last executing test programs: 10m17.454307343s ago: executing program 3 (id=4): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {}, {0x3, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) 10m17.1604674s ago: executing program 3 (id=10): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0xc}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) 10m16.038248037s ago: executing program 3 (id=12): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba", 0xb3}, {&(0x7f00000002c0)="44900001000056ee66c372f3105eb186dd80", 0x12}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 10m15.928779995s ago: executing program 3 (id=13): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) recvfrom(r0, 0x0, 0x0, 0x121, 0x0, 0x0) 9m59.280357305s ago: executing program 32 (id=13): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) recvfrom(r0, 0x0, 0x0, 0x121, 0x0, 0x0) 6m55.289216164s ago: executing program 1 (id=484): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) r5 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r5, &(0x7f0000001040)={&(0x7f0000000000)={0x2, 0x4e20, @empty=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) 6m54.023764363s ago: executing program 1 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 6m52.694576217s ago: executing program 1 (id=487): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)='P', &(0x7f0000000740), 0x800000, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r1}, 0x38) 6m51.786673188s ago: executing program 1 (id=492): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 6m49.560987467s ago: executing program 1 (id=496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 6m48.343068541s ago: executing program 1 (id=498): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) dup(0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 6m32.676913571s ago: executing program 33 (id=498): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) dup(0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 2m38.349644512s ago: executing program 2 (id=1176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000e40)=@svm={0x8, 0x1, 0x1080, {0x40000}, {"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"}}) 2m37.820917155s ago: executing program 2 (id=1179): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) unshare(0x22020600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1c, [0x7ffe, 0xc95a, 0x1, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d39, 0xffffff01, 0x6, 0x9, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x4, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0xd14c, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0xf, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x10, 0x4, 0x4, 0x3, 0x400, 0x3, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f2d, 0x4, 0xffff7fff, 0x2, 0x7218, 0xa, 0x5, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0xfffffffa, 0x2, 0xffffffff, 0x9, 0x1, 0x8, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x7, 0x4, 0x6d01, 0x5, 0x3b, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x0, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x19, 0xbb31, 0x2, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xfffffffb, 0x1ff, 0x2, 0xf58, 0x5, 0x40000003, 0xee1, 0x1000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x150, 0x60a7, 0xe, 0x6, 0x6, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0x4, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x14, 0xfff, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x81, 0xffbf2441, 0xfff]}, 0x45c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) 2m37.730868953s ago: executing program 2 (id=1180): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x2}, @TCA_RATE={0x0, 0x5, {0x1, 0xff}}]}, 0xfee5}, 0x1, 0x0, 0x0, 0x40080}, 0x44080) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) read$FUSE(r6, &(0x7f0000000500)={0x2020}, 0x2020) 2m37.302649478s ago: executing program 2 (id=1181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea", 0x26}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7", 0x4e}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf82}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m36.086213977s ago: executing program 2 (id=1188): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) unshare(0x22020600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1c, [0x7ffe, 0xc95a, 0x1, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d39, 0xffffff01, 0x6, 0x9, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x4, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0xd14c, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0xf, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x10, 0x4, 0x4, 0x3, 0x400, 0x3, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f2d, 0x4, 0xffff7fff, 0x2, 0x7218, 0xa, 0x5, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0xfffffffa, 0x2, 0xffffffff, 0x9, 0x1, 0x8, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x7, 0x4, 0x6d01, 0x5, 0x3b, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x0, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x19, 0xbb31, 0x2, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xfffffffb, 0x1ff, 0x2, 0xf58, 0x5, 0x40000003, 0xee1, 0x1000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x150, 0x60a7, 0xe, 0x6, 0x6, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0x4, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x14, 0xfff, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x81, 0xffbf2441, 0xfff]}, 0x45c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) 2m35.400802719s ago: executing program 2 (id=1191): socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1', 0x1) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='3', 0x1) 2m20.17090024s ago: executing program 34 (id=1191): socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1', 0x1) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='3', 0x1) 2m14.550260528s ago: executing program 4 (id=1267): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000000)={0x2, 0x4e20, @empty=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) 2m14.12928451s ago: executing program 4 (id=1268): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="e803000044000701fefffffffcdbdf25037c000004004580d0030180cc036480c403cd80c003d680ae03188008008e00ac1414bb0400e28004008d8004006a807100a200a22cb97c213e7d083d1b6595f0a66c7eb2a9c02c411feff117719bd6f80f21dc31dc0003a5aae68167e2a948ebc212beea9771c0085ac3013ffb84982819df"], 0x3e8}}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @u32=0x4}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2m13.971476146s ago: executing program 4 (id=1269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 2m13.771016748s ago: executing program 4 (id=1271): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100a, 0x1}) 2m12.207975592s ago: executing program 4 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2', 0x5) 2m11.927856822s ago: executing program 4 (id=1275): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000000)={0x2, 0x4e20, @empty=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) 1m56.658227984s ago: executing program 35 (id=1275): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000000)={0x2, 0x4e20, @empty=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) 9.238617825s ago: executing program 5 (id=1716): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) 9.175384273s ago: executing program 8 (id=1718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 7.835187776s ago: executing program 6 (id=1720): gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='\n', 0x1) 6.802458937s ago: executing program 8 (id=1723): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$igmp(0x2, 0x3, 0x2) 6.712161823s ago: executing program 5 (id=1724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8, 0xc}}, './file0\x00'}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, 0x0, 0x0) 6.660720058s ago: executing program 6 (id=1725): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000240)="a3fc", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) 6.642447962s ago: executing program 0 (id=1726): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000001780)=[@decrefs], 0x0, 0x0, 0x0}) 6.543420146s ago: executing program 7 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) 5.995961791s ago: executing program 7 (id=1728): modify_ldt$read(0x0, &(0x7f0000000780)=""/73, 0x49) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000040)={0xcc, 0x2, 0x1, 0x3, 0xfc}, 0x8) modify_ldt$read(0x0, &(0x7f0000000100)=""/102, 0x66) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r2 = mq_open(&(0x7f0000000180)=',\xa0&^]-\x00', 0x43, 0x138, &(0x7f00000001c0)={0xfffffffffffffff9, 0x9, 0x9, 0x2}) mq_getsetattr(r2, &(0x7f0000000200)={0x0, 0xd38, 0x2, 0x8000}, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x7fff, &(0x7f0000001cc0)="8a933a95139d7746886511344db68e") r3 = fsopen(0x0, 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 5.994957167s ago: executing program 5 (id=1729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 5.961593927s ago: executing program 6 (id=1730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) 5.895353598s ago: executing program 0 (id=1731): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xa0101, 0x53) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 5.298931637s ago: executing program 5 (id=1732): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba", 0xb3}, {&(0x7f00000002c0)="44900001000056ee66c372f3105eb186dd80", 0x12}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.293006146s ago: executing program 6 (id=1733): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 5.230654923s ago: executing program 7 (id=1734): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 5.190174703s ago: executing program 0 (id=1735): gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='\n', 0x1) 4.998933224s ago: executing program 5 (id=1736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="66baf80c66baa10066ed48b89ab6a3fd000000000f23d80f21f835400000900f23f86dbafc0cecb972000040b804000000ba000000000f30b99a020000b800000000430f01c20f30c744240000400000c7442402dfc50000c7442406000000000f011c242642fec719c4c2590df80f38f044b75a0f07d9c9b9800000c0ae2d66660004b334", 0x87}], 0x1, 0x53, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x88) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x2, 0x300) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="2e0fead636f30f1ec6b88b000f00d8f30fc771469aee5c42000f0138f30f01a88b0566b8e5cf00000f23d80f21f86635800000c00f23f8660f3880ae8400ea00003d01", 0x43}], 0x1, 0x44, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0xc) 3.492877064s ago: executing program 6 (id=1737): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 1.862827871s ago: executing program 8 (id=1738): modify_ldt$read(0x0, &(0x7f0000000780)=""/73, 0x49) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000040)={0xcc, 0x2, 0x1, 0x3, 0xfc}, 0x8) modify_ldt$read(0x0, &(0x7f0000000100)=""/102, 0x66) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r2 = mq_open(&(0x7f0000000180)=',\xa0&^]-\x00', 0x43, 0x138, &(0x7f00000001c0)={0xfffffffffffffff9, 0x9, 0x9, 0x2}) mq_getsetattr(r2, &(0x7f0000000200)={0x0, 0xd38, 0x2, 0x8000}, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x7fff, &(0x7f0000001cc0)="8a933a95139d7746886511344db68e") r3 = fsopen(0x0, 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 1.839735969s ago: executing program 0 (id=1739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8, 0xc}}, './file0\x00'}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, 0x0, 0x0) 1.713033625s ago: executing program 6 (id=1740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.581362823s ago: executing program 7 (id=1741): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000001780)=[@decrefs], 0x0, 0x0, 0x0}) 1.382031455s ago: executing program 8 (id=1742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8, 0xc}}, './file0\x00'}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 1.134519261s ago: executing program 0 (id=1743): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) tkill(0x0, 0xb) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c804}, 0x10008010) 1.133175049s ago: executing program 5 (id=1744): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.058944624s ago: executing program 7 (id=1745): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xa0101, 0x53) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 639.876983ms ago: executing program 8 (id=1746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8, 0xc}}, './file0\x00'}) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) 230.277894ms ago: executing program 0 (id=1747): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 55.753451ms ago: executing program 8 (id=1748): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff0, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x46, 0x80, 0x1}, 0x9c) 0s ago: executing program 7 (id=1749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8, 0xc}}, './file0\x00'}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): de [ 401.914082][ T5594] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 401.936722][ T5594] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 403.543021][ T8300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.624556][ T8300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.269750][ T8300] team0: Port device team_slave_0 added [ 404.277268][ T8300] team0: Port device team_slave_1 added [ 404.294894][ T5864] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 404.454858][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 404.493618][ T5864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.556584][ T5864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 404.556613][ T5864] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 404.556636][ T5864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 404.556655][ T5864] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 404.610120][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.614870][ T5864] usb 3-1: Product: syz [ 404.614894][ T5864] usb 3-1: Manufacturer: syz [ 404.614906][ T5864] usb 3-1: SerialNumber: syz [ 404.692016][ T5864] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 405.157107][ T10] usb 3-1: USB disconnect, device number 5 [ 405.388279][ T8300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.388291][ T8300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.388304][ T8300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.391256][ T8300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.391265][ T8300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.391279][ T8300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.742239][ T8300] hsr_slave_0: entered promiscuous mode [ 405.743727][ T8300] hsr_slave_1: entered promiscuous mode [ 405.762565][ T8300] debugfs: 'hsr0' already exists in 'hsr' [ 405.762588][ T8300] Cannot create hsr debugfs directory [ 406.878913][ T8536] ima: Unable to open file: /e (-2) [ 407.516573][ T8532] ima: policy update failed [ 407.517255][ T37] audit: type=1802 audit(1786299613.249:9): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.704" res=0 errno=0 [ 408.586064][ T5594] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 409.009862][ T5594] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 411.215982][ T8100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 411.489770][ T8100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.571452][ T8100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.694934][ T5779] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 411.896420][ T5779] usb 5-1: Using ep0 maxpacket: 32 [ 411.901135][ T5779] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 411.902604][ T5779] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 411.902621][ T5779] usb 5-1: config 0 interface 0 has no altsetting 0 [ 411.902639][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.906683][ T8100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.007630][ T5594] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 412.221396][ T5779] usb 5-1: config 0 descriptor?? [ 413.009849][ T5779] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 413.009891][ T5779] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 413.009906][ T5779] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 413.009921][ T5779] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 413.009935][ T5779] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 413.070402][ T5594] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 413.126586][ T5779] corsair-psu 0003:1B1C:1C09.0008: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 413.190422][ C1] usb 5-1: input irq