][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.781322][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.812460][ T9603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.912543][ T5832] usb 1-1: USB disconnect, device number 20 [ 1093.943087][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.952071][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.979188][ T9603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.473493][ T7494] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1094.673393][ T9621] team0: Port device team_slave_0 added [ 1094.676551][ T7494] usb 1-1: Using ep0 maxpacket: 32 [ 1094.731468][ T7494] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1094.742233][ T7494] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1094.752303][ T7494] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.762891][ T7494] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1094.772907][ T7494] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1094.782230][ T7494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.874904][ T7494] usb 1-1: config 0 descriptor?? [ 1094.921967][ T9621] team0: Port device team_slave_1 added [ 1095.173555][ T9650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.181475][ T9650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.201019][ T9650] bridge_slave_0: entered allmulticast mode [ 1095.213113][ T9650] bridge_slave_0: entered promiscuous mode [ 1095.358681][ T9603] hsr_slave_0: entered promiscuous mode [ 1095.370707][ T9603] hsr_slave_1: entered promiscuous mode [ 1095.381572][ T9603] debugfs: 'hsr0' already exists in 'hsr' [ 1095.387961][ T9603] Cannot create hsr debugfs directory [ 1095.448775][ T9650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.468353][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.481179][ T9650] bridge_slave_1: entered allmulticast mode [ 1095.494454][ T9650] bridge_slave_1: entered promiscuous mode [ 1095.572535][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.579997][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.606897][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.735339][ T7776] Bluetooth: hci2: command tx timeout [ 1095.749811][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.757862][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.784571][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.183325][ T9650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.401180][ T58] bridge_slave_1: left allmulticast mode [ 1096.407217][ T58] bridge_slave_1: left promiscuous mode [ 1096.418573][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.443313][ T58] bridge_slave_0: left allmulticast mode [ 1096.449415][ T58] bridge_slave_0: left promiscuous mode [ 1096.456577][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.475652][ T58] bridge_slave_1: left allmulticast mode [ 1096.481667][ T58] bridge_slave_1: left promiscuous mode [ 1096.496968][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.513085][ T58] bridge_slave_0: left allmulticast mode [ 1096.519272][ T58] bridge_slave_0: left promiscuous mode [ 1096.529759][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.816116][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.855727][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.876952][ T58] bond0 (unregistering): Released all slaves [ 1097.237842][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1097.281536][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1097.300548][ T7118] usb 1-1: USB disconnect, device number 21 [ 1097.362381][ T58] bond0 (unregistering): Released all slaves [ 1097.423486][ T9650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.716483][ T9753] xt_TCPMSS: Only works on TCP SYN packets [ 1097.887829][ T9621] hsr_slave_0: entered promiscuous mode [ 1097.917487][ T9621] hsr_slave_1: entered promiscuous mode [ 1097.951931][ T9621] debugfs: 'hsr0' already exists in 'hsr' [ 1097.958026][ T9621] Cannot create hsr debugfs directory [ 1097.970125][ T7776] Bluetooth: hci2: command tx timeout [ 1098.058048][ T58] hsr_slave_0: left promiscuous mode [ 1098.080164][ T58] hsr_slave_1: left promiscuous mode [ 1098.099375][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.122386][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.185760][ T58] hsr_slave_0: left promiscuous mode [ 1098.210836][ T58] hsr_slave_1: left promiscuous mode [ 1098.230518][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.247548][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.707426][ T7494] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1098.821681][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1098.879666][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1098.881128][ T7494] usb 1-1: Using ep0 maxpacket: 32 [ 1098.923094][ T7494] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1098.932242][ T7494] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1098.941300][ T7494] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1099.006217][ T7494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1099.018396][ T7494] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1099.030511][ T7494] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1099.046047][ T7494] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1099.055792][ T7494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.146464][ T7494] usb 1-1: config 0 descriptor?? [ 1099.402038][ T7494] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1099.676440][ C1] usblp0: nonzero read bulk status received: -71 [ 1099.683683][ T9761] usblp0: error -71 reading from printer [ 1099.685139][ T5832] usb 1-1: USB disconnect, device number 22 [ 1099.738753][ T5832] usblp0: removed [ 1100.055487][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1100.083789][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1100.192764][ T7776] Bluetooth: hci2: command tx timeout [ 1100.595646][ T9650] team0: Port device team_slave_0 added [ 1100.992913][ T9650] team0: Port device team_slave_1 added [ 1101.616962][ T9785] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'. [ 1101.970429][ T9650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.977705][ T9650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.004718][ T9650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.301972][ T9650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.309186][ T9650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.336272][ T9650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.414402][ T7776] Bluetooth: hci2: command tx timeout [ 1102.563672][ T9409] udevd[9409]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1102.739981][ T9405] udevd[9405]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1103.027151][ T9650] hsr_slave_0: entered promiscuous mode [ 1103.044492][ T9650] hsr_slave_1: entered promiscuous mode [ 1103.051977][ T5832] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1103.110909][ T9721] chnl_net:caif_netlink_parms(): no params data found [ 1103.258912][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 1103.273812][ T5832] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1103.283481][ T5832] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1103.293232][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.304501][ T5832] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1103.314656][ T5832] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1103.323986][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.407582][ T5832] usb 1-1: config 0 descriptor?? [ 1104.851626][ T9721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.866996][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.876783][ T9721] bridge_slave_0: entered allmulticast mode [ 1104.888997][ T9721] bridge_slave_0: entered promiscuous mode [ 1104.946201][ T9721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.954126][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.964209][ T9721] bridge_slave_1: entered allmulticast mode [ 1104.976435][ T9721] bridge_slave_1: entered promiscuous mode [ 1105.179798][ T9603] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1105.326526][ T58] bridge_slave_1: left allmulticast mode [ 1105.332551][ T58] bridge_slave_1: left promiscuous mode [ 1105.342628][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.377057][ T58] bridge_slave_0: left allmulticast mode [ 1105.385757][ T58] bridge_slave_0: left promiscuous mode [ 1105.392713][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.679893][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.720578][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.740370][ T58] bond0 (unregistering): Released all slaves [ 1105.758591][ T9603] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1105.897636][ T9721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.913843][ T5832] usb 1-1: USB disconnect, device number 23 [ 1105.914164][ T9603] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1106.045418][ T58] hsr_slave_0: left promiscuous mode [ 1106.074978][ T58] hsr_slave_1: left promiscuous mode [ 1106.086015][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.118985][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.770531][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1106.856287][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1107.629107][ T9721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.686323][ T9603] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1108.046349][ T9839] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1109.051068][ T9721] team0: Port device team_slave_0 added [ 1109.202521][ T9721] team0: Port device team_slave_1 added [ 1109.468946][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.476487][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.503314][ T9721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.599213][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.606999][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.635143][ T9721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.742807][ T9621] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1109.800482][ T9621] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1109.902457][ T9621] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1110.021050][ T9621] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1110.701036][ T9721] hsr_slave_0: entered promiscuous mode [ 1110.724990][ T9721] hsr_slave_1: entered promiscuous mode [ 1110.752035][ T9721] debugfs: 'hsr0' already exists in 'hsr' [ 1110.758515][ T9721] Cannot create hsr debugfs directory [ 1110.919638][ T9650] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1110.957354][ T9650] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1110.990514][ T7494] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1111.075330][ T9650] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1111.158071][ T9650] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1111.175407][ T7494] usb 1-1: Using ep0 maxpacket: 32 [ 1111.219081][ T7494] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1111.227990][ T7494] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1111.237689][ T7494] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1111.279835][ T7494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1111.290086][ T7494] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1111.300666][ T7494] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1111.314319][ T7494] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1111.324076][ T7494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.421287][ T7494] usb 1-1: config 0 descriptor?? [ 1111.711630][ T7494] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1111.987154][ T9603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.008112][ C1] usblp0: nonzero read bulk status received: -71 [ 1112.017442][ T7118] usb 1-1: USB disconnect, device number 24 [ 1112.052140][ T9849] usblp0: error -71 reading from printer [ 1112.067799][ T7118] usblp0: removed [ 1112.372762][ T9603] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.589635][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.597385][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.790884][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.798644][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.265644][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.682337][ T9721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1113.743966][ T9721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1113.775758][ T9870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.790'. [ 1113.917485][ T9721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1113.972661][ T9721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1114.077795][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.248228][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.256144][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.599354][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.607074][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.612943][ T9409] udevd[9409]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1114.751567][ T9409] udevd[9409]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1114.828302][ T9650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.207508][ T9650] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.485120][ T7896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.492949][ T7896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.830688][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.838553][ T8514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.842769][ T9892] loop0: detected capacity change from 0 to 512 [ 1115.883603][ T9892] EXT4-fs: Ignoring removed i_version option [ 1115.890169][ T9892] EXT4-fs: Ignoring removed bh option [ 1116.062079][ T9892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.178808][ T9892] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.110282][ T9603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.135836][ T9721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.795617][ T7966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.924234][ T9721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.075866][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.174219][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.182359][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.427032][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.434719][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.154632][ T9650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.861149][ T9603] veth0_vlan: entered promiscuous mode [ 1123.041617][ T9603] veth1_vlan: entered promiscuous mode [ 1123.598970][ T9721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.056329][ T9603] veth0_macvtap: entered promiscuous mode [ 1124.124880][ T9621] veth0_vlan: entered promiscuous mode [ 1124.253172][ T9603] veth1_macvtap: entered promiscuous mode [ 1124.441736][ T9621] veth1_vlan: entered promiscuous mode [ 1124.758197][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.872148][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.011608][ T9721] veth0_vlan: entered promiscuous mode [ 1125.042012][ T3467] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.091416][ T3467] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.177055][ T3467] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.193945][ T9721] veth1_vlan: entered promiscuous mode [ 1125.265643][ T8514] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.444776][ T9621] veth0_macvtap: entered promiscuous mode [ 1125.603194][ T9621] veth1_macvtap: entered promiscuous mode [ 1125.766745][ T9650] veth0_vlan: entered promiscuous mode [ 1126.037945][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.088662][ T9650] veth1_vlan: entered promiscuous mode [ 1126.316177][ T9721] veth0_macvtap: entered promiscuous mode [ 1126.359898][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.482454][ T9721] veth1_macvtap: entered promiscuous mode [ 1126.673078][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.722717][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.790509][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.864047][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.034723][ T9650] veth0_macvtap: entered promiscuous mode [ 1127.108845][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.233224][ T9650] veth1_macvtap: entered promiscuous mode [ 1127.324902][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.534877][ T6016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.674776][ T5992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.735343][ T9650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.805556][ T5992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.890663][ T9650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.956293][ T3467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.098647][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.165962][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.228505][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.294072][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.516705][T10062] loop0: detected capacity change from 0 to 128 [ 1134.802010][T10062] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1134.870686][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1134.886651][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1134.896847][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1134.902785][T10062] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.013376][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1135.033791][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1135.658011][ T7966] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1136.489073][ T6187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.497365][ T6187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.044632][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.053102][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.305650][ T5793] Bluetooth: hci4: command tx timeout [ 1137.456433][ T3450] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.106577][T10091] loop0: detected capacity change from 0 to 32768 [ 1138.155650][T10091] (syz.0.803,10091,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1138.174505][T10091] (syz.0.803,10091,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1138.281316][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.289214][T10091] JBD2: Ignoring recovery information on journal [ 1138.289968][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.401962][ T3450] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.436299][T10091] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1138.517953][T10091] (syz.0.803,10091,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1138.541958][T10091] (syz.0.803,10091,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1138.554944][T10091] (syz.0.803,10091,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1138.563732][T10091] (syz.0.803,10091,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1138.571572][T10091] Quota error (device loop0): find_next_id: Can't read quota tree block 4 [ 1138.580777][T10091] (syz.0.803,10091,1):ocfs2_get_next_id:921 ERROR: status = -5 [ 1138.797768][ T7966] ocfs2: Unmounting device (7,0) on (node local) [ 1138.909628][ T3450] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.348874][ T3450] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.443886][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.452301][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.539463][ T5793] Bluetooth: hci4: command tx timeout [ 1139.712680][T10067] chnl_net:caif_netlink_parms(): no params data found [ 1139.883746][ T6187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.892281][ T6187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.218643][ T7776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1140.265798][ T7776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1140.289003][ T7776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1140.329280][ T7776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1140.360386][ T7776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1141.008688][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.017532][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.557513][ T3450] bridge_slave_1: left allmulticast mode [ 1141.563535][ T3450] bridge_slave_1: left promiscuous mode [ 1141.574603][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.748130][ T7776] Bluetooth: hci4: command tx timeout [ 1141.759201][ T3450] bridge_slave_0: left allmulticast mode [ 1141.765566][ T3450] bridge_slave_0: left promiscuous mode [ 1141.772625][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.625122][ T7776] Bluetooth: hci0: command tx timeout [ 1143.020002][ T7118] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1143.249457][ T7118] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1143.257117][ T7118] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1143.266768][ T7118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.363726][ T7118] usb 3-1: config 0 descriptor?? [ 1143.613779][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.707492][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.753077][ T3450] bond0 (unregistering): Released all slaves [ 1144.032348][ T5793] Bluetooth: hci4: command tx timeout [ 1144.360744][ T3450] hsr_slave_0: left promiscuous mode [ 1144.418432][ T3450] hsr_slave_1: left promiscuous mode [ 1144.432196][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.447512][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.482816][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.492995][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.619982][ T3450] veth1_macvtap: left promiscuous mode [ 1144.654308][ T3450] veth0_macvtap: left promiscuous mode [ 1144.709070][ T3450] veth1_vlan: left promiscuous mode [ 1144.714796][ T3450] veth0_vlan: left promiscuous mode [ 1144.838961][ T5793] Bluetooth: hci0: command tx timeout [ 1146.238336][T10143] loop0: detected capacity change from 0 to 32768 [ 1146.254940][T10143] (syz.0.810,10143,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1146.283128][T10143] (syz.0.810,10143,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1146.359589][T10143] JBD2: Ignoring recovery information on journal [ 1146.504069][T10143] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1146.584114][T10143] (syz.0.810,10143,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1146.600109][T10143] (syz.0.810,10143,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1146.613026][T10143] (syz.0.810,10143,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1146.621653][T10143] (syz.0.810,10143,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1146.632896][T10143] Quota error (device loop0): find_next_id: Can't read quota tree block 4 [ 1146.642210][T10143] (syz.0.810,10143,1):ocfs2_get_next_id:921 ERROR: status = -5 [ 1146.930340][ T7966] ocfs2: Unmounting device (7,0) on (node local) [ 1147.050918][ T5793] Bluetooth: hci0: command tx timeout [ 1147.137101][ T7118] usb 3-1: USB disconnect, device number 23 [ 1147.801458][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 1147.980679][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 1149.274102][ T5793] Bluetooth: hci0: command tx timeout [ 1150.167689][T10067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.175519][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.208343][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1150.215708][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1150.820164][T10176] loop2: detected capacity change from 0 to 32768 [ 1150.840841][T10067] bridge_slave_0: entered allmulticast mode [ 1150.892745][T10067] bridge_slave_0: entered promiscuous mode [ 1150.956094][T10176] (syz.2.819,10176,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1150.971171][T10176] (syz.2.819,10176,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1151.076612][T10176] JBD2: Ignoring recovery information on journal [ 1151.206113][T10176] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1151.254398][T10067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.262283][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.289920][T10176] (syz.2.819,10176,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1151.305145][T10176] (syz.2.819,10176,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1151.318132][T10176] (syz.2.819,10176,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1151.327030][T10176] (syz.2.819,10176,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1151.339986][T10176] Quota error (device loop2): find_next_id: Can't read quota tree block 4 [ 1151.350274][T10176] (syz.2.819,10176,0):ocfs2_get_next_id:921 ERROR: status = -5 [ 1151.485275][T10067] bridge_slave_1: entered allmulticast mode [ 1151.573988][T10067] bridge_slave_1: entered promiscuous mode [ 1151.643429][ T9721] ocfs2: Unmounting device (7,2) on (node local) [ 1151.914026][ T6881] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1152.107768][ T6881] usb 1-1: device descriptor read/64, error -71 [ 1152.239440][T10067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.295242][T10067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.310144][ T5832] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1152.417586][ T6881] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1152.510731][ T6016] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.562444][ T5832] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1152.574590][ T5832] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1152.584487][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.640222][ T6881] usb 1-1: device descriptor read/64, error -71 [ 1152.703117][ T5832] usb 3-1: config 0 descriptor?? [ 1152.768291][ T6881] usb usb1-port1: attempt power cycle [ 1153.067232][ T6016] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.136033][T10067] team0: Port device team_slave_0 added [ 1153.155325][T10103] chnl_net:caif_netlink_parms(): no params data found [ 1153.202298][ T6881] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1153.270492][ T6881] usb 1-1: device descriptor read/8, error -71 [ 1153.335394][ T6016] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.459414][T10067] team0: Port device team_slave_1 added [ 1153.561079][ T6881] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1153.642100][ T6881] usb 1-1: device descriptor read/8, error -71 [ 1153.679441][ T6016] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.780459][ T6881] usb usb1-port1: unable to enumerate USB device [ 