status -75 received [ 413.446609][ T5779] corsair-psu 0003:1B1C:1C09.0008: unable to initialize device (-110) [ 413.482906][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.501347][ T8100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 413.556070][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.605701][ T5779] corsair-psu 0003:1B1C:1C09.0008: probe with driver corsair-psu failed with error -110 [ 413.612180][ T5779] usb 5-1: USB disconnect, device number 8 [ 413.682879][ T8584] fido_id[8584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 413.761517][ T8100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.768026][ T8100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 413.798891][ T8100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.199824][ T8608] debugfs: out of free dentries, can not create file 'remote_tlb_flush_requests' [ 415.787660][ T8616] syz.4.724 (8616) used greatest stack depth: 18784 bytes left [ 416.494570][ T5594] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 417.495615][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.501825][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 417.510798][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 417.520227][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 417.563723][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 417.889890][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 418.069405][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 418.074019][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.075532][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 418.075557][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 418.075580][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 418.075601][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 418.082112][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.082134][ T10] usb 3-1: Product: syz [ 418.082147][ T10] usb 3-1: Manufacturer: syz [ 418.082161][ T10] usb 3-1: SerialNumber: syz [ 418.188553][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 419.536931][ T5706] usb 3-1: USB disconnect, device number 6 [ 419.705582][ T5594] Bluetooth: hci5: command tx timeout [ 420.636677][ T1610] bridge_slave_1: left allmulticast mode [ 420.636699][ T1610] bridge_slave_1: left promiscuous mode [ 420.636858][ T1610] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.938690][ T1610] bridge_slave_0: left allmulticast mode [ 420.938725][ T1610] bridge_slave_0: left promiscuous mode [ 420.941019][ T1610] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.074674][ T8679] openvswitch: netlink: Key 6 has unexpected len 97 expected 2 [ 421.784821][ T5594] Bluetooth: hci5: command tx timeout [ 421.974884][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 422.189059][ T9] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 422.217435][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.217501][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.949240][ T9] as10x_usb: device has been detected [ 422.950421][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 423.086364][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 423.332869][ T1610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.412383][ T1610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.440293][ T9] as10x_usb: error during firmware upload part1 [ 423.440915][ T9] Registered device Abilis Systems DVB-Titan [ 423.463509][ T9] usb 1-1: USB disconnect, device number 23 [ 423.472280][ T1610] bond0 (unregistering): Released all slaves [ 423.644518][ T8692] ima: Unable to open file: /e (-2) [ 423.871051][ T5594] Bluetooth: hci5: command tx timeout [ 424.255687][ T8688] ima: policy update failed [ 424.263543][ T37] audit: type=1802 audit(1786299629.989:10): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.739" res=0 errno=0 [ 424.513184][ T9] Unregistered device Abilis Systems DVB-Titan [ 424.520881][ T9] as10x_usb: device has been disconnected [ 424.866503][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 424.867909][ T8677] batman_adv: batadv0: Adding interface: dummy0 [ 424.867923][ T8677] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.867952][ T8677] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 425.009371][ T8682] bridge0: port 3(syz_tun) entered blocking state [ 425.009486][ T8682] bridge0: port 3(syz_tun) entered disabled state [ 425.009678][ T8682] syz_tun: entered allmulticast mode [ 425.021558][ T8682] syz_tun: entered promiscuous mode [ 425.041111][ T8682] bridge0: port 3(syz_tun) entered blocking state [ 425.041226][ T8682] bridge0: port 3(syz_tun) entered forwarding state [ 425.460142][ T1610] hsr_slave_0: left promiscuous mode [ 425.945548][ T5594] Bluetooth: hci5: command tx timeout [ 426.096890][ T1610] hsr_slave_1: left promiscuous mode [ 426.097839][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.215660][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.995564][ T1610] team0 (unregistering): Port device team_slave_1 removed [ 427.028704][ T1610] team0 (unregistering): Port device team_slave_0 removed [ 427.664074][ T5592] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 428.142667][ T8735] ima: Unable to open file: /e (-2) [ 428.750331][ T8728] ima: policy update failed [ 428.752292][ T37] audit: type=1802 audit(1786299634.479:11): pid=8728 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.748" res=0 errno=0 [ 428.886670][ T8740] syzkaller0: entered promiscuous mode [ 428.886696][ T8740] syzkaller0: entered allmulticast mode [ 429.098940][ T8748] netlink: 76 bytes leftover after parsing attributes in process `syz.0.752'. [ 432.469545][ T8780] ima: Unable to open file: /e (-2) [ 433.060018][ T8777] ima: policy update failed [ 433.066434][ T37] audit: type=1802 audit(1786299638.799:12): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.759" res=0 errno=0 [ 434.111292][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.764'. [ 436.747285][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.747407][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.747669][ T8633] bridge_slave_0: entered allmulticast mode [ 436.798545][ T8633] bridge_slave_0: entered promiscuous mode [ 436.816017][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.816150][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.816308][ T8633] bridge_slave_1: entered allmulticast mode [ 436.849723][ T8633] bridge_slave_1: entered promiscuous mode [ 436.914844][ T5590] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 437.064994][ T5590] usb 3-1: Using ep0 maxpacket: 16 [ 437.065807][ T5590] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 437.066605][ T5590] usb 3-1: config 0 has no interfaces? [ 437.074209][ T5590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.074232][ T5590] usb 3-1: Product: syz [ 437.074245][ T5590] usb 3-1: Manufacturer: syz [ 437.074259][ T5590] usb 3-1: SerialNumber: syz [ 437.395738][ T5590] usb 3-1: config 0 descriptor?? [ 437.759190][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.566081][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.813307][ T5864] usb 3-1: USB disconnect, device number 7 [ 439.135860][ T8858] ima: Unable to open file: /e (-2) [ 439.852773][ T8855] ima: policy update failed [ 439.868622][ T37] audit: type=1802 audit(1786299645.599:13): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.776" res=0 errno=0 [ 440.028669][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.028736][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.333437][ T5594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.370418][ T5594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.374381][ T5594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.404387][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.431225][ T5594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.484063][ T8879] capability: warning: `syz.2.780' uses 32-bit capabilities (legacy support in use) [ 441.700548][ T8633] team0: Port device team_slave_0 added [ 441.722020][ T8633] team0: Port device team_slave_1 added [ 442.405159][ T5864] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 442.405274][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.405286][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.405310][ T8633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.530693][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.530711][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.530737][ T8633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.714891][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 443.379389][ T8907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.785'. [ 443.525092][ T5594] Bluetooth: hci3: command tx timeout [ 443.810537][ T5864] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 443.922272][ T5864] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 443.922305][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 443.922336][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.994246][ T5864] usb 1-1: config 0 descriptor?? [ 444.849201][ T5864] corsair-psu 0003:1B1C:1C09.0009: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 445.164889][ T5864] corsair-psu 0003:1B1C:1C09.0009: unable to initialize device (-110) [ 445.452383][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.455323][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.469919][ T5864] corsair-psu 0003:1B1C:1C09.0009: probe with driver corsair-psu failed with error -110 [ 445.554897][ T5594] Bluetooth: hci3: command tx timeout [ 445.602326][ T8633] hsr_slave_0: entered promiscuous mode [ 445.613593][ T8633] hsr_slave_1: entered promiscuous mode [ 445.614583][ T8633] debugfs: 'hsr0' already exists in 'hsr' [ 445.614607][ T8633] Cannot create hsr debugfs directory [ 445.666882][ T5864] usb 1-1: USB disconnect, device number 24 [ 445.989078][ T8943] Bluetooth: ISO socket layer initialized [ 447.025199][ T37] audit: type=1800 audit(1786299652.699:14): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.794" name="c_srate" dev="configfs" ino=23170 res=0 errno=0 [ 447.065814][ T8959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.795'. [ 447.241385][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 447.624841][ T5594] Bluetooth: hci3: command tx timeout [ 449.704986][ T5594] Bluetooth: hci3: command tx timeout [ 450.194593][ T8999] ubi0: attaching mtd0 [ 450.572174][ T8999] ubi0: scanning is finished [ 450.572236][ T8999] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 450.714977][ T1610] bridge_slave_1: left allmulticast mode [ 450.715016][ T1610] bridge_slave_1: left promiscuous mode [ 450.715265][ T1610] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.901034][ T1610] bridge_slave_0: left allmulticast mode [ 450.901068][ T1610] bridge_slave_0: left promiscuous mode [ 450.901362][ T1610] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.157848][ T8999] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 452.338037][ T1610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.565680][ T1610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.658907][ T1610] bond0 (unregistering): Released all slaves [ 452.842841][ T9016] bridge0: port 3(syz_tun) entered blocking state [ 452.842977][ T9016] bridge0: port 3(syz_tun) entered disabled state [ 452.843193][ T9016] syz_tun: entered allmulticast mode [ 452.851338][ T9016] syz_tun: entered promiscuous mode [ 454.713215][ T1610] hsr_slave_0: left promiscuous mode [ 454.753597][ T1610] hsr_slave_1: left promiscuous mode [ 454.754632][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.791055][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.949393][ T37] audit: type=1800 audit(1786299660.679:15): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.822" name="c_srate" dev="configfs" ino=23487 res=0 errno=0 [ 456.411061][ T1610] team0 (unregistering): Port device team_slave_1 removed [ 456.536107][ T1610] team0 (unregistering): Port device team_slave_0 removed [ 457.315463][ T9078] binder: 9076:9078 ioctl c0306201 0 returned -14 [ 459.880414][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 460.364413][ T9126] binder: 9125:9126 ioctl c0306201 0 returned -14 [ 461.240934][ T8875] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.243016][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.243254][ T8875] bridge_slave_0: entered allmulticast mode [ 461.261591][ T8875] bridge_slave_0: entered promiscuous mode [ 461.311906][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.312195][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.312359][ T8875] bridge_slave_1: entered allmulticast mode [ 461.326532][ T8875] bridge_slave_1: entered promiscuous mode [ 461.455778][ T8875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.460424][ T8875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.046480][ T8875] team0: Port device team_slave_0 added [ 462.074752][ T8875] team0: Port device team_slave_1 added [ 462.959387][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.959404][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.959429][ T8875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.029805][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.029824][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.029851][ T8875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.725691][ T8875] hsr_slave_0: entered promiscuous mode [ 464.729864][ T8875] hsr_slave_1: entered promiscuous mode [ 464.731600][ T8875] debugfs: 'hsr0' already exists in 'hsr' [ 464.731625][ T8875] Cannot create hsr debugfs directory Hü[ 465.784373][ T5594] Bluetooth: hci1: setting up ROME/QCA6390 ü[ 466.317503][ T8633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 466.366269][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.392831][ T8633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 466.499381][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.647622][ T8633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 466.784117][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.872432][ T8633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 467.077669][ T8633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.184999][ T5592] Bluetooth: hci1: command 0xfc00 tx timeout Hü[ 468.219057][ T5594] Bluetooth: hci1: Reading QCA version information failed (-110) [ 468.219164][ T5594] Bluetooth: hci1: Retry BT power ON:0 ü[ 469.000553][ T8633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.454237][ T8633] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.725015][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.725133][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.848889][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.849064][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.058817][ T1610] bridge_slave_1: left allmulticast mode [ 470.058852][ T1610] bridge_slave_1: left promiscuous mode [ 470.059154][ T1610] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.513353][ T1610] bridge_slave_0: left allmulticast mode [ 470.513389][ T1610] bridge_slave_0: left promiscuous mode [ 470.513630][ T1610] bridge0: port 1(bridge_slave_0) entered disabled state Hü[ 470.585003][ T5592] Bluetooth: hci1: command 0xfc00 tx timeout [ 470.585072][ T5594] Bluetooth: hci1: Reading QCA version information failed (-110) [ 470.585093][ T5594] Bluetooth: hci1: Retry BT power ON:1 ü[ 472.651405][ T1610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.745349][ T1610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.826743][ T1610] bond0 (unregistering): Released all slaves [ 472.982092][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 Hü[ 473.865639][ T5592] Bluetooth: hci1: command 0xfc00 tx timeout [ 473.865712][ T5594] Bluetooth: hci1: Reading QCA version information failed (-110) [ 473.865731][ T5594] Bluetooth: hci1: Retry BT power ON:2 [ 474.015223][ T37] audit: type=1800 audit(1786299679.729:16): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.898" name="c_srate" dev="configfs" ino=25371 res=0 errno=0 [ 474.020067][ T1610] hsr_slave_0: left promiscuous mode [ 474.091140][ T1610] hsr_slave_1: left promiscuous mode [ 474.093151][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.157295][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_1 ü[ 475.505967][ T1610] team0 (unregistering): Port device team_slave_1 removed [ 475.585457][ T1610] team0 (unregistering): Port device team_slave_0 removed [ 476.292305][ T5592] Bluetooth: hci1: command 0xfc00 tx timeout [ 476.292388][ T5594] Bluetooth: hci1: Reading QCA version information failed (-110) [ 478.025066][ T9345] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 478.062922][ T9345] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 478.689893][ T5592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 478.737514][ T5592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 478.740622][ T5592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 478.772423][ T5592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 478.774975][ T5592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 479.351924][ T9365] block nbd0: not configured, cannot reconfigure [ 480.910465][ T5594] Bluetooth: hci6: command tx timeout [ 482.994904][ T5594] Bluetooth: hci6: command tx timeout [ 484.870900][ T8875] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 484.998015][ T8875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 485.128243][ T8875] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 485.266344][ T8875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 485.282053][ T8875] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 485.298307][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 485.345271][ T8875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.353536][ T8875] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 485.384920][ T5594] Bluetooth: hci6: command tx timeout [ 485.419443][ T8875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.455211][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 485.456148][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 485.457435][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.457462][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.457495][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.527199][ T9] usb 1-1: config 0 descriptor?? [ 485.965995][ T9] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 485.966029][ T9] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 486.154583][ T9] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 486.363544][ T9] ft260 0003:0403:6030.000A: failed to retrieve system status [ 486.363958][ T9] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -5 [ 487.487065][ T5594] Bluetooth: hci6: command tx timeout [ 487.878402][ T9494] jffs2: notice: (9494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 487.892791][ T9494] jffs2: error: (9494) jffs2_do_read_inode: requested to read a nonexistent ino 9 [ 488.455065][ T9] usb 1-1: USB disconnect, device number 25 [ 489.237821][ T9516] netlink: zone id is out of range [ 489.237837][ T9516] netlink: zone id is out of range [ 489.237845][ T9516] netlink: zone id is out of range [ 489.237852][ T9516] netlink: zone id is out of range [ 489.237859][ T9516] netlink: zone id is out of range [ 489.237867][ T9516] netlink: zone id is out of range [ 489.237874][ T9516] netlink: zone id is out of range [ 489.237881][ T9516] netlink: zone id is out of range [ 489.237889][ T9516] netlink: zone id is out of range [ 489.237896][ T9516] netlink: zone id is out of range [ 489.379758][ T9518] gretap1: entered promiscuous mode [ 489.837091][ T8875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.839729][ T9352] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.839917][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.840112][ T9352] bridge_slave_0: entered allmulticast mode [ 489.843989][ T9352] bridge_slave_0: entered promiscuous mode [ 489.886390][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 489.908502][ T9352] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.908702][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.908905][ T9352] bridge_slave_1: entered allmulticast mode [ 489.937591][ T9352] bridge_slave_1: entered promiscuous mode [ 490.074420][ T9352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.087422][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 490.088345][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 490.091321][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.091351][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.091401][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.148668][ T10] usb 5-1: config 0 descriptor?? [ 490.641993][ T10] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 490.642027][ T10] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 490.763004][ T10] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 490.880160][ T9352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.934802][ T5864] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 490.964166][ T10] ft260 0003:0403:6030.000B: failed to retrieve system status [ 490.964562][ T10] ft260 0003:0403:6030.000B: probe with driver ft260 failed with error -5 [ 490.975738][ T8875] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.100112][ T5864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 491.101857][ T5864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 491.101883][ T5864] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 491.101906][ T5864] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.104368][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.104391][ T5864] usb 3-1: Product: syz [ 491.104405][ T5864] usb 3-1: Manufacturer: syz [ 491.104418][ T5864] usb 3-1: SerialNumber: syz [ 491.144513][ T5864] hub 3-1:1.0: bad descriptor, ignoring hub [ 491.144552][ T5864] hub 3-1:1.0: probe with driver hub failed with error -5 [ 491.298102][ T9352] team0: Port device team_slave_0 added [ 491.367942][ T9352] team0: Port device team_slave_1 added [ 491.430244][ T5864] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 491.609998][ T1380] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.610203][ T1380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.872813][ T9352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.872828][ T9352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.872849][ T9352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.891392][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.891603][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.006286][ T9352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.006304][ T9352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.006330][ T9352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.322588][ T5864] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 492.685404][ T1610] bridge_slave_1: left allmulticast mode [ 492.685440][ T1610] bridge_slave_1: left promiscuous mode [ 492.685674][ T1610] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.892434][ T1610] bridge_slave_0: left allmulticast mode [ 492.892469][ T1610] bridge_slave_0: left promiscuous mode [ 492.892729][ T1610] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.982943][ T10] usb 5-1: USB disconnect, device number 9 [ 493.752491][ T5864] usb 3-1: USB disconnect, device number 8 [ 493.808764][ T5864] usblp0: removed [ 496.378870][ T1610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.777537][ T1610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.826036][ T1610] bond0 (unregistering): Released all slaves [ 496.912555][ T9352] hsr_slave_0: entered promiscuous mode [ 496.922142][ T9352] hsr_slave_1: entered promiscuous mode [ 496.932129][ T9352] debugfs: 'hsr0' already exists in 'hsr' [ 496.932156][ T9352] Cannot create hsr debugfs directory [ 497.010070][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 497.984878][ T1610] hsr_slave_0: left promiscuous mode [ 498.027219][ T1610] hsr_slave_1: left promiscuous mode [ 498.028995][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.067036][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.472202][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.472244][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.929925][ T1610] team0 (unregistering): Port device team_slave_1 removed [ 501.978598][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 502.011161][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 502.018702][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 502.019859][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 502.027738][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 502.150059][ T1610] team0 (unregistering): Port device team_slave_0 removed [ 504.278010][ T5594] Bluetooth: hci5: command tx timeout [ 506.345179][ T5594] Bluetooth: hci5: command tx timeout [ 508.424875][ T5594] Bluetooth: hci5: command tx timeout [ 509.170653][ T5245] 8021q: adding VLAN 0 to HW filter on device eth10 [ 510.505006][ T5594] Bluetooth: hci5: command tx timeout [ 510.903983][ T9703] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 510.959688][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 511.218529][ T5589] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 511.380472][ T5589] usb 1-1: Using ep0 maxpacket: 32 [ 511.395237][ T5589] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 511.399795][ T5589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.399826][ T5589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.399859][ T5589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.405905][ T5589] usb 1-1: config 0 descriptor?? [ 511.859465][ T5589] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 511.859498][ T5589] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 512.042822][ T5589] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 512.245581][ T5589] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 513.153174][ T5589] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 513.283812][ T5589] ft260 0003:0403:6030.000C: failed to retrieve status: -32 [ 513.608047][ T5589] ft260 0003:0403:6030.000C: failed to reset I2C controller: -71 [ 513.722176][ T5589] usb 1-1: USB disconnect, device number 26 [ 513.814416][ T9725] netlink: 'syz.4.998': attribute type 10 has an invalid length. [ 513.897116][ T9723] vlan2: entered allmulticast mode [ 513.897140][ T9723] bond0: entered allmulticast mode [ 513.897155][ T9723] bond_slave_0: entered allmulticast mode [ 513.897180][ T9723] bond_slave_1: entered allmulticast mode [ 513.999298][ T9723] bridge0: port 4(vlan2) entered blocking state [ 513.999553][ T9723] bridge0: port 4(vlan2) entered disabled state [ 514.191008][ T9723] vlan2: entered promiscuous mode [ 514.191030][ T9723] bond0: entered promiscuous mode [ 514.191043][ T9723] bond_slave_0: entered promiscuous mode [ 514.191295][ T9723] bond_slave_1: entered promiscuous mode [ 514.278205][ T9723] bridge0: port 4(vlan2) entered blocking state [ 514.278387][ T9723] bridge0: port 4(vlan2) entered forwarding state [ 514.321934][ T9724] syz_tun: left allmulticast mode [ 514.321968][ T9724] syz_tun: left promiscuous mode [ 514.322197][ T9724] bridge0: port 3(syz_tun) entered disabled state [ 514.524634][ T9724] batman_adv: batadv0: Interface deactivated: veth0 [ 514.533169][ T9724] batman_adv: batadv0: Removing interface: veth0 [ 514.558603][ T9724] bridge_slave_0: left allmulticast mode [ 514.558639][ T9724] bridge_slave_0: left promiscuous mode [ 514.558894][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.719726][ T9724] bridge_slave_1: left allmulticast mode [ 514.719760][ T9724] bridge_slave_1: left promiscuous mode [ 514.720097][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.876367][ T9724] bond0: (slave bond_slave_0): Releasing backup interface [ 514.915707][ T9724] bond_slave_0: left promiscuous mode [ 514.915921][ T9724] bond_slave_0: left allmulticast mode [ 514.969065][ T9724] bond0: (slave bond_slave_1): Releasing backup interface [ 514.988110][ T9724] bond_slave_1: left promiscuous mode [ 514.988308][ T9724] bond_slave_1: left allmulticast mode [ 515.047518][ T9724] team0: Port device team_slave_0 removed [ 515.111163][ T9724] team0: Port device team_slave_1 removed [ 515.112451][ T9724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.112475][ T9724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.158418][ T9724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.158447][ T9724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.209154][ T9724] net_ratelimit: 1 callbacks suppressed [ 515.209315][ T9724] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 515.287833][ T9725] bridge0: port 4(vlan2) entered disabled state [ 515.416774][ T9725] bridge0: port 4(vlan2) entered blocking state [ 515.416945][ T9725] bridge0: port 4(vlan2) entered forwarding state [ 515.752503][ T9725] bridge0: port 4(vlan2) entered disabled state [ 516.025219][ T9738] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 516.077289][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 518.075723][ T9738] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 518.880777][ T9764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1012'. [ 518.880834][ T9764] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 520.633820][ T5594] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 521.473386][ T9812] syz.0.1030 (9812) used greatest stack depth: 18528 bytes left [ 525.764164][ T9352] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 525.969664][ T9352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.111066][ T9352] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 526.248308][ T9352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.265177][ T9918] lo: entered allmulticast mode [ 526.265386][ T9918] tunl0: entered allmulticast mode [ 526.265555][ T9918] gre0: entered allmulticast mode [ 526.265696][ T9918] gretap0: entered allmulticast mode [ 526.265826][ T9918] erspan0: entered allmulticast mode [ 526.265956][ T9918] ip_vti0: entered allmulticast mode [ 526.266143][ T9918] ip6_vti0: entered allmulticast mode [ 526.266280][ T9918] sit0: entered allmulticast mode [ 526.266409][ T9918] ip6tnl0: entered allmulticast mode [ 526.266539][ T9918] ip6gre0: entered allmulticast mode [ 526.266910][ T9918] syz_tun: left promiscuous mode [ 526.267137][ T9918] bridge0: port 3(syz_tun) entered disabled state [ 526.757346][ T9918] ip6gretap0: entered allmulticast mode [ 526.757500][ T9918] bridge0: entered allmulticast mode [ 526.757652][ T9918] vcan0: entered allmulticast mode [ 526.757822][ T9918] bond0: entered allmulticast mode [ 526.757837][ T9918] bond_slave_0: entered allmulticast mode [ 526.757857][ T9918] bond_slave_1: entered allmulticast mode [ 526.758004][ T9918] team0: entered allmulticast mode [ 526.758016][ T9918] team_slave_0: entered allmulticast mode [ 526.758044][ T9918] team_slave_1: entered allmulticast mode [ 526.758206][ T9918] dummy0: entered allmulticast mode [ 526.758321][ T9918] batman_adv: batadv0: Removing interface: dummy0 [ 526.827837][ T9918] nlmon0: entered allmulticast mode [ 526.828065][ T9918] batadv0: entered allmulticast mode [ 526.828234][ T9918] vxcan0: entered allmulticast mode [ 526.828395][ T9918] vxcan1: entered allmulticast mode [ 526.830061][ T9918] veth0: entered allmulticast mode [ 526.830248][ T9918] veth1: entered allmulticast mode [ 526.830485][ T9918] wg0: entered allmulticast mode [ 526.830671][ T9918] wg1: entered allmulticast mode [ 526.830840][ T9918] wg2: entered allmulticast mode [ 526.831018][ T9918] veth0_to_bridge: entered allmulticast mode [ 526.831365][ T9918] bridge_slave_0: left promiscuous mode [ 526.833117][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.319361][ T9918] veth1_to_bridge: entered allmulticast mode [ 527.321121][ T9918] bridge_slave_1: left promiscuous mode [ 527.321368][ T9918] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.676148][ T9918] veth0_to_bond: entered allmulticast mode [ 527.715502][ T9918] bond0: (slave bond_slave_0): Releasing backup interface [ 527.756177][ T9918] veth1_to_bond: entered allmulticast mode [ 527.775446][ T9918] bond0: (slave bond_slave_1): Releasing backup interface [ 527.816439][ T9918] veth0_to_team: entered allmulticast mode [ 527.860514][ T9918] team0: Port device team_slave_0 removed [ 527.860782][ T9918] veth1_to_team: entered allmulticast mode [ 527.905616][ T9918] team0: Port device team_slave_1 removed [ 527.905857][ T9918] veth0_to_batadv: entered allmulticast mode [ 527.905974][ T9918] batadv_slave_0: entered allmulticast mode [ 527.906097][ T9918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.945450][ T9918] veth1_to_batadv: entered allmulticast mode [ 527.945618][ T9918] batadv_slave_1: entered allmulticast mode [ 527.945718][ T9918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.976367][ T9918] xfrm0: entered allmulticast mode [ 527.976554][ T9918] veth0_to_hsr: entered allmulticast mode [ 527.976710][ T9918] hsr_slave_0: entered allmulticast mode [ 527.976800][ T9918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 528.131515][ T9352] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 528.227150][ T9352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 528.272793][ T9352] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 528.296684][ T5720] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 528.337596][ T9352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.456206][ T5720] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 