1154.264670][T10067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.272289][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.303316][T10067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.422679][T10067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.430100][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.457415][T10067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.293904][ T6016] bridge_slave_1: left allmulticast mode [ 1155.299912][ T6016] bridge_slave_1: left promiscuous mode [ 1155.306948][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.362629][ T6016] bridge_slave_0: left allmulticast mode [ 1155.369772][ T6016] bridge_slave_0: left promiscuous mode [ 1155.376734][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.189212][ T5832] usb 3-1: USB disconnect, device number 24 [ 1156.873952][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.947112][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.050678][ T6016] bond0 (unregistering): Released all slaves [ 1157.220188][T10067] hsr_slave_0: entered promiscuous mode [ 1157.267976][T10067] hsr_slave_1: entered promiscuous mode [ 1157.298095][T10067] debugfs: 'hsr0' already exists in 'hsr' [ 1157.305133][T10067] Cannot create hsr debugfs directory [ 1158.493923][T10103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.501708][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.585862][T10103] bridge_slave_0: entered allmulticast mode [ 1158.644550][T10103] bridge_slave_0: entered promiscuous mode [ 1159.316752][T10103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.324623][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.422235][T10103] bridge_slave_1: entered allmulticast mode [ 1159.521897][T10103] bridge_slave_1: entered promiscuous mode [ 1159.864815][ T6016] hsr_slave_0: left promiscuous mode [ 1160.721703][ T6016] hsr_slave_1: left promiscuous mode [ 1160.770040][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.784046][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.849027][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.857086][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.044573][ T6016] veth1_macvtap: left promiscuous mode [ 1161.067521][ T6016] veth0_macvtap: left promiscuous mode [ 1161.073511][ T6016] veth1_vlan: left promiscuous mode [ 1161.151046][ T6016] veth0_vlan: left promiscuous mode [ 1161.795490][ T7118] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1161.983768][ T7118] usb 3-1: device descriptor read/64, error -71 [ 1162.277310][ T7118] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1162.471533][ T7118] usb 3-1: device descriptor read/64, error -71 [ 1162.620231][ T7118] usb usb3-port1: attempt power cycle [ 1163.035517][ T7118] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1163.089866][ T7118] usb 3-1: device descriptor read/8, error -71 [ 1163.316658][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 1163.385756][ T7118] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1163.421858][ T7118] usb 3-1: device descriptor read/8, error -71 [ 1163.439716][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 1163.556350][ T7118] usb usb3-port1: unable to enumerate USB device [ 1164.949132][T10103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.194579][T10103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.836722][T10103] team0: Port device team_slave_0 added [ 1165.967127][T10103] team0: Port device team_slave_1 added [ 1166.613073][T10103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.620723][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.649048][T10103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.842284][T10103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.853719][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.883162][T10103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.386456][T10103] hsr_slave_0: entered promiscuous mode [ 1168.573802][T10103] hsr_slave_1: entered promiscuous mode [ 1168.606370][T10103] debugfs: 'hsr0' already exists in 'hsr' [ 1168.612961][T10103] Cannot create hsr debugfs directory [ 1169.286458][ T7118] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1169.456094][T10067] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1169.478740][ T7118] usb 3-1: device descriptor read/64, error -71 [ 1169.720226][T10067] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1170.252882][ T7118] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1170.439433][T10310] loop0: detected capacity change from 0 to 64 [ 1171.355163][ T7118] usb 3-1: device descriptor read/64, error -71 [ 1172.141836][ T7118] usb usb3-port1: attempt power cycle [ 1172.498465][T10067] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1172.588715][T10067] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1175.501332][T10103] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1175.607724][T10103] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1175.768164][T10103] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1175.979861][T10103] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1176.255316][T10067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.530417][T10067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.642804][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.650433][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.858177][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.866109][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.574429][T10103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.915016][T10103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.057279][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.064768][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.263951][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.271758][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.858045][T10067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.442910][ T7118] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1181.644590][ T7118] usb 1-1: device descriptor read/64, error -71 [ 1181.923065][ T7118] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1182.118070][ T7118] usb 1-1: device descriptor read/64, error -71 [ 1182.235528][ T7118] usb usb1-port1: attempt power cycle [ 1182.532985][T10103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.649766][ T7118] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1182.743703][ T7118] usb 1-1: device descriptor read/8, error -71 [ 1183.024624][ T7118] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1183.060477][ T7118] usb 1-1: device descriptor read/8, error -71 [ 1183.186046][ T7118] usb usb1-port1: unable to enumerate USB device [ 1184.221027][T10372] loop2: detected capacity change from 0 to 32768 [ 1184.307391][T10372] (syz.2.861,10372,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1184.323578][T10372] (syz.2.861,10372,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1184.436333][T10372] JBD2: Ignoring recovery information on journal [ 1184.593022][T10372] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1184.652611][T10372] (syz.2.861,10372,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1184.667193][T10372] (syz.2.861,10372,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1184.679823][T10372] (syz.2.861,10372,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1184.689788][T10372] (syz.2.861,10372,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1184.698250][T10372] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 4 [ 1184.707810][T10372] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1184.717595][T10372] (syz.2.861,10372,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 1184.729442][T10372] (syz.2.861,10372,0):ocfs2_mknod:318 ERROR: status = -5 [ 1184.736797][T10372] (syz.2.861,10372,0):ocfs2_mknod:506 ERROR: status = -5 [ 1184.744215][T10372] (syz.2.861,10372,0):ocfs2_create:679 ERROR: status = -5 [ 1184.799691][T10378] (syz.2.861,10378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1184.813348][T10378] (syz.2.861,10378,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1184.854952][T10378] (syz.2.861,10378,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1184.864038][T10378] (syz.2.861,10378,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1184.871849][T10378] Quota error (device loop2): find_next_id: Can't read quota tree block 4 [ 1184.881232][T10378] (syz.2.861,10378,0):ocfs2_get_next_id:921 ERROR: status = -5 [ 1185.475984][T10067] veth0_vlan: entered promiscuous mode [ 1185.495643][ T9721] ocfs2: Unmounting device (7,2) on (node local) [ 1185.686464][T10067] veth1_vlan: entered promiscuous mode [ 1186.299381][T10067] veth0_macvtap: entered promiscuous mode [ 1186.473869][T10067] veth1_macvtap: entered promiscuous mode [ 1186.971512][T10067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.120922][T10067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.385447][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.510866][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.639814][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.669052][T10103] veth0_vlan: entered promiscuous mode [ 1187.739166][ T58] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.962235][T10103] veth1_vlan: entered promiscuous mode [ 1188.577841][T10103] veth0_macvtap: entered promiscuous mode [ 1188.709087][T10103] veth1_macvtap: entered promiscuous mode [ 1189.085264][T10103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.266504][T10103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.446001][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.512988][ T3450] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.538348][ T9582] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1189.592676][ T3450] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.639429][ T3450] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.769702][ T9582] usb 1-1: device descriptor read/64, error -71 [ 1190.091816][ T9582] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1190.262785][ T9582] usb 1-1: device descriptor read/64, error -71 [ 1190.425251][ T9582] usb usb1-port1: attempt power cycle [ 1190.814361][T10422] loop2: detected capacity change from 0 to 512 [ 1190.875341][T10422] EXT4-fs: Ignoring removed bh option [ 1190.882809][ T9582] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1190.933162][ T9582] usb 1-1: device descriptor read/8, error -71 [ 1190.938045][T10422] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1191.097318][T10422] EXT4-fs (loop2): 1 truncate cleaned up [ 1191.158756][T10422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1191.202398][ T9582] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1191.257604][ T9582] usb 1-1: device descriptor read/8, error -71 [ 1191.385547][ T9582] usb usb1-port1: unable to enumerate USB device [ 1191.578977][ T9721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.894865][T10428] loop5: detected capacity change from 0 to 4096 [ 1192.092529][T10437] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1192.230722][ T29] audit: type=1800 audit(1770761247.901:27): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.876" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1194.135314][T10455] misc userio: No port type given on /dev/userio [ 1197.555551][T10476] binder: 10475:10476 ioctl c0306201 0 returned -14 [ 1197.838735][T10482] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 1199.552375][ T9582] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1199.787266][ T9582] usb 6-1: Using ep0 maxpacket: 32 [ 1199.808773][ T9582] usb 6-1: config 0 has no interfaces? [ 1199.848948][ T9582] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1199.859237][ T9582] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1199.868077][ T9582] usb 6-1: Product: syz [ 1199.872850][ T9582] usb 6-1: Manufacturer: syz [ 1199.877669][ T9582] usb 6-1: SerialNumber: syz [ 1200.036059][ T9582] usb 6-1: config 0 descriptor?? [ 1200.315822][ T9582] usb 6-1: USB disconnect, device number 9 [ 1200.579636][ T7776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1200.591304][ T7776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1200.615093][ T7776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1200.637919][ T7776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1200.670880][ T7776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1201.921244][T10521] binder: 10520:10521 ioctl c0306201 0 returned -14 [ 1201.999562][ T7495] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1202.196834][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.205181][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.284042][ T7495] usb 1-1: config 0 has an invalid interface number: 57 but max is 0 [ 1202.292579][ T7495] usb 1-1: config 0 has no interface number 0 [ 1202.385805][ T7495] usb 1-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1202.398143][ T7495] usb 1-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 1202.410232][ T7495] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7 [ 1202.421899][ T7495] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024 [ 1202.433817][ T7495] usb 1-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1202.447533][ T7495] usb 1-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 1202.457222][ T7495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.653611][T10527] netlink: 'syz.2.897': attribute type 1 has an invalid length. [ 1202.690788][ T7495] usb 1-1: config 0 descriptor?? [ 1202.775497][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.787443][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.835952][ T7495] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 1202.842839][ T7495] gspca_mr97310a: reg write [21] error -22 [ 1202.849572][ T7495] mr97310a 1-1:0.57: probe with driver mr97310a failed with error -22 [ 1202.904768][ T7776] Bluetooth: hci5: command tx timeout [ 1203.867478][ T6187] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.009900][ T9582] usb 1-1: USB disconnect, device number 37 [ 1204.269098][ T6187] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.635752][ T6187] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.060959][ T6187] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.133216][ T7776] Bluetooth: hci5: command tx timeout [ 1205.704948][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1205.715593][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1205.732957][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1205.785713][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1205.813341][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1205.862845][T10550] loop0: detected capacity change from 0 to 1024 [ 1205.874515][T10550] ext4: Bad value for 'barrier' [ 1205.903303][T10507] chnl_net:caif_netlink_parms(): no params data found [ 1206.984506][T10559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.903'. [ 1207.464601][ T5793] Bluetooth: hci5: command tx timeout [ 1207.805488][ T6187] bridge_slave_1: left allmulticast mode [ 1207.811415][ T6187] bridge_slave_1: left promiscuous mode [ 1207.818740][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.115985][ T5793] Bluetooth: hci4: command tx timeout [ 1208.130797][ T6187] bridge_slave_0: left allmulticast mode [ 1208.137294][ T6187] bridge_slave_0: left promiscuous mode [ 1208.144227][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.688100][ T5793] Bluetooth: hci5: command tx timeout [ 1210.020059][T10568] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 1210.354527][ T5793] Bluetooth: hci4: command tx timeout [ 1210.938600][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.022984][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.055882][ T5832] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1211.081885][ T6187] bond0 (unregistering): Released all slaves [ 1211.319946][ T5832] usb 1-1: config 0 has an invalid interface number: 57 but max is 0 [ 1211.334765][ T5832] usb 1-1: config 0 has no interface number 0 [ 1211.383647][ T5832] usb 1-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1211.394988][ T5832] usb 1-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 1211.408147][ T5832] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7 [ 1211.419619][ T5832] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024 [ 1211.431339][ T5832] usb 1-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1211.450630][ T5832] usb 1-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 1211.461998][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.651718][ T6187] hsr_slave_0: left promiscuous mode [ 1211.677737][ T6187] hsr_slave_1: left promiscuous mode [ 1211.702245][ T5832] usb 1-1: config 0 descriptor?? [ 1211.748445][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1211.749871][ T5832] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 1211.759652][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1211.825950][ T5832] gspca_mr97310a: reg write [21] error -22 [ 1211.832546][ T5832] mr97310a 1-1:0.57: probe with driver mr97310a failed with error -22 [ 1211.851783][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1211.859774][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.039639][ T6187] veth1_macvtap: left promiscuous mode [ 1212.045511][ T6187] veth0_macvtap: left promiscuous mode [ 1212.119698][ T6187] veth1_vlan: left promiscuous mode [ 1212.141609][ T6187] veth0_vlan: left promiscuous mode [ 1212.538233][ T5832] usb 1-1: USB disconnect, device number 38 [ 1212.565161][ T5793] Bluetooth: hci4: command tx timeout [ 1213.635111][T10604] netlink: 'syz.5.919': attribute type 1 has an invalid length. [ 1214.785610][ T5793] Bluetooth: hci4: command tx timeout [ 1214.915153][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 1215.087050][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 1215.847139][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1215.854032][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1216.079767][ T7118] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1216.334667][ T7118] usb 1-1: config 0 has