528.458429][ T5720] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 528.458454][ T5720] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 528.458477][ T5720] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.512176][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.512202][ T5720] usb 5-1: Product: syz [ 528.512215][ T5720] usb 5-1: Manufacturer: syz [ 528.512229][ T5720] usb 5-1: SerialNumber: syz [ 528.564185][ T5720] hub 5-1:1.0: bad descriptor, ignoring hub [ 528.564217][ T5720] hub 5-1:1.0: probe with driver hub failed with error -5 [ 528.907115][ T5720] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 529.174870][ T5720] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 529.347342][ T9622] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.347465][ T9622] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.347635][ T9622] bridge_slave_0: entered allmulticast mode [ 529.355379][ T9622] bridge_slave_0: entered promiscuous mode [ 529.432314][ T9622] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.432631][ T9622] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.432831][ T9622] bridge_slave_1: entered allmulticast mode [ 529.452237][ T9622] bridge_slave_1: entered promiscuous mode [ 529.597441][ T9942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1067'. [ 529.869540][ T9622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.878656][ T5706] usb 5-1: USB disconnect, device number 10 [ 529.905787][ T5706] usblp0: removed [ 529.917210][ T9622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.546635][ T9622] team0: Port device team_slave_0 added [ 530.806495][ T1610] bridge_slave_1: left allmulticast mode [ 530.806534][ T1610] bridge_slave_1: left promiscuous mode [ 530.806823][ T1610] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.986558][ T1610] bridge_slave_0: left allmulticast mode [ 530.986593][ T1610] bridge_slave_0: left promiscuous mode [ 530.986852][ T1610] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.805633][ T1610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.889716][ T1610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.896499][T10016] openvswitch: netlink: VXLAN extension 29 out of range max 1 [ 532.941718][ T1610] bond0 (unregistering): Released all slaves [ 533.000213][ T9622] team0: Port device team_slave_1 added [ 533.003852][ T9986] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 533.204820][ T5779] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 533.355730][ T5779] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 533.357468][ T5779] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 533.357495][ T5779] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 533.357518][ T5779] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.361627][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.361712][ T5779] usb 3-1: Product: syz [ 533.361728][ T5779] usb 3-1: Manufacturer: syz [ 533.361742][ T5779] usb 3-1: SerialNumber: syz [ 533.503799][ T5779] hub 3-1:1.0: bad descriptor, ignoring hub [ 533.503839][ T5779] hub 3-1:1.0: probe with driver hub failed with error -5 [ 533.666474][ T5779] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 533.757600][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.757617][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.757642][ T9622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.824179][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.824198][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.824224][ T9622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.079061][ T5779] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 534.174959][ T1610] hsr_slave_0: left promiscuous mode [ 534.219246][ T1610] hsr_slave_1: left promiscuous mode [ 534.220278][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.245746][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.361974][T10032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1099'. [ 534.362018][T10032] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 534.469923][T10015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1092'. [ 534.761105][ T5590] usb 3-1: USB disconnect, device number 9 [ 534.777908][ T5590] usblp0: removed [ 535.275048][T10043] openvswitch: netlink: VXLAN extension 29 out of range max 1 [ 535.817535][ T1610] team0 (unregistering): Port device team_slave_1 removed [ 535.889835][ T1610] team0 (unregistering): Port device team_slave_0 removed [ 536.294963][ T9622] hsr_slave_0: entered promiscuous mode [ 536.296328][ T9622] hsr_slave_1: entered promiscuous mode [ 536.299055][ T9622] debugfs: 'hsr0' already exists in 'hsr' [ 536.299079][ T9622] Cannot create hsr debugfs directory [ 536.490409][ T9352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.507635][T10056] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1107'. [ 537.104052][T10064] binder: BINDER_SET_CONTEXT_MGR already set [ 537.104066][T10064] binder: 10063:10064 ioctl 4018620d 200000004a80 returned -16 [ 537.580990][ T9352] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.668888][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.669020][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.732490][ T5779] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 537.918876][ T5779] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 537.926412][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.935969][ T5779] usb 3-1: config 0 descriptor?? [ 537.946113][ T5779] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 539.050203][T10097] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1116'. [ 539.159312][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 539.587840][ T5592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 539.592944][ T5779] usb 3-1: USB disconnect, device number 10 [ 539.607779][ T5864] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 539.647765][ T5592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 539.649702][ T5592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 539.660887][ T5592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 539.669508][ T5592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 539.762267][ T5864] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 539.763682][ T5864] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 539.763714][ T5864] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 539.763738][ T5864] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 539.766648][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.766672][ T5864] usb 1-1: Product: syz [ 539.766687][ T5864] usb 1-1: Manufacturer: syz [ 539.766700][ T5864] usb 1-1: SerialNumber: syz [ 539.839545][ T5864] hub 1-1:1.0: bad descriptor, ignoring hub [ 539.839582][ T5864] hub 1-1:1.0: probe with driver hub failed with error -5 [ 540.195939][ T5592] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 540.598452][ T5864] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 541.244831][ T5864] usb 1-1: reset high-speed USB device number 27 using dummy_hcd [ 541.633944][T10102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1117'. [ 541.796259][ T5592] Bluetooth: hci3: command tx timeout [ 542.017939][ T5864] usb 1-1: USB disconnect, device number 27 [ 542.039514][ T5864] usblp0: removed [ 542.387999][T10159] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1129'. [ 542.705773][T10166] jffs2: notice: (10166) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 543.840976][ T5720] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 543.874928][ T5592] Bluetooth: hci3: command tx timeout [ 544.022093][ T5720] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 544.050985][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.097533][ T5720] usb 1-1: config 0 descriptor?? [ 544.140789][ T5720] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 544.738246][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 545.735956][ T5720] usb 1-1: USB disconnect, device number 28 [ 545.954884][ T5592] Bluetooth: hci3: command tx timeout [ 547.603789][ T9622] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 547.688245][ T9622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.800730][ T9622] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 547.930525][ T9622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.989315][ T9622] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 548.024783][ T5592] Bluetooth: hci3: command tx timeout [ 548.130677][ T9622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 548.404834][ T36] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 548.562263][ T36] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 548.579980][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.597752][ T36] usb 1-1: config 0 descriptor?? [ 548.598026][ T9622] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 548.624909][ T36] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 548.652463][ T9622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 549.501768][T10291] netlink: 'syz.2.1158': attribute type 1 has an invalid length. [ 549.726880][T10103] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.727038][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.727288][T10103] bridge_slave_0: entered allmulticast mode [ 549.751328][T10103] bridge_slave_0: entered promiscuous mode [ 549.934486][T10103] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.934605][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.934959][T10103] bridge_slave_1: entered allmulticast mode [ 549.950149][T10103] bridge_slave_1: entered promiscuous mode [ 550.139268][T10103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.156196][T10103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.184853][ T36] usb 1-1: USB disconnect, device number 29 [ 550.282643][ T1610] bridge_slave_1: left allmulticast mode [ 550.282678][ T1610] bridge_slave_1: left promiscuous mode [ 550.282938][ T1610] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.456481][ T1610] bridge_slave_0: left allmulticast mode [ 550.456517][ T1610] bridge_slave_0: left promiscuous mode [ 550.456791][ T1610] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.735378][ T5583] svc: failed to register nfsdv3 RPC service (errno 111). [ 550.743957][ T5583] svc: failed to register nfsaclv3 RPC service (errno 111). [ 550.743976][ T5583] failed to unregister tcp with rpcbind [ 550.848600][ T5583] svc: failed to register nfsdv3 RPC service (errno 97). [ 550.848623][ T5583] svc: failed to register nfsaclv3 RPC service (errno 97). [ 550.848645][ T5583] failed to unregister tcp with rpcbind [ 551.699046][ T5592] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 552.770296][ T1610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.895595][ T1610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.978792][ T1610] bond0 (unregistering): Released all slaves [ 553.413962][T10345] netlink: 'syz.0.1177': attribute type 1 has an invalid length. [ 553.508918][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'. [ 553.672469][T10103] team0: Port device team_slave_0 added [ 554.164873][ T1610] hsr_slave_0: left promiscuous mode [ 554.204922][ T1610] hsr_slave_1: left promiscuous mode [ 554.208531][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.261639][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.298339][ T1610] team0 (unregistering): Port device team_slave_1 removed [ 555.416760][ T1610] team0 (unregistering): Port device team_slave_0 removed [ 556.252040][T10103] team0: Port device team_slave_1 added [ 556.561075][T10103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.561093][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.561119][T10103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.675770][T10103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.675786][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.675812][T10103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.076645][T10398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 557.153491][T10103] hsr_slave_0: entered promiscuous mode [ 557.161210][T10103] hsr_slave_1: entered promiscuous mode [ 557.163263][T10103] debugfs: 'hsr0' already exists in 'hsr' [ 557.163289][T10103] Cannot create hsr debugfs directory [ 558.040668][ T9622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.527587][ T9622] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.654985][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.685638][ T6077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.817944][ T1610] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.818059][ T1610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.863067][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 561.687185][T10446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.786158][ T5594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 561.829955][ T5594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 561.861910][ T5594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 561.872643][ T5594] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 561.888681][ T5594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 561.964942][T10458] netlink: zone id is out of range [ 561.964957][T10458] netlink: zone id is out of range [ 561.964965][T10458] netlink: zone id is out of range [ 561.964981][T10458] netlink: zone id is out of range [ 561.971600][T10458] openvswitch: netlink: VXLAN extension 29 out of range max 1 [ 562.909757][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.909822][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.248170][ T5719] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 563.566394][ T5719] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 563.567841][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.610636][ T5719] usb 1-1: config 0 descriptor?? [ 563.655551][ T5719] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 563.945298][ T5592] Bluetooth: hci6: command tx timeout [ 565.129303][ T5719] usb 1-1: USB disconnect, device number 30 [ 566.024808][ T5592] Bluetooth: hci6: command tx timeout [ 566.338259][T10532] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1217'. [ 566.339205][T10532] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1217'. [ 566.704802][ T5706] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 566.858713][ T5706] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 566.867180][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.867206][ T5706] usb 5-1: Product: syz [ 566.867226][ T5706] usb 5-1: Manufacturer: syz [ 566.867239][ T5706] usb 5-1: SerialNumber: syz [ 567.509741][ T5706] rtl8150 5-1:1.0: couldn't reset the device [ 567.510439][ T5706] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 567.560918][ T5706] usb 5-1: USB disconnect, device number 11 [ 567.879874][T10103] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 567.909821][T10103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.952776][T10103] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 568.010724][T10103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.104825][ T5592] Bluetooth: hci6: command tx timeout [ 568.462405][T10103] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 568.489348][T10103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 568.493826][T10103] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 568.556395][T10103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.198037][ T5592] Bluetooth: hci6: command tx timeout [ 570.285049][T10596] netlink: zone id is out of range [ 570.285063][T10596] netlink: zone id is out of range [ 570.285071][T10596] netlink: zone id is out of range [ 570.285079][T10596] netlink: zone id is out of range [ 570.285086][T10596] netlink: zone id is out of range [ 570.285094][T10596] netlink: zone id is out of range [ 570.285102][T10596] netlink: zone id is out of range [ 570.285126][T10596] netlink: zone id is out of range [ 570.286794][T10596] openvswitch: netlink: VXLAN extension 29 out of range max 1 [ 570.849744][T10453] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.849942][T10453] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.850179][T10453] bridge_slave_0: entered allmulticast mode [ 570.878548][T10453] bridge_slave_0: entered promiscuous mode [ 571.116995][ T1610] bridge_slave_1: left allmulticast mode [ 571.117031][ T1610] bridge_slave_1: left promiscuous mode [ 571.117298][ T1610] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.422081][ T1610] bridge_slave_0: left allmulticast mode [ 571.422115][ T1610] bridge_slave_0: left promiscuous mode [ 571.422349][ T1610] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.989681][ T5594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 572.027050][ T5594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 572.030194][ T5594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 572.031906][ T5594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 572.032649][ T5594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 572.598583][ T5592] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 574.264879][ T5592] Bluetooth: hci5: command tx timeout [ 574.339575][ T1610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.939085][ T1610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.411016][ T1610] bond0 (unregistering): Released all slaves [ 575.466890][T10453] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.467010][T10453] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.467236][T10453] bridge_slave_1: entered allmulticast mode [ 575.470920][T10453] bridge_slave_1: entered promiscuous mode [ 575.688384][T10453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.712037][T10453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.987651][T10658] Bluetooth: MGMT ver 1.23 [ 576.006369][T10453] team0: Port device team_slave_0 added [ 576.017764][T10453] team0: Port device team_slave_1 added [ 576.253711][T10663] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 576.421188][ T5592] Bluetooth: hci5: command tx timeout [ 576.472657][ T1610] hsr_slave_0: left promiscuous mode [ 576.490280][ T5592] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 576.515086][ T1610] hsr_slave_1: left promiscuous mode [ 576.516080][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.565776][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.361264][T10676] netlink: zone id is out of range [ 577.361283][T10676] netlink: zone id is out of range [ 577.361291][T10676] netlink: zone id is out of range [ 577.361299][T10676] netlink: zone id is out of range [ 577.361307][T10676] netlink: zone id is out of range [ 577.361316][T10676] netlink: zone id is out of range [ 577.361323][T10676] netlink: zone id is out of range [ 577.361332][T10676] netlink: zone id is out of range [ 577.361339][T10676] netlink: zone id is out of range [ 577.362606][T10676] openvswitch: netlink: VXLAN extension 29 out of range max 1 [ 577.875490][ T1610] team0 (unregistering): Port device team_slave_1 removed [ 577.904950][ T5706] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 577.937326][ T1610] team0 (unregistering): Port device team_slave_0 removed [ 578.014962][ T5589] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 578.057168][ T5706] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 578.063528][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.063553][ T5706] usb 5-1: Product: syz [ 578.063568][ T5706] usb 5-1: Manufacturer: syz [ 578.063583][ T5706] usb 5-1: SerialNumber: syz [ 578.176053][ T5589] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 578.201119][ T5589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.201147][ T5589] usb 1-1: Product: syz [ 578.201217][ T5589] usb 1-1: Manufacturer: syz [ 578.201233][ T5589] usb 1-1: SerialNumber: syz [ 578.424988][ T5592] Bluetooth: hci5: command tx timeout [ 578.807556][T10103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.810562][ T5706] rtl8150 5-1:1.0: couldn't reset the device [ 578.811475][ T5706] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 578.835498][ T5589] rtl8150 1-1:1.0: couldn't reset the device [ 578.836072][ T5589] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 578.860252][ T5706] usb 5-1: USB disconnect, device number 12 [ 578.942148][ T5589] usb 1-1: USB disconnect, device number 31 [ 579.034078][T10453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.034095][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.034121][T10453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.091590][T10453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.091608][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.091634][T10453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.490435][T10103] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.842906][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.842981][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.033196][T10453] hsr_slave_0: entered promiscuous mode [ 580.036530][T10453] hsr_slave_1: entered promiscuous mode [ 580.040368][T10453] debugfs: 'hsr0' already exists in 'hsr' [ 580.040393][T10453] Cannot create hsr debugfs directory [ 580.116938][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.117080][ T1416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.524906][ T5592] Bluetooth: hci5: command tx timeout [ 580.673520][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 582.841276][ T5245] 8021q: adding VLAN 0 to HW filter on device eth10 [ 582.842255][T10610] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.843085][T10610] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.843258][T10610] bridge_slave_0: entered allmulticast mode [ 582.871005][T10744] syz.0.1281 (10744) used greatest stack depth: 17824 bytes left [ 582.881713][T10610] bridge_slave_0: entered promiscuous mode [ 582.900554][T10610] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.900659][T10610] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.907168][T10610] bridge_slave_1: entered allmulticast mode [ 582.917911][T10610] bridge_slave_1: entered promiscuous mode [ 583.107851][T10610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.203556][T10610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.076255][T10610] team0: Port device team_slave_0 added [ 584.083178][T10610] team0: Port device team_slave_1 added [ 584.510780][T10610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.510796][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.510819][T10610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.524563][T10103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.533310][T10610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.533326][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.533351][T10610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.668909][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 584.773532][T10610] hsr_slave_0: entered promiscuous mode [ 584.781269][T10610] hsr_slave_1: entered promiscuous mode [ 584.790575][T10610] debugfs: 'hsr0' already exists in 'hsr' [ 584.790599][T10610] Cannot create hsr debugfs directory [ 584.825909][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 584.829259][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.829284][ T9] usb 1-1: Product: syz [ 584.829297][ T9] usb 1-1: Manufacturer: syz [ 584.829319][ T9] usb 1-1: SerialNumber: syz [ 585.462110][ T9] rtl8150 1-1:1.0: couldn't reset the device [ 585.462478][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 585.518673][ T9] usb 1-1: USB disconnect, device number 32 [ 586.518828][T10453] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 586.549053][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 586.784089][T10453] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 586.826387][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 586.844047][T10453] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 586.892418][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 587.194794][T10453] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 587.229400][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 587.727931][T10103] veth0_vlan: entered promiscuous mode [ 587.810219][T10103] veth1_vlan: entered promiscuous mode [ 588.279047][T10610] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 588.499276][T10610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.520099][T10610] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 588.615863][T10827] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 588.642508][T10610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.657476][T10610] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 588.763438][T10610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.772779][T10103] veth0_macvtap: entered promiscuous mode [ 588.793432][T10610] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 588.803265][T10830] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1294'. [ 588.804223][T10830] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1294'. [ 588.862316][T10610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 588.963900][T10103] veth1_macvtap: entered promiscuous mode [ 589.143399][T10103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.193595][T10103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.256644][T10453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.271876][ T5779] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 589.383145][T10453] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.415706][ T5779] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 589.422650][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.422675][ T5779] usb 1-1: Product: syz [ 589.422688][ T5779] usb 1-1: Manufacturer: syz [ 589.422702][ T5779] usb 1-1: SerialNumber: syz [ 589.688914][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.689014][ T1416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.006973][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.007088][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.368309][ T5779] rtl8150 1-1:1.0: couldn't reset the device [ 590.368644][ T5779] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 590.501698][ T5779] usb 1-1: USB disconnect, device number 33 [ 590.572752][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.572772][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.694576][T10610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.947735][ T6082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.947755][ T6082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.128752][T10610] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.242402][ T1422] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.242628][ T1422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.626314][T10853] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 591.720535][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.720699][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.739271][T10856] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1302'. [ 591.740145][T10856] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1302'. [ 592.455110][ T36] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 592.616212][ T36] usb 6-1: Using ep0 maxpacket: 32 [ 592.617142][ T36] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 592.623976][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.624003][ T36] usb 6-1: Product: syz [ 592.624018][ T36] usb 6-1: Manufacturer: syz [ 592.624033][ T36] usb 6-1: SerialNumber: syz [ 592.642880][ T36] usb 6-1: config 0 descriptor?? [ 592.653827][ T36] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 592.655052][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.802241][ T1416] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.803136][ T1416] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.803180][ T1416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.300509][ T1998] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 593.467890][ T1998] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 593.518966][T10610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.526668][ T1998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.526693][ T1998] usb 1-1: Product: syz [ 593.526708][ T1998] usb 1-1: Manufacturer: syz [ 593.526721][ T1998] usb 1-1: SerialNumber: syz [ 593.775788][T10453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.221892][ T36] gspca_ov534_9: reg_w failed -71 [ 594.281791][ T1998] rtl8150 1-1:1.0: couldn't reset the device [ 594.282225][ T1998] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 594.342217][ T1998] usb 1-1: USB disconnect, device number 34 [ 594.505076][ T36] gspca_ov534_9: Unknown sensor 0000 [ 594.505168][ T36] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 594.550965][ T36] usb 6-1: USB disconnect, device number 2 [ 594.784409][T10610] veth0_vlan: entered promiscuous mode [ 594.854023][T10610] veth1_vlan: entered promiscuous mode [ 595.150342][T10905] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 595.275809][ T5594] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 595.339468][ T5594] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 595.353273][T10610] veth0_macvtap: entered promiscuous mode [ 595.357201][ T5594] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 595.362123][ T5594] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 595.366881][ T5594] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 595.401891][T10909] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1310'. [ 595.414091][T10909] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1310'. [ 595.506272][T10610] veth1_macvtap: entered promiscuous mode [ 595.673712][T10453] veth0_vlan: entered promiscuous mode [ 595.798399][T10453] veth1_vlan: entered promiscuous mode [ 595.940767][T10610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.089252][T10610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.289406][T10453] veth0_macvtap: entered promiscuous mode [ 596.444519][T10453] veth1_macvtap: entered promiscuous mode [ 596.642455][T10929] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 596.929753][T10453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.040486][ T36] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 597.229173][T10453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.323821][ T36] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 597.328269][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.328294][ T36] usb 1-1: Product: syz [ 597.328309][ T36] usb 1-1: Manufacturer: syz [ 597.328323][ T36] usb 1-1: SerialNumber: syz [ 597.390066][ T1416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.390086][ T1416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.551166][ T5592] Bluetooth: hci7: command tx timeout [ 597.795869][ T5720] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 597.951463][ T5720] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 597.965665][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.965692][ T5720] usb 6-1: Product: syz [ 597.965706][ T5720] usb 6-1: Manufacturer: syz [ 597.965721][ T5720] usb 6-1: SerialNumber: syz [ 598.115764][ T36] rtl8150 1-1:1.0: couldn't reset the device [ 598.116118][ T36] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 598.249004][ T36] usb 1-1: USB disconnect, device number 35 [ 598.531519][ T5720] rtl8150 6-1:1.0: couldn't reset the device [ 598.531799][ T5720] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 598.557245][ T260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.557264][ T260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.599857][ T5720] usb 6-1: USB disconnect, device number 3 [ 599.346664][ T260] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.350779][ T1422] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.350961][ T1422] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.351105][ T1422] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.351487][ T1422] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.351881][ T1422] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.431896][ T1422] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.432312][ T1422] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.613468][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.613488][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.624745][ T5592] Bluetooth: hci7: command tx timeout [ 600.228675][T10957] vcan0: tx drop: invalid sa for name 0x0000000080000000 [ 600.231946][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.231965][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.394858][ T36] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 600.556453][ T36] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 600.562424][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.562451][ T36] usb 6-1: Product: syz [ 600.562464][ T36] usb 6-1: Manufacturer: syz [ 600.562478][ T36] usb 6-1: SerialNumber: syz [ 601.210804][T10966] overlayfs: overlapping lowerdir path [ 601.373459][T10968] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 601.373513][T10968] overlayfs: overlapping lowerdir path [ 601.400942][ T36] rtl8150 6-1:1.0: couldn't reset the device [ 601.401203][ T36] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 601.512866][ T36] usb 6-1: USB disconnect, device number 4 [ 601.714946][ T5592] Bluetooth: hci7: command tx timeout [ 602.003441][T10906] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.003818][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.004024][T10906] bridge_slave_0: entered allmulticast mode [ 602.006772][T10906] bridge_slave_0: entered promiscuous mode [ 602.030614][T10906] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.033005][T10906] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.033252][T10906] bridge_slave_1: entered allmulticast mode [ 602.070480][T10906] bridge_slave_1: entered promiscuous mode [ 602.375207][ T5590] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 602.444581][T10906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.476245][T10906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.545644][ T5590] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 602.547120][ T5590] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 602.547142][ T5590] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 602.547162][ T5590] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 602.552223][ T5590] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.552248][ T5590] usb 6-1: Product: syz [ 602.552263][ T5590] usb 6-1: Manufacturer: syz [ 602.552277][ T5590] usb 6-1: SerialNumber: syz [ 602.554144][T10990] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1336'. [ 602.603948][T10990] netlink: 300 bytes leftover after parsing attributes in process `syz.7.1336'. [ 602.604834][ T36] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 602.658067][ T5590] hub 6-1:1.0: bad descriptor, ignoring hub [ 602.667365][ T5590] hub 6-1:1.0: probe with driver hub failed with error -5 [ 602.755517][ T36] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 602.762082][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.762110][ T36] usb 1-1: Product: syz [ 602.762130][ T36] usb 1-1: Manufacturer: syz [ 602.762144][ T36] usb 1-1: SerialNumber: syz [ 603.198543][ T5590] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 603.495139][ T36] rtl8150 1-1:1.0: couldn't reset the device [ 603.495204][ T5590] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 603.495465][ T36] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 603.518378][ T36] usb 1-1: USB disconnect, device number 36 [ 603.543801][T10906] team0: Port device team_slave_0 added [ 603.559427][T10906] team0: Port device team_slave_1 added [ 603.687977][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 603.761804][T10906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.761830][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.761856][T10906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.764390][T10906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.764404][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.764431][T10906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.784808][ T5592] Bluetooth: hci7: command tx timeout [ 603.834171][T10906] hsr_slave_0: entered promiscuous mode [ 603.837175][T10906] hsr_slave_1: entered promiscuous mode [ 603.838046][T10906] debugfs: 'hsr0' already exists in 'hsr' [ 603.838070][T10906] Cannot create hsr debugfs directory [ 603.876565][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 603.893235][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.078384][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1341'. [ 604.141086][ T10] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 604.146613][ T5589] usb 6-1: USB disconnect, device number 5 [ 604.247643][ T5589] usblp0: removed [ 604.544889][ T36] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 604.818682][ T36] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 604.826356][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.826382][ T36] usb 1-1: Product: syz [ 604.826396][ T36] usb 1-1: Manufacturer: syz [ 604.826411][ T36] usb 1-1: SerialNumber: syz [ 605.476645][ T5589] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 605.499187][ T36] rtl8150 1-1:1.0: couldn't reset the device [ 605.499699][ T36] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 605.602659][ T36] usb 1-1: USB disconnect, device number 37 [ 605.656378][ T5589] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 605.674978][ T5589] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.675065][ T5589] usb 7-1: Product: syz [ 605.675082][ T5589] usb 7-1: Manufacturer: syz [ 605.675095][ T5589] usb 7-1: SerialNumber: syz [ 606.494103][ T5589] rtl8150 7-1:1.0: couldn't reset the device [ 606.494990][ T5589] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 606.503069][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'. [ 606.767155][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 606.770596][ T5589] usb 7-1: USB disconnect, device number 2 [ 606.927917][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 606.930546][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.239334][ T10] cdc_acm 6-1:1.0: ttyACM1: USB ACM device [ 608.009697][T10906] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 608.061701][T10906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 608.064366][T10906] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 608.111180][T10906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.114397][T10906] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 608.184866][ T5719] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 608.243198][T10906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.274824][ T5590] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 608.338032][T10906] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 608.369150][ T5719] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 608.374159][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.374183][ T5719] usb 1-1: Product: syz [ 608.374196][ T5719] usb 1-1: Manufacturer: syz [ 608.374209][ T5719] usb 1-1: SerialNumber: syz [ 608.413880][T10906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.446983][ T5590] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 608.530399][ T5590] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.530427][ T5590] usb 7-1: Product: syz [ 608.530656][ T5590] usb 7-1: Manufacturer: syz [ 608.530672][ T5590] usb 7-1: SerialNumber: syz [ 609.108809][ T5719] rtl8150 1-1:1.0: couldn't reset the device [ 609.109232][ T5719] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 609.190536][ T5719] usb 1-1: USB disconnect, device number 38 [ 609.220931][ T5590] rtl8150 7-1:1.0: couldn't reset the device [ 609.221270][ T5590] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 609.303602][T10906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.328408][ T5590] usb 7-1: USB disconnect, device number 3 [ 609.479238][ T10] usb 6-1: USB disconnect, device number 6 [ 609.890833][T10906] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.936283][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 610.147076][ T5590] usb 8-1: USB disconnect, device number 2 [ 610.169733][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.169853][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.221883][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.222052][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.254896][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 610.440204][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 610.466647][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.466676][ T10] usb 6-1: Product: syz [ 610.466691][ T10] usb 6-1: Manufacturer: syz [ 610.466705][ T10] usb 6-1: SerialNumber: syz [ 611.804560][ T10] rtl8150 6-1:1.0: couldn't reset the device [ 611.805101][ T10] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 611.921997][ T10] usb 6-1: USB disconnect, device number 7 [ 612.954548][T10906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.964868][ T36] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 613.118719][ T36] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 613.120206][ T36] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 613.120232][ T36] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 613.120255][ T36] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 613.124155][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.124178][ T36] usb 8-1: Product: syz [ 613.124193][ T36] usb 8-1: Manufacturer: syz [ 613.124207][ T36] usb 8-1: SerialNumber: syz [ 613.209481][ T36] hub 8-1:1.0: bad descriptor, ignoring hub [ 613.209521][ T36] hub 8-1:1.0: probe with driver hub failed with error -5 [ 613.539632][ T36] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 614.276982][ T5719] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 614.322452][T10906] veth0_vlan: entered promiscuous mode [ 614.445784][ T5719] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 614.447373][ T5719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.458435][T10906] veth1_vlan: entered promiscuous mode [ 614.484758][T10866] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 614.635673][T10866] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 614.638611][T10866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.714125][ T5719] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 614.900649][T10866] cdc_acm 6-1:1.0: ttyACM1: USB ACM device [ 615.177302][T10906] veth0_macvtap: entered promiscuous mode [ 615.307401][T10906] veth1_macvtap: entered promiscuous mode [ 615.440054][T11095] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 615.726121][T10906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.934290][T10906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.177241][ T1610] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.832103][ T55] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.861032][ T1422] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.185804][ T122] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.374973][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 617.561643][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 617.576988][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.577015][ T10] usb 1-1: Product: syz [ 617.577030][ T10] usb 1-1: Manufacturer: syz [ 617.577052][ T10] usb 1-1: SerialNumber: syz [ 618.538012][ T10] rtl8150 1-1:1.0: couldn't reset the device [ 618.538447][ T10] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 618.677790][ T10] usb 1-1: USB disconnect, device number 39 [ 619.177865][ T260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.177887][ T260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.238409][T10866] usb 7-1: USB disconnect, device number 4 [ 620.375956][ T1380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.375976][ T1380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.462740][T11132] usb 6-1: USB disconnect, device number 8 [ 620.891851][T11095] usb 8-1: device descriptor read/all, error -110 [ 621.152192][T11095] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 621.286283][T11095] usb 8-1: device descriptor read/64, error -32 [ 621.974831][T11095] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 621.995823][T11095] usb 8-1: device descriptor read/8, error -32 [ 622.334826][T11095] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 622.360249][T11095] usb 8-1: device descriptor read/8, error -32 [ 622.374834][ T5589] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 622.528413][ T5589] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 622.534384][ T5720] usb 8-1: USB disconnect, device number 3 [ 622.563955][ T5589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.563982][ T5589] usb 6-1: Product: syz [ 622.563996][ T5589] usb 6-1: Manufacturer: syz [ 622.564011][ T5589] usb 6-1: SerialNumber: syz [ 622.632551][ T5720] usblp0: removed [ 623.214489][T11173] binder: BINDER_SET_CONTEXT_MGR already set [ 623.214503][T11173] binder: 11170:11173 ioctl 4018620d 2000000002c0 returned -16 [ 623.541562][ T5589] rtl8150 6-1:1.0: couldn't reset the device [ 623.541834][ T5589] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 623.594936][ T5589] usb 6-1: USB disconnect, device number 9 [ 624.356334][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.356403][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.297677][T11220] netlink: zone id is out of range [ 625.297692][T11220] netlink: zone id is out of range [ 625.297701][T11220] netlink: zone id is out of range [ 625.297709][T11220] netlink: zone id is out of range [ 625.297718][T11220] netlink: zone id is out of range [ 625.297726][T11220] netlink: zone id is out of range [ 625.297734][T11220] netlink: zone id is out of range [ 625.297742][T11220] netlink: zone id is out of range [ 625.297750][T11220] netlink: zone id is out of range [ 625.297759][T11220] netlink: zone id is out of range [ 625.335245][T11221] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1415'. [ 625.374822][T10866] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 625.640198][T10866] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 625.686474][T10866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.686501][T10866] usb 6-1: Product: syz [ 625.686517][T10866] usb 6-1: Manufacturer: syz [ 625.686530][T10866] usb 6-1: SerialNumber: syz [ 626.387274][T10866] rtl8150 6-1:1.0: couldn't reset the device [ 626.387537][T10866] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 626.959973][T10866] usb 6-1: USB disconnect, device number 10 [ 627.324837][ T5719] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 627.325203][T11132] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 627.488681][ T5719] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 627.488938][T11132] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 627.491237][ T5719] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 627.491264][ T5719] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 627.491589][ T5719] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.562228][ T5719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.562255][ T5719] usb 9-1: Product: syz [ 627.562325][ T5719] usb 9-1: Manufacturer: syz [ 627.562340][ T5719] usb 9-1: SerialNumber: syz [ 627.611502][T11132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.611529][T11132] usb 7-1: Product: syz [ 627.611545][T11132] usb 7-1: Manufacturer: syz [ 627.611558][T11132] usb 7-1: SerialNumber: syz [ 627.662673][ T5719] hub 9-1:1.0: bad descriptor, ignoring hub [ 627.662711][ T5719] hub 9-1:1.0: probe with driver hub failed with error -5 [ 627.943701][ T5719] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 628.091448][T11250] binder: BINDER_SET_CONTEXT_MGR already set [ 628.091463][T11250] binder: 11248:11250 ioctl 4018620d 2000000002c0 returned -16 [ 628.227411][T11132] rtl8150 7-1:1.0: couldn't reset the device [ 628.227710][T11132] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 628.357553][T11132] usb 7-1: USB disconnect, device number 5 [ 628.468167][T11277] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.469618][T11277] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.554298][T11279] binder: 11278:11279 ioctl c0306201 200000000040 returned -22 [ 628.766115][T11249] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 628.943830][T11284] overlayfs: overlapping lowerdir path [ 629.043935][T11284] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 629.043998][T11284] overlayfs: overlapping lowerdir path [ 629.792593][ T10] usb 9-1: USB disconnect, device number 2 [ 630.615222][T11304] gadgetfs: bound to dummy_udc driver [ 630.768083][ T10] usblp0: removed [ 630.874789][ T36] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 630.875372][ C1] gadgetfs: connected [ 630.876041][ T36] gadgetfs: disconnected [ 631.071979][ C1] gadgetfs: connected [ 631.073137][ T36] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 631.094525][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.205709][ T5719] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 631.345897][ C1] gadgetfs: configuration #1 [ 631.363668][ T36] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input11 [ 631.382579][T11304] gadgetfs: suspended from state 3 [ 631.399987][T11304] gadgetfs: disconnected [ 631.776229][ T5719] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 631.780800][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.780825][ T5719] usb 6-1: Product: syz [ 631.780841][ T5719] usb 6-1: Manufacturer: syz [ 631.780855][ T5719] usb 6-1: SerialNumber: syz [ 632.304789][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 632.364278][ T36] usb 1-1: USB disconnect, device number 40 [ 632.455913][ T10] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 632.461780][T11319] net_ratelimit: 1 callbacks suppressed [ 632.461798][T11319] netlink: zone id is out of range [ 632.461807][T11319] netlink: zone id is out of range [ 632.461815][T11319] netlink: zone id is out of range [ 632.461823][T11319] netlink: zone id is out of range [ 632.461831][T11319] netlink: zone id is out of range [ 632.461839][T11319] netlink: zone id is