an invalid interface number: 57 but max is 0 [ 1216.343406][ T7118] usb 1-1: config 0 has no interface number 0 [ 1216.392014][ T7118] usb 1-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1216.404378][ T7118] usb 1-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 1216.417158][ T7118] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7 [ 1216.428989][ T7118] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024 [ 1216.440948][ T7118] usb 1-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1216.455244][ T7118] usb 1-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 1216.465270][ T7118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.791324][ T7118] usb 1-1: config 0 descriptor?? [ 1216.921470][ T7118] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 1216.979365][ T7118] gspca_mr97310a: reg write [21] error -22 [ 1216.985973][ T7118] mr97310a 1-1:0.57: probe with driver mr97310a failed with error -22 [ 1217.170933][T10638] netlink: 'syz.2.930': attribute type 1 has an invalid length. [ 1217.255343][T10507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.263218][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.366750][T10507] bridge_slave_0: entered allmulticast mode [ 1217.403374][T10507] bridge_slave_0: entered promiscuous mode [ 1217.454887][T10507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.466369][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.537323][T10507] bridge_slave_1: entered allmulticast mode [ 1217.602973][T10507] bridge_slave_1: entered promiscuous mode [ 1218.036388][ T7776] Bluetooth: hci1: command 0x0406 tx timeout [ 1218.091038][ T7118] usb 1-1: USB disconnect, device number 39 [ 1218.255607][T10507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.326144][ T6187] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.605892][T10507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.855334][ T6187] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.367623][ T6187] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.372285][ T5832] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1219.612331][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 1219.641427][ T5832] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1219.656690][ T5832] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1219.667789][ T5832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1219.739071][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1219.749781][ T5832] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1219.765774][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1219.778292][ T5832] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1219.795270][ T5832] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1219.811848][ T5832] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1219.821466][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.929408][ T5832] usb 6-1: config 0 descriptor?? [ 1219.978329][ T6187] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.055070][T10507] team0: Port device team_slave_0 added [ 1220.138616][T10551] chnl_net:caif_netlink_parms(): no params data found [ 1220.172995][ T5832] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1220.299516][T10507] team0: Port device team_slave_1 added [ 1220.429412][ T7118] usb 6-1: USB disconnect, device number 10 [ 1220.487857][ T7118] usblp0: removed [ 1221.022352][T10673] netlink: 'syz.2.939': attribute type 1 has an invalid length. [ 1221.165604][T10507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.173147][T10507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.205201][T10507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.465607][T10507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.472904][T10507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.500126][T10507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.168657][ T5832] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1222.244091][T10677] kvm: kvm [10676]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffcf80000000 [ 1222.277382][T10677] kvm: kvm [10676]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffe300006900 [ 1222.368249][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 1222.398262][ T6187] bridge_slave_1: left allmulticast mode [ 1222.403363][ T5832] usb 3-1: config 0 has no interfaces? [ 1222.404207][ T6187] bridge_slave_1: left promiscuous mode [ 1222.405417][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.474342][ T5832] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1222.484239][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1222.498771][ T5832] usb 3-1: Product: syz [ 1222.505483][ T5832] usb 3-1: Manufacturer: syz [ 1222.510324][ T5832] usb 3-1: SerialNumber: syz [ 1222.621668][ T6187] bridge_slave_0: left allmulticast mode [ 1222.627727][ T6187] bridge_slave_0: left promiscuous mode [ 1222.634847][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.684607][ T5832] usb 3-1: config 0 descriptor?? [ 1223.314339][T10690] loop5: detected capacity change from 0 to 32768 [ 1223.377385][T10690] (syz.5.943,10690,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1223.393391][T10690] (syz.5.943,10690,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1223.429956][T10690] JBD2: Ignoring recovery information on journal [ 1223.631066][T10690] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1223.759333][T10690] (syz.5.943,10690,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1223.773023][T10690] (syz.5.943,10690,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1223.785626][T10690] (syz.5.943,10690,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1223.794500][T10690] (syz.5.943,10690,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1223.802358][T10690] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 4 [ 1223.814051][T10690] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1223.824029][T10690] (syz.5.943,10690,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 1223.832176][T10690] (syz.5.943,10690,1):ocfs2_mknod:318 ERROR: status = -5 [ 1223.839382][T10690] (syz.5.943,10690,1):ocfs2_mknod:506 ERROR: status = -5 [ 1223.847001][T10690] (syz.5.943,10690,1):ocfs2_create:679 ERROR: status = -5 [ 1223.923921][T10693] (syz.5.943,10693,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1223.937468][T10693] (syz.5.943,10693,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1223.954514][T10693] (syz.5.943,10693,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1223.965232][T10693] (syz.5.943,10693,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1223.974271][T10693] Quota error (device loop5): find_next_id: Can't read quota tree block 4 [ 1223.983974][T10693] (syz.5.943,10693,0):ocfs2_get_next_id:921 ERROR: status = -5 [ 1224.041039][ T7495] usb 3-1: USB disconnect, device number 32 [ 1224.506155][ T9650] ocfs2: Unmounting device (7,5) on (node local) [ 1225.384596][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.484630][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.546450][ T6187] bond0 (unregistering): Released all slaves [ 1225.970122][T10507] hsr_slave_0: entered promiscuous mode [ 1225.993653][T10507] hsr_slave_1: entered promiscuous mode [ 1226.042165][T10507] debugfs: 'hsr0' already exists in 'hsr' [ 1226.048724][T10507] Cannot create hsr debugfs directory [ 1226.490211][T10551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.499972][T10551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.863020][T10715] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 1226.916284][T10551] bridge_slave_0: entered allmulticast mode [ 1226.927257][T10551] bridge_slave_0: entered promiscuous mode [ 1227.413317][T10551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.425160][T10551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.508124][T10551] bridge_slave_1: entered allmulticast mode [ 1227.537643][T10551] bridge_slave_1: entered promiscuous mode [ 1227.731954][ T7495] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1227.967395][ T7495] usb 1-1: Using ep0 maxpacket: 32 [ 1227.991979][ T7495] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1228.001082][ T7495] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1228.010407][ T7495] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1228.048597][ T7495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1228.058685][ T7495] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1228.068923][ T7495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1228.081027][ T7495] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1228.091913][ T7495] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1228.105514][ T7495] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1228.115140][ T7495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.124191][ T6187] hsr_slave_0: left promiscuous mode [ 1228.213487][ T6187] hsr_slave_1: left promiscuous mode [ 