out of range [ 632.461847][T11319] netlink: zone id is out of range [ 632.461855][T11319] netlink: zone id is out of range [ 632.461863][T11319] netlink: zone id is out of range [ 632.461870][T11319] netlink: zone id is out of range [ 632.541384][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.541411][ T10] usb 7-1: Product: syz [ 632.542740][ T10] usb 7-1: Manufacturer: syz [ 632.542758][ T10] usb 7-1: SerialNumber: syz [ 632.828530][T11297] binder: BINDER_SET_CONTEXT_MGR already set [ 632.828545][T11297] binder: 11296:11297 ioctl 4018620d 2000000002c0 returned -16 [ 633.254012][ T5719] rtl8150 6-1:1.0: couldn't reset the device [ 633.255435][ T5719] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 633.282444][T11316] binder: BINDER_SET_CONTEXT_MGR already set [ 633.282547][T11316] binder: 11315:11316 ioctl 4018620d 2000000002c0 returned -16 [ 633.356266][ T5719] usb 6-1: USB disconnect, device number 11 [ 633.573942][ T10] rtl8150 7-1:1.0: couldn't reset the device [ 633.574281][ T10] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 633.631283][ T10] usb 7-1: USB disconnect, device number 6 [ 635.873365][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1475'. [ 636.120871][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1477'. [ 636.585854][T10866] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 636.705474][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 636.834901][ T9] usb 1-1: device descriptor read/64, error -71 [ 636.844046][T10866] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 636.860027][T10866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.860052][T10866] usb 6-1: Product: syz [ 636.860066][T10866] usb 6-1: Manufacturer: syz [ 636.860080][T10866] usb 6-1: SerialNumber: syz [ 637.084720][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 637.087127][T11403] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.153430][T11403] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.228427][ T9] usb 1-1: device descriptor read/64, error -71 [ 637.337089][ T9] usb usb1-port1: attempt power cycle [ 637.492013][T10866] rtl8150 6-1:1.0: couldn't reset the device [ 637.492354][T10866] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 637.547916][T10866] usb 6-1: USB disconnect, device number 12 [ 637.676404][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 637.695814][ T9] usb 1-1: device descriptor read/8, error -71 [ 637.945493][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 637.950853][T11413] gadgetfs: bound to dummy_udc driver [ 637.975521][ T9] usb 1-1: device descriptor read/8, error -71 [ 638.030439][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1489'. [ 638.085214][ T9] usb usb1-port1: unable to enumerate USB device [ 638.194869][ T5719] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 638.195120][ C0] gadgetfs: connected [ 638.195312][ T5719] gadgetfs: disconnected [ 639.222798][ T5779] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 639.379444][ T5779] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 639.406989][ T5779] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.407016][ T5779] usb 9-1: Product: syz [ 639.407031][ T5779] usb 9-1: Manufacturer: syz [ 639.407045][ T5779] usb 9-1: SerialNumber: syz [ 639.537170][T11440] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 639.954893][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 640.008879][ T5779] rtl8150 9-1:1.0: couldn't reset the device [ 640.009359][ T5779] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 640.079905][ T5779] usb 9-1: USB disconnect, device number 3 [ 640.102890][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'. [ 640.125704][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 640.132730][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.132756][ T9] usb 6-1: Product: syz [ 640.132770][ T9] usb 6-1: Manufacturer: syz [ 640.132785][ T9] usb 6-1: SerialNumber: syz [ 640.654996][ T5589] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 640.747856][ T9] rtl8150 6-1:1.0: couldn't reset the device [ 640.748211][ T9] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 640.771443][ T9] usb 6-1: USB disconnect, device number 13 [ 641.195751][ T5589] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 641.197383][ T5589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.463005][ T5589] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 642.374929][ T5589] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 642.505022][ T5589] usb 9-1: device descriptor read/64, error -71 [ 642.744830][ T5589] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 642.874801][ T5589] usb 9-1: device descriptor read/64, error -71 [ 642.985481][ T5589] usb usb9-port1: attempt power cycle [ 643.364749][ T5589] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 643.396822][ T5589] usb 9-1: device descriptor read/8, error -71 [ 643.644851][ T5589] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 643.665796][ T5589] usb 9-1: device descriptor read/8, error -71 [ 643.775507][ T5589] usb usb9-port1: unable to enumerate USB device [ 644.519574][ T5779] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 644.675669][ T5779] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 644.711948][ T5779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.711976][ T5779] usb 6-1: Product: syz [ 644.712088][ T5779] usb 6-1: Manufacturer: syz [ 644.712104][ T5779] usb 6-1: SerialNumber: syz [ 645.177213][T11474] binder: BINDER_SET_CONTEXT_MGR already set [ 645.177229][T11474] binder: 11473:11474 ioctl 4018620d 2000000002c0 returned -16 [ 645.298796][ T5779] rtl8150 6-1:1.0: couldn't reset the device [ 645.299820][ T5779] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 645.396206][ T5779] usb 6-1: USB disconnect, device number 14 [ 646.998246][ T36] usb 1-1: USB disconnect, device number 45 [ 647.898673][T11496] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 651.830653][T11517] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 651.881264][T11519] overlayfs: missing 'lowerdir' [ 652.924809][ T5779] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 653.088574][ T5779] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 653.105840][ T5779] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.105866][ T5779] usb 9-1: Product: syz [ 653.105881][ T5779] usb 9-1: Manufacturer: syz [ 653.105895][ T5779] usb 9-1: SerialNumber: syz [ 653.581772][T11536] binder: BINDER_SET_CONTEXT_MGR already set [ 653.581788][T11536] binder: 11535:11536 ioctl 4018620d 2000000002c0 returned -16 [ 653.757968][ T5779] rtl8150 9-1:1.0: couldn't reset the device [ 653.758303][ T5779] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 654.071335][ T5779] usb 9-1: USB disconnect, device number 8 [ 654.374796][ T36] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 654.540930][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 654.545231][ T36] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 654.561459][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 654.577082][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.577107][ T36] usb 7-1: Product: syz [ 654.577122][ T36] usb 7-1: Manufacturer: syz [ 654.577136][ T36] usb 7-1: SerialNumber: syz [ 654.605140][ T36] usb 7-1: config 0 descriptor?? [ 654.639995][ T36] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 654.640048][ T36] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 655.238043][ T36] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 655.364815][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 655.525680][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 655.529972][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.529999][ T9] usb 6-1: Product: syz [ 655.530013][ T9] usb 6-1: Manufacturer: syz [ 655.530027][ T9] usb 6-1: SerialNumber: syz [ 655.665436][ T36] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 655.665471][ T36] em28xx 7-1:0.0: board has no eeprom [ 655.877586][ T5779] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 655.954824][ T36] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 655.954913][ T36] em28xx 7-1:0.0: dvb set to bulk mode. [ 655.957574][ T5864] em28xx 7-1:0.0: Binding DVB extension [ 655.997273][ T36] usb 7-1: USB disconnect, device number 7 [ 656.003000][ T36] em28xx 7-1:0.0: Disconnecting em28xx [ 656.025828][ T5779] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 656.029986][ T5779] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.030012][ T5779] usb 9-1: Product: syz [ 656.030026][ T5779] usb 9-1: Manufacturer: syz [ 656.030040][ T5779] usb 9-1: SerialNumber: syz [ 656.107784][T11569] binder: BINDER_SET_CONTEXT_MGR already set [ 656.107802][T11569] binder: 11567:11569 ioctl 4018620d 2000000002c0 returned -16 [ 656.329693][ T9] rtl8150 6-1:1.0: couldn't reset the device [ 656.330094][ T9] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 656.421613][ T9] usb 6-1: USB disconnect, device number 15 [ 656.453619][ T5864] em28xx 7-1:0.0: Registering input extension [ 656.471548][ T36] em28xx 7-1:0.0: Closing input extension [ 656.884811][ T5779] rtl8150 9-1:1.0: couldn't reset the device [ 656.885159][ T5779] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 656.950895][ T5779] usb 9-1: USB disconnect, device number 9 [ 657.134193][ T36] em28xx 7-1:0.0: Freeing device [ 658.069571][T11600] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1564'. [ 660.364872][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 660.526471][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 660.527802][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 660.527828][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 660.527851][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 660.530216][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.530237][ T9] usb 8-1: Product: syz [ 660.530252][ T9] usb 8-1: Manufacturer: syz [ 660.530266][ T9] usb 8-1: SerialNumber: syz [ 660.565495][ T9] hub 8-1:1.0: bad descriptor, ignoring hub [ 660.565532][ T9] hub 8-1:1.0: probe with driver hub failed with error -5 [ 660.614797][ T5719] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 660.901808][ T9] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 660.928665][ T5719] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 660.931638][ T5719] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 660.931692][ T5719] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 660.931715][ T5719] usb 1-1: config 0 interface 0 has no altsetting 0 [ 660.939910][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 660.939936][ T5719] usb 1-1: Product: syz [ 660.939950][ T5719] usb 1-1: Manufacturer: syz [ 660.939964][ T5719] usb 1-1: SerialNumber: syz [ 660.968342][ T5719] usb 1-1: config 0 descriptor?? [ 660.991144][ T5719] hub 1-1:0.0: bad descriptor, ignoring hub [ 660.991181][ T5719] hub 1-1:0.0: probe with driver hub failed with error -5 [ 661.062937][ T9] usb 8-1: USB disconnect, device number 5 [ 661.113924][ T9] usblp0: removed [ 661.123475][ T5719] usb 1-1: selecting invalid altsetting 0 [ 662.272375][ T5592] Bluetooth: hci3: command 0x0406 tx timeout [ 662.979266][ T5719] usb 1-1: USB disconnect, device number 46 [ 663.373221][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 663.373255][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 663.612111][ T36] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 663.687382][ T9958] udevd[9958]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.499043][T11679] 9p: Bad value for 'wfdno' [ 664.644994][ T5719] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 664.804517][ T5719] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 664.825690][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.825717][ T5719] usb 1-1: Product: syz [ 664.825731][ T5719] usb 1-1: Manufacturer: syz [ 664.825745][ T5719] usb 1-1: SerialNumber: syz [ 664.937631][T11680] fido_id[11680]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 666.190432][ T5719] rtl8150 1-1:1.0: couldn't reset the device [ 666.191019][ T5719] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 666.296694][ T5719] usb 1-1: USB disconnect, device number 47 [ 667.012287][T11711] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1607'. [ 667.104743][ T36] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 667.254736][ T36] usb 9-1: Using ep0 maxpacket: 16 [ 667.255671][ T36] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 667.261243][ T36] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 667.291507][ T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.291533][ T36] usb 9-1: Product: syz [ 667.291545][ T36] usb 9-1: Manufacturer: syz [ 667.291560][ T36] usb 9-1: SerialNumber: syz [ 667.345237][ T36] usb 9-1: config 0 descriptor?? [ 667.367416][ T36] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 667.367448][ T36] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 667.875689][T11723] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 668.122451][ T36] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 668.195697][T11728] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10453] was attempted by " [ 668.793523][ T36] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 668.793556][ T36] em28xx 9-1:0.0: board has no eeprom [ 668.945948][T11742] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1619'. [ 668.965373][ T36] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 668.965400][ T36] em28xx 9-1:0.0: dvb set to bulk mode. [ 668.981106][ T5779] em28xx 9-1:0.0: Binding DVB extension [ 669.028329][ T36] usb 9-1: USB disconnect, device number 10 [ 669.041003][ T36] em28xx 9-1:0.0: Disconnecting em28xx [ 669.156461][ T5719] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 669.316508][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 669.318308][ T5719] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 669.319905][ T5719] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 669.745151][ T5779] em28xx 9-1:0.0: Registering input extension [ 670.052739][ T36] em28xx 9-1:0.0: Closing input extension [ 670.291230][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.291258][ T5719] usb 1-1: Product: syz [ 670.291272][ T5719] usb 1-1: Manufacturer: syz [ 670.291287][ T5719] usb 1-1: SerialNumber: syz [ 670.569498][ T5719] usb 1-1: config 0 descriptor?? [ 670.570865][ T36] em28xx 9-1:0.0: Freeing device [ 670.740437][T11755] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10453] was attempted by " [ 673.092171][ T1998] usb 1-1: USB disconnect, device number 48 [ 673.484766][ T1998] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 673.636144][ T1998] usb 1-1: Using ep0 maxpacket: 16 [ 673.637102][ T1998] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 673.638687][ T1998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 673.646309][ T1998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.646331][ T1998] usb 1-1: Product: syz [ 673.646345][ T1998] usb 1-1: Manufacturer: syz [ 673.646359][ T1998] usb 1-1: SerialNumber: syz [ 673.653175][ T1998] usb 1-1: config 0 descriptor?? [ 673.661198][ T1998] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 673.661230][ T1998] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 674.567942][ T1998] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 675.051043][ T1998] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 675.051085][ T1998] em28xx 1-1:0.0: board has no eeprom [ 675.088943][T11784] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1634'. [ 675.234829][ T1998] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 675.234859][ T1998] em28xx 1-1:0.0: dvb set to bulk mode. [ 675.236096][ T5779] em28xx 1-1:0.0: Binding DVB extension [ 675.295455][ T1998] usb 1-1: USB disconnect, device number 49 [ 675.300506][ T1998] em28xx 1-1:0.0: Disconnecting em28xx [ 676.384952][ T5779] em28xx 1-1:0.0: Registering input extension [ 676.389132][ T1998] em28xx 1-1:0.0: Closing input extension [ 676.791266][ T1998] em28xx 1-1:0.0: Freeing device [ 679.552808][T11822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1647'. [ 685.081110][ T5719] hid-generic 0F98:0004:0009.000E: unknown main item tag 0x0 [ 685.081146][ T5719] hid-generic 0F98:0004:0009.000E: unknown main item tag 0x0 [ 685.081173][ T5719] hid-generic 0F98:0004:0009.000E: unknown main item tag 0x0 [ 685.081199][ T5719] hid-generic 0F98:0004:0009.000E: unknown main item tag 0x0 [ 685.081233][ T5719] hid-generic 0F98:0004:0009.000E: unknown main item tag 0x0 [ 685.081258][ T5719] hid-generic 0F98:0004:0009.000E: unknown main item tag 0x0 [ 685.081283][ T5719] hid-generic 0F98:0004:0009.000E: unknown main item tag 0x0 [ 685.081309][ T5719] hid-generic 0F98:0004:0009.000E: unknown main item tag 0x0 [ 685.081334][ T5719] hid-generic 0F98:0004:0009.000E: unknown main item tag 0x0 [ 685.081359][ T5719] hid-generic 0F98:0004:0009.000E: unknown main item tag 0x0 [ 685.220685][ T5719] hid-generic 0F98:0004:0009.000E: hidraw0: HID v0.04 Device [syz1] on syz0 [ 685.821643][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.821714][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.935378][T11866] fido_id[11866]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 688.722941][ T5594] Bluetooth: hci6: command 0x0406 tx timeout [ 692.177301][ T5719] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 692.346289][ T5719] usb 7-1: Using ep0 maxpacket: 16 [ 692.347101][ T5719] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 692.348572][ T5719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 692.365155][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.365180][ T5719] usb 7-1: Product: syz [ 692.365194][ T5719] usb 7-1: Manufacturer: syz [ 692.365208][ T5719] usb 7-1: SerialNumber: syz [ 692.421152][ T5719] usb 7-1: config 0 descriptor?? [ 692.447638][ T5719] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 692.447673][ T5719] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 693.051241][ T5719] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 693.335905][ T5719] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 693.335937][ T5719] em28xx 7-1:0.0: board has no eeprom [ 693.414814][ T5719] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 693.414846][ T5719] em28xx 7-1:0.0: dvb set to bulk mode. [ 693.416239][ T10] em28xx 7-1:0.0: Binding DVB extension [ 693.459170][ T5719] usb 7-1: USB disconnect, device number 8 [ 693.474069][ T5719] em28xx 7-1:0.0: Disconnecting em28xx [ 693.851787][ T10] em28xx 7-1:0.0: Registering input extension [ 693.875181][ T5719] em28xx 7-1:0.0: Closing input extension [ 693.999528][ T5719] em28xx 7-1:0.0: Freeing device [ 698.282862][ T5592] Bluetooth: hci5: command 0x0406 tx timeout [ 700.088302][T11986] binder: 11985:11986 ioctl 4018620d 0 returned -22 [ 701.919841][T12015] binder: 12014:12015 ioctl 4018620d 0 returned -22 [ 702.094469][T12020] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 702.101568][T12017] ima: Unable to open file: /e (-2) [ 702.102704][T12013] ima: policy update failed [ 702.104009][ T37] audit: type=1802 audit(1786299907.829:17): pid=12013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.8.1712" res=0 errno=0 [ 705.236692][ T5594] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 705.362639][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 705.392200][T12053] binder: 12052:12053 ioctl 4018620d 0 returned -22 [ 705.635731][ T9] usb 9-1: device descriptor read/64, error -71 [ 706.236265][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 706.403982][ T9] usb 9-1: device descriptor read/64, error -71 [ 706.675354][ T9] usb usb9-port1: attempt power cycle [ 707.411880][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 707.459197][ T9] usb 9-1: device descriptor read/8, error -71 [ 709.186023][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 709.478217][ T9] usb 9-1: device descriptor read/8, error -71 [ 709.595562][ T9] usb usb9-port1: unable to enumerate USB device [ 710.071890][T12092] binder: 12090:12092 ioctl 4018620d 0 returned -22 [ 710.615088][ T5594] Bluetooth: hci7: failed to read key size for handle 200 [ 711.212353][ T5594] Bluetooth: hci7: failed to read key size for handle 200 [ 713.305821][ T38] INFO: task syz.2.1191:10392 blocked for more than 143 seconds. [ 713.305880][ T38] Not tainted syzkaller #0 [ 713.305892][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.305950][ T38] task:syz.2.1191 state:D stack:28424 pid:10392 tgid:10386 ppid:5586 task_flags:0x400140 flags:0x00080002 [ 713.306076][ T38] Call Trace: [ 713.306184][ T38] [ 713.306324][ T38] __schedule+0x16dc/0x5500 [ 713.306563][ T38] ? irqentry_exit+0x218/0x8f0 [ 713.306690][ T38] ? irqentry_exit+0x218/0x8f0 [ 713.306750][ T38] ? trace_irq_disable+0x3b/0x140 [ 713.306878][ T38] ? __pfx___schedule+0x10/0x10 [ 713.306947][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 713.307019][ T38] rt_mutex_schedule+0x76/0xf0 [ 713.307098][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 713.307129][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 713.307202][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 713.307245][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 713.307316][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 713.307434][ T38] ? write_threads+0x3a0/0x5a0 [ 713.307602][ T38] ? write_threads+0x3a0/0x5a0 [ 713.307676][ T38] ? write_threads+0x3a0/0x5a0 [ 713.307737][ T38] mutex_lock_nested+0x168/0x1d0 [ 713.307783][ T38] write_threads+0x3a0/0x5a0 [ 713.307846][ T38] ? __might_fault+0xaf/0x130 [ 713.307960][ T38] ? __pfx_write_threads+0x10/0x10 [ 713.308077][ T38] ? _copy_from_user+0x94/0xb0 [ 713.314159][ T38] ? simple_transaction_get+0x130/0x170 [ 713.314296][ T38] nfsctl_transaction_write+0x112/0x160 [ 713.314326][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 713.314351][ T38] vfs_write+0x29f/0xbb0[ 713.314351][ T38] vfs_write+0x29f/0xbb0 [ 713.314442][ T38] ? __pfx_vfs_write+0x10/0x10 [ 713.314510][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 713.314546][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 713.315018][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 713.315091][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 713.315146][ T38] ? fdget_pos+0x252/0x320 [ 713.315282][ T38] ksys_write+0x156/0x270 [ 713.315358][ T38] ? __pfx_ksys_write+0x10/0x10 [ 713.315423][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.315512][ T38] do_syscall_64+0x174/0x580 [ 713.315611][ T38] ? trace_irq_disable+0x3b/0x140 [ 713.315642][ T38] ? clear_bhb_loop+0x70/0xc0 [ 713.315705][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.315760][ T38] RIP: 0033:0x7f830882e0d9 [ 713.315918][ T38] RSP: 002b:00007f8306a65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 713.315980][ T38] RAX: ffffffffffffffda RBX: 00007f8308ab6090 RCX: 00007f830882e0d9 [ 713.316043][ T38] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000006 [ 713.316057][ T38] RBP: 00007f83088c5024 R08: 0000000000000000 R09: 0000000000000000 [ 713.316103][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.316116][ T38] R13: 00007f8308ab6128 R14: 00007f8308ab6090 R15: 00007ffe3b2722b8 [ 713.316191][ T38] [ 713.316235][ T38] INFO: task syz.2.1191:10393 blocked for more than 143 seconds. [ 713.316300][ T38] Not tainted syzkaller #0 [ 713.316310][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.316321][ T38] task:syz.2.1191 state:D stack:28424 pid:10393 tgid:10386 ppid:5586 task_flags:0x400140 flags:0x00080002 [ 713.316494][ T38] Call Trace: [ 713.316502][ T38] [ 713.316560][ T38] __schedule+0x16dc/0x5500 [ 713.316699][ T38] ? __pfx___schedule+0x10/0x10 [ 713.316812][ T38] rt_mutex_schedule+0x76/0xf0 [ 713.316869][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 713.316951][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 713.316987][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 713.317042][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 713.317120][ T38] ? write_ports+0xb5/0xd20 [ 713.317161][ T38] ? write_ports+0xb5/0xd20 [ 713.317226][ T38] ? write_ports+0xb5/0xd20 [ 713.317282][ T38] mutex_lock_nested+0x168/0x1d0 [ 713.317348][ T38] write_ports+0xb5/0xd20 [ 713.317411][ T38] ? __pfx_write_ports+0x10/0x10 [ 713.317484][ T38] ? __might_fault+0xaf/0x130 [ 713.317599][ T38] ? _copy_from_user+0x94/0xb0 [ 713.317660][ T38] ? simple_transaction_get+0x130/0x170 [ 713.317718][ T38] nfsctl_transaction_write+0x112/0x160 [ 713.317781][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 713.317847][ T38] vfs_write+0x29f/0xbb0 [ 713.317912][ T38] ? __pfx_vfs_write+0x10/0x10 [ 713.317971][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 713.318037][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 713.318084][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 713.318147][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 713.318220][ T38] ? fdget_pos+0x252/0x320 [ 713.318290][ T38] ksys_write+0x156/0x270 [ 713.318350][ T38] ? __pfx_ksys_write+0x10/0x10 [ 713.318437][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.318501][ T38] do_syscall_64+0x174/0x580 [ 713.318539][ T38] ? trace_irq_disable+0x3b/0x140 [ 713.318608][ T38] ? clear_bhb_loop+0x70/0xc0 [ 713.318667][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.318719][ T38] RIP: 0033:0x7f830882e0d9 [ 713.318739][ T38] RSP: 002b:00007f8306a44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 713.318798][ T38] RAX: ffffffffffffffda RBX: 00007f8308ab6180 RCX: 00007f830882e0d9 [ 713.318856][ T38] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000007 [ 713.318903][ T38] RBP: 00007f83088c5024 R08: 0000000000000000 R09: 0000000000000000 [ 713.318916][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.318973][ T38] R13: 00007f8308ab6218 R14: 00007f8308ab6180 R15: 00007ffe3b2722b8 [ 713.319042][ T38] [ 713.319207][ T38] [ 713.319207][ T38] Showing all locks held in the system: [ 713.319361][ T38] 5 locks held by kworker/u8:0/12: [ 713.319424][ T38] 6 locks held by kworker/1:0H/32: [ 713.319468][ T38] 1 lock held by khungtaskd/38: [ 713.319480][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 713.319633][ T38] 2 locks held by kworker/u8:8/1184: [ 713.319687][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 713.320046][ T38] #1: ffffc9000572fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 713.320214][ T38] 2 locks held by kworker/u8:9/1380: [ 713.320228][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 713.320448][ T38] #1: ffffc90005b8fc40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 713.363607][ T38] 8 locks held by kworker/u8:11/1421: [ 713.363713][ T38] 2 locks held by syz-executor/5583: [ 713.363726][ T38] #0: ffff8880380220d0 (&type->s_umount_key#67){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 713.363961][ T38] #1: ffffffff8e4e8ad8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 713.364052][ T38] 6 locks held by kworker/u8:15/6077: [ 713.364121][ T38] 3 locks held by syz.2.1191/10387: [ 713.364134][ T38] #0: ffff88802f56a528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 713.364263][ T38] #1: ffff888033d08500 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 713.364443][ T38] #2: ffffffff8e4e8ad8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 713.364650][ T38] 3 locks held by syz.2.1191/10392: [ 713.364662][ T38] #0: ffff888025833128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 713.364707][ T38] #1: ffff888033d08500 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 713.364792][ T38] #2: ffffffff8e4e8ad8 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 713.364885][ T38] 3 locks held by syz.2.1191/10393: [ 713.364897][ T38] #0: ffff888034f5d928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 713.365015][ T38] #1: ffff888033d08500 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 713.365140][ T38] #2: ffffffff8e4e8ad8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 713.365278][ T38] 5 locks held by kworker/1:5/10866: [ 713.365323][ T38] 8 locks held by syz-executor/10906: [ 713.365339][ T38] 4 locks held by kworker/u8:2/11982: [ 713.365395][ T38] 1 lock held by syz.6.1740/12087: [ 713.365408][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 713.365623][ T38] 1 lock held by syz.5.1744/12100: [ 713.365683][ T38] #0: ffff888032145890 (&substream->lock){+.+.}-{3:3}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 713.494941][ T38] 1 lock held by syz.5.1744/12105: [ 713.494955][ T38] #0: ffff88803bba74c8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 713.495073][ T38] 6 locks held by kworker/u8:13/12111: [ 713.495085][ T38] 1 lock held by syz.0.1747/12112: [ 713.495097][ T38] 5 locks held by syz-executor/12113: [ 713.495111][ T38] [ 713.495116][ T38] ============================================= [ 713.495116][ T38] [ 713.495131][ T38] NMI backtrace for cpu 1 [ 713.495153][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 713.495179][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.495191][ T38] Call Trace: [ 713.495199][ T38] [ 713.495208][ T38] dump_stack_lvl+0xe8/0x150 [ 713.495247][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 713.495305][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 713.495362][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 713.495386][ T38] sys_info+0x135/0x170 [ 713.495404][ T38] watchdog+0xfd7/0x1030 [ 713.495469][ T38] ? watchdog+0x1c7/0x1030 [ 713.495499][ T38] kthread+0x388/0x470 [ 713.495554][ T38] ? __pfx_watchdog+0x10/0x10 [ 713.495578][ T38] ? __pfx_kthread+0x10/0x10 [ 713.495605][ T38] ret_from_fork+0x514/0xb70 [ 713.495693][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 713.495720][ T38] ? __switch_to+0xc89/0x1420 [ 713.495799][ T38] ? __pfx_kthread+0x10/0x10 [ 713.495826][ T38] ret_from_fork_asm+0x1a/0x30 [ 713.495868][ T38] [ 713.495880][ T38] Sending NMI from CPU 1 to CPUs 0: [ 713.495908][ C0] NMI backtrace for cpu 0 [ 713.495927][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 713.495948][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.495959][ C0] RIP: 0010:delay_tsc+0x60/0xc0 [ 713.495981][ C0] Code: c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 a2 0a 52 f6 65 8b 05 fb 76 5b 07 85 c0 74 1c f3 90 bf 01 00 00 00 eb 08 52 f6 e8 36 79 01 00 39 c5 75 0e 0f 01 f9 66 90 eb bd e8 [ 713.495996][ C0] RSP: 0018:ffffc90000167a28 EFLAGS: 00000286 [ 713.496012][ C0] RAX: 0000000080000000 RBX: 0000000000000899 RCX: 0000000000000000 [ 713.496025][ C0] RDX: 0000000000000172 RSI: ffffffff8bca5960 RDI: 0000000000000001 [ 713.496037][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 713.496048][ C0] R10: dffffc0000000000 R11: ffffffff8b4228e0 R12: 1ffffffff33c8cba [ 713.496062][ C0] R13: 00000000ffffffff R14: 00000172aa956184 R15: 000000000000009e [ 713.496075][ C0] FS: 0000000000000000(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000 [ 713.496091][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 713.496103][ C0] CR2: 00007ffd04770f2c CR3: 0000000036f46000 CR4: 00000000003526f0 [ 713.496120][ C0] Call Trace: [ 713.496127][ C0] [ 713.496136][ C0] wait_for_lsr+0x14d/0x300 [ 713.496225][ C0] serial8250_console_write+0x113a/0x1b40 [ 713.496253][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 713.496283][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 713.496305][ C0] ? console_flush_one_record+0xfa/0xb50 [ 713.496390][ C0] ? console_flush_one_record+0x472/0xb50 [ 713.496419][ C0] console_flush_one_record+0x642/0xb50 [ 713.496447][ C0] ? console_flush_one_record+0xfa/0xb50 [ 713.496475][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 713.496504][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 713.496532][ C0] legacy_kthread_func+0x1b6/0x250 [ 713.496559][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 713.496585][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 713.496611][ C0] ? __kthread_parkme+0x71/0x1f0 [ 713.496632][ C0] ? __kthread_parkme+0x196/0x1f0 [ 713.496656][ C0] kthread+0x388/0x470 [ 713.496680][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 713.496704][ C0] ? __pfx_kthread+0x10/0x10 [ 713.496729][ C0] ret_from_fork+0x514/0xb70 [ 713.496754][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 713.496778][ C0] ? __switch_to+0xc89/0x1420 [ 713.496801][ C0] ? __pfx_kthread+0x10/0x10 [ 713.496828][ C0] ret_from_fork_asm+0x1a/0x30 [ 713.496862][ C0] [ 713.504208][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 713.504228][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 713.504250][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.504263][ T38] Call Trace: [ 713.504271][ T38] [ 713.504280][ T38] vpanic+0x56c/0xa60 [ 713.504314][ T38] ? __pfx___schedule+0x10/0x10 [ 713.504340][ T38] ? __pfx_vpanic+0x10/0x10 [ 713.504376][ T38] panic+0xc5/0xd0 [ 713.504402][ T38] ? __pfx_panic+0x10/0x10 [ 713.504427][ T38] ? preempt_schedule_common+0x82/0xd0 [ 713.504452][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 713.504475][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 713.504503][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 713.504527][ T38] watchdog+0x1030/0x1030 [ 713.504559][ T38] ? watchdog+0x1c7/0x1030 [ 713.504589][ T38] kthread+0x388/0x470 [ 713.504614][ T38] ? __pfx_watchdog+0x10/0x10 [ 713.504638][ T38] ? __pfx_kthread+0x10/0x10 [ 713.504664][ T38] ret_from_fork+0x514/0xb70 [ 713.504691][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 713.504715][ T38] ? __switch_to+0xc89/0x1420 [ 713.504746][ T38] ? __pfx_kthread+0x10/0x10 [ 713.504769][ T38] ret_from_fork_asm+0x1a/0x30 [ 713.504812][ T38] [ 713.505174][ T38] Kernel Offset: disabled