1228.222026][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.232967][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.253559][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.263629][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.315065][ T7495] usb 1-1: config 0 descriptor?? [ 1228.451838][ T6187] veth1_macvtap: left promiscuous mode [ 1228.458394][ T6187] veth0_macvtap: left promiscuous mode [ 1228.496143][ T6187] veth1_vlan: left promiscuous mode [ 1228.522013][ T6187] veth0_vlan: left promiscuous mode [ 1228.634964][ T7495] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1228.694138][ T7118] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1228.835658][ T5832] usb 1-1: USB disconnect, device number 40 [ 1228.859709][ T7495] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1228.862993][ T5832] usblp0: removed [ 1228.897116][ T7118] usb 6-1: Using ep0 maxpacket: 32 [ 1228.920524][ T7118] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1228.929601][ T7118] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1228.938472][ T7118] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.948987][ T7118] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1228.961680][ T7118] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1228.971029][ T7118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.991694][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 1229.074375][ T7118] usb 6-1: config 0 descriptor?? [ 1229.100625][ T7495] usb 3-1: Using ep0 maxpacket: 32 [ 1229.200068][ T7495] usb 3-1: config 0 has no interfaces? [ 1229.222776][ T7495] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1229.232550][ T7495] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1229.241291][ T7495] usb 3-1: Product: syz [ 1229.245653][ T7495] usb 3-1: Manufacturer: syz [ 1229.250656][ T7495] usb 3-1: SerialNumber: syz [ 1229.302012][ T7495] usb 3-1: config 0 descriptor?? [ 1229.917452][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 1230.037671][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 1230.755824][ T7495] usb 3-1: USB disconnect, device number 33 [ 1230.898053][T10551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.043830][T10551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.235904][T10551] team0: Port device team_slave_0 added [ 1231.266575][T10551] team0: Port device team_slave_1 added [ 1231.570986][ T5832] usb 6-1: USB disconnect, device number 11 [ 1231.584124][T10551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.591826][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.618617][T10551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.822675][T10551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.830342][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.863014][T10551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.694340][T10745] netlink: 'syz.5.960': attribute type 1 has an invalid length. [ 1233.556932][T10551] hsr_slave_0: entered promiscuous mode [ 1233.606746][T10551] hsr_slave_1: entered promiscuous mode [ 1233.698908][T10551] debugfs: 'hsr0' already exists in 'hsr' [ 1233.705392][T10551] Cannot create hsr debugfs directory [ 1234.186141][T10760] binder: 10759:10760 ioctl c0306201 2000000003c0 returned -14 [ 1235.139084][ T7495] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1235.467208][ T7118] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1235.509462][T10775] netlink: 20 bytes leftover after parsing attributes in process `syz.5.969'. [ 1235.621666][ T7495] usb 3-1: Using ep0 maxpacket: 32 [ 1235.654435][ T7118] usb 1-1: Using ep0 maxpacket: 32 [ 1235.663796][ T7495] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1235.672768][ T7495] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1235.681860][ T7495] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.692337][ T7495] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1235.713263][ T7118] usb 1-1: config 0 has no interfaces? [ 1235.749730][ T7118] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1235.759238][ T7118] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1235.768085][ T7118] usb 1-1: Product: syz [ 1235.772803][ T7118] usb 1-1: Manufacturer: syz [ 1235.778068][ T7118] usb 1-1: SerialNumber: syz [ 1235.983540][ T7495] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1235.993634][ T7495] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1236.007401][ T7495] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1236.017642][ T7495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.047795][ T7495] usb 3-1: config 0 descriptor?? [ 1236.054674][ T7118] usb 1-1: config 0 descriptor?? [ 1236.293963][ T7495] usb 1-1: USB disconnect, device number 41 [ 1236.644483][T10779] udevd[10779]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1236.751734][T10507] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1236.766607][T10073] udevd[10073]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1236.839044][T10507] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1236.967821][T10507] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1237.016920][T10507] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1238.251856][ T7118] usb 3-1: USB disconnect, device number 34 [ 1238.911363][T10551] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1238.995861][T10551] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1239.025428][T10793] netlink: 'syz.2.972': attribute type 1 has an invalid length. [ 1239.173849][T10797] loop5: detected capacity change from 0 to 256 [ 1239.197977][T10551] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1239.289239][T10797] vfat: Unknown parameter 'uni_xla' [ 1239.334150][T10551] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1239.728869][T10800] overlayfs: missing 'lowerdir' [ 1240.110717][T10507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.434277][T10805] binder: 10804:10805 ioctl c0306201 2000000003c0 returned -14 [ 1240.542104][T10507] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.681763][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.689473][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.911231][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.919151][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.048311][T10551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.325340][T10551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.454618][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.462460][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.607659][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.615517][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.021505][T10835] netlink: 'syz.5.983': attribute type 1 has an invalid length. [ 1245.046840][T10507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.635954][T10828] syz.2.982 (10828): drop_caches: 2 [ 1246.245230][T10851] loop0: detected capacity change from 0 to 256 [ 1246.262613][T10851] vfat: Unknown parameter 'uni_xla' [ 1246.366118][T10850] binder: 10845:10850 ioctl c0306201 2000000003c0 returned -14 [ 1246.579689][T10853] overlayfs: missing 'lowerdir' [ 1247.579170][T10551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.402143][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.990'. [ 1249.356147][T10877] loop0: detected capacity change from 0 to 256 [ 1249.556980][T10877] exfat: Deprecated parameter 'utf8' [ 1249.922554][T10877] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 1251.563948][T10507] veth0_vlan: entered promiscuous mode [ 1251.622269][T10183] udevd[10183]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1251.750394][T10507] veth1_vlan: entered promiscuous mode [ 1251.805373][T10076] udevd[10076]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1252.194150][T10890] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 1252.653434][T10507] veth0_macvtap: entered promiscuous mode [ 1252.756018][T10507] veth1_macvtap: entered promiscuous mode [ 1252.837097][T10894] binder: 10893:10894 ioctl c0306201 2000000003c0 returned -14 [ 1252.906529][T10889] syz.2.995 (10889): drop_caches: 2 [ 1253.136946][T10898] loop0: detected capacity change from 0 to 256 [ 1253.198640][T10898] vfat: Unknown parameter 'uni_xla' [ 1253.291181][T10507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.574573][T10507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.829042][T10903] overlayfs: missing 'lowerdir' [ 1254.067271][ T6187] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.124450][ T6187] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.297159][ T6187] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.383701][T10551] veth0_vlan: entered promiscuous mode [ 1254.422965][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.531317][T10551] veth1_vlan: entered promiscuous mode [ 1255.104706][T10551] veth0_macvtap: entered promiscuous mode [ 1255.236799][T10551] veth1_macvtap: entered promiscuous mode [ 1255.614274][T10551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.778809][T10551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.911008][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1255.936127][ T60] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.072949][ T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.158840][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1256.167236][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.251472][ T5992] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.265354][ T9] usb 1-1: config 0 has no interfaces? [ 1256.342425][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1256.352150][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1256.360868][ T9] usb 1-1: Product: syz [ 1256.365731][ T9] usb 1-1: Manufacturer: syz [ 1256.370552][ T9] usb 1-1: SerialNumber: syz [ 1256.420210][T10928] netlink: 'syz.5.1005': attribute type 1 has an invalid length. [ 1256.517325][ T9] usb 1-1: config 0 descriptor?? [ 1256.766117][T10931] binder: 10930:10931 ioctl c0306201 2000000003c0 returned -14 [ 1256.821196][ T7999] usb 1-1: USB disconnect, device number 42 [ 1258.356948][T10941] loop2: detected capacity change from 0 to 256 [ 1258.518904][T10941] vfat: Unknown parameter 'uni_xla' [ 1260.607979][T10956] overlayfs: missing 'lowerdir' [ 1262.237422][T10976] netlink: 'syz.5.1015': attribute type 1 has an invalid length. [ 1262.917328][T10982] binder: 10981:10982 ioctl c0306201 2000000003c0 returned -14 [ 1263.409897][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1263.662162][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1263.684720][ T10] usb 6-1: config 0 has no interfaces? [ 1263.719487][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1263.729437][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1263.738357][ T10] usb 6-1: Product: syz [ 1263.742909][ T10] usb 6-1: Manufacturer: syz [ 1263.747743][ T10] usb 6-1: SerialNumber: syz [ 1263.923203][ T10] usb 6-1: config 0 descriptor?? [ 1264.155454][ T10] usb 6-1: USB disconnect, device number 12 [ 1264.491016][T11000] loop2: detected capacity change from 0 to 256 [ 1264.522397][T11000] vfat: Unknown parameter 'uni_xla' [ 1269.550084][T11015] overlayfs: missing 'lowerdir' [ 1270.348995][ T7776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1270.365512][ T7776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1270.388170][ T7776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1270.433917][ T7776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1270.563030][ T7776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1272.867537][ T7776] Bluetooth: hci0: command tx timeout [ 1273.214005][T11032] netlink: 'syz.5.1025': attribute type 1 has an invalid length. [ 1273.662993][T11035] binder: 11033:11035 ioctl c0306201 2000000003c0 returned -14 [ 1273.895231][ T5793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1273.920344][ T5793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1273.930860][ T5793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1273.955708][ T5793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1273.990032][ T5793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1275.102715][ T5793] Bluetooth: hci0: command tx timeout [ 1275.117051][ T7896] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.125363][T11043] loop2: detected capacity change from 0 to 4096 [ 1275.430692][T11052] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1275.662792][ T7896] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.674830][ T29] audit: type=1800 audit(1770761325.914:28): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1027" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1275.956067][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1276.188172][ T7896] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.237082][ T5793] Bluetooth: hci6: command tx timeout [ 1276.260125][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1276.295313][ T10] usb 1-1: config 0 has no interfaces? [ 1276.342354][ T10] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1276.357491][ T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1276.368560][ T10] usb 1-1: Product: syz [ 1276.372958][ T10] usb 1-1: Manufacturer: syz [ 1276.379029][ T10] usb 1-1: SerialNumber: syz [ 1276.501196][ T10] usb 1-1: config 0 descriptor?? [ 1276.776783][ T10] usb 1-1: USB disconnect, device number 43 [ 1276.797809][ T7896] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.016204][T11064] loop5: detected capacity change from 0 to 16 [ 1277.032353][T11016] chnl_net:caif_netlink_parms(): no params data found [ 1277.107219][T11064] erofs (device loop5): mounted with root inode @ nid 36. [ 1277.308083][ T5793] Bluetooth: hci0: command tx timeout [ 1277.364296][T11066] loop2: detected capacity change from 0 to 1024 [ 1277.490867][T11064] ===================================================== [ 1277.498823][T11064] BUG: KMSAN: uninit-value in ovl_fileattr_get+0x5cd/0x650 [ 1277.506443][T11064] ovl_fileattr_get+0x5cd/0x650 [ 1277.511887][T11064] __se_sys_file_getattr+0x634/0xad0 [ 1277.518881][T11064] __x64_sys_file_getattr+0xe4/0x150 [ 1277.524404][T11064] x64_sys_call+0x17cd/0x3e70 [ 1277.529702][T11064] do_syscall_64+0xc9/0xf80 [ 1277.534590][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1277.541037][T11064] [ 1277.547269][T11064] Uninit was stored to memory at: [ 1277.552894][T11064] ovl_fileattr_get+0x5c6/0x650 [ 1277.561295][T11064] __se_sys_file_getattr+0x634/0xad0 [ 1277.566928][T11064] __x64_sys_file_getattr+0xe4/0x150 [ 1277.574165][T11064] x64_sys_call+0x17cd/0x3e70 [ 1277.579186][T11064] do_syscall_64+0xc9/0xf80 [ 1277.584363][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.591832][T11064] [ 1277.595855][T11064] Local variable fa.i created at: [ 1277.601007][T11064] __se_sys_file_getattr+0x89/0xad0 [ 1277.606903][T11064] __x64_sys_file_getattr+0xe4/0x150 [ 1277.612468][T11064] [ 1277.615148][T11064] CPU: 0 UID: 0 PID: 11064 Comm: syz.5.1033 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1277.625613][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1277.636895][T11064] ===================================================== [ 1277.644404][T11064] Disabling lock debugging due to kernel taint [ 1277.651169][T11064] Kernel panic - not syncing: kmsan.panic set ... [ 1277.657894][T11064] CPU: 0 UID: 0 PID: 11064 Comm: syz.5.1033 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 1277.669634][T11064] Tainted: [B]=BAD_PAGE [ 1277.674095][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1277.684683][T11064] Call Trace: [ 1277.688296][T11064] [ 1277.691443][T11064] __dump_stack+0x26/0x30 [ 1277.695992][T11064] dump_stack_lvl+0x50/0x1c0 [ 1277.700797][T11064] ? dump_stack+0x12/0x25 [ 1277.705521][T11064] dump_stack+0x1e/0x25 [ 1277.709966][T11064] vpanic+0x435/0xd40 [ 1277.714183][T11064] panic+0x15d/0x160 [ 1277.718355][T11064] kmsan_report+0x31a/0x320 [ 1277.723188][T11064] ? __msan_warning+0x1b/0x30 [ 1277.728266][T11064] ? ovl_fileattr_get+0x5cd/0x650 [ 1277.733590][T11064] ? __se_sys_file_getattr+0x634/0xad0 [ 1277.739367][T11064] ? __x64_sys_file_getattr+0xe4/0x150 [ 1277.745063][T11064] ? x64_sys_call+0x17cd/0x3e70 [ 1277.750223][T11064] ? do_syscall_64+0xc9/0xf80 [ 1277.755099][T11064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.761558][T11064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.767828][T11064] ? kmsan_get_metadata+0xf1/0x160 [ 1277.773277][T11064] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1277.779435][T11064] ? do_dentry_open+0x1a45/0x1fd0 [ 1277.784949][T11064] ? kmsan_get_metadata+0xf1/0x160 [ 1277.790317][T11064] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1277.796388][T11064] ? vfs_open+0x395/0x5f0 [ 1277.801233][T11064] ? kmsan_get_metadata+0xf1/0x160 [ 1277.806693][T11064] __msan_warning+0x1b/0x30 [ 1277.811426][T11064] ovl_fileattr_get+0x5cd/0x650 [ 1277.816515][T11064] ? __pfx_ovl_fileattr_get+0x10/0x10 [ 1277.822113][T11064] __se_sys_file_getattr+0x634/0xad0 [ 1277.827770][T11064] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1277.834453][T11064] __x64_sys_file_getattr+0xe4/0x150 [ 1277.840180][T11064] x64_sys_call+0x17cd/0x3e70 [ 1277.845097][T11064] do_syscall_64+0xc9/0xf80 [ 1277.849876][T11064] ? clear_bhb_loop+0x40/0x90 [ 1277.854764][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.860877][T11064] RIP: 0033:0x7f6673b9bf79 [ 1277.865436][T11064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.885591][T11064] RSP: 002b:00007f6674b19028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d4 [ 1277.894395][T11064] RAX: ffffffffffffffda RBX: 00007f6673e15fa0 RCX: 00007f6673b9bf79 [ 1277.902716][T11064] RDX: 0000200000001980 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1277.911114][T11064] RBP: 00007f6673c327e0 R08: 0000000000000100 R09: 0000000000000000 [ 1277.919317][T11064] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000 [ 1277.927600][T11064] R13: 00007f6673e16038 R14: 00007f6673e15fa0 R15: 00007ffce36b9158 [ 1277.935871][T11064] [ 1277.939690][T11064] Kernel Offset: disabled [ 1277.944080][T11064] Rebooting in 86400 seconds..