last executing test programs: 11m51.086400939s ago: executing program 32 (id=18): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000540)=ANY=[], 0x9) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa42080049"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 11m48.279002745s ago: executing program 33 (id=25): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1) 11m29.849142992s ago: executing program 34 (id=32): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r7, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f00000003c0)={0xac020080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10m23.694710006s ago: executing program 35 (id=103): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8007e73, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) setpriority(0x2, 0x0, 0xffffffffffffffcd) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x8000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x62f, &(0x7f0000000700)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000580)={0x4, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e24, @empty}}}, 0x108) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@nodioread_nolock}, {@noload}]}, 0xff, 0x549, &(0x7f0000000940)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file2\x00', 0x0) 8m33.38060243s ago: executing program 1 (id=169): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0xfffffffd, 0x3, 0x9, 0x4, 0xd, 0xfffffbf9, 0x7ffe, 0x40000000, 0x17f, 0x9, 0x7, 0x1, 0x1, 0xffff3840, 0x40000004, 0xf, 0x0, 0x0, 0x3, 0x3fffffff, 0x89, 0xfffffffd, 0xfffffffd, 0x20001e56, 0x437, 0xfff, 0x1ff, 0x7ffffffc, 0x8, 0x7fffffd, 0xfffffff8]}) 8m31.818261503s ago: executing program 1 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0xc, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x9, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x10, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 8m30.19212565s ago: executing program 1 (id=171): keyctl$clear(0x3, 0xfffffffffffffffc) request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='\x00', 0x0) 8m29.027559511s ago: executing program 1 (id=172): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010200ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x0, 0x7}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 8m25.13315344s ago: executing program 1 (id=173): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') 8m21.802836426s ago: executing program 1 (id=174): pause() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x400, &(0x7f0000000440)={[{@test_dummy_encryption_v1}, {@nouid32}, {@bsdgroups}, {@grpquota}, {@jqfmt_vfsv1}, {@dax}, {@stripe={'stripe', 0x3d, 0x8}}]}, 0x2, 0x483, &(0x7f0000000c40)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000034000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="b91f020000b801000000ba000000000f30f30f6f39673e263e0f01c30f01cb64ded10f01ca0f07b9de0100000f320f79d40f20d835200000000f22d8", 0x3c}], 0x1, 0xa, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="71f9453452681881aa15d72469a9a3041634"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m3.56236913s ago: executing program 36 (id=174): pause() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x400, &(0x7f0000000440)={[{@test_dummy_encryption_v1}, {@nouid32}, {@bsdgroups}, {@grpquota}, {@jqfmt_vfsv1}, {@dax}, {@stripe={'stripe', 0x3d, 0x8}}]}, 0x2, 0x483, &(0x7f0000000c40)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000034000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="b91f020000b801000000ba000000000f30f30f6f39673e263e0f01c30f01cb64ded10f01ca0f07b9de0100000f320f79d40f20d835200000000f22d8", 0x3c}], 0x1, 0xa, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="71f9453452681881aa15d72469a9a3041634"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m40.27040986s ago: executing program 6 (id=417): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000400)=""/246, 0xf6}, {0x0}, {0x0}], 0x3}, 0x40012100) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) 5m38.753700387s ago: executing program 6 (id=424): syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000047977b105c0a3320ab11010203010902120001000000000904"], 0x0) 5m36.48016697s ago: executing program 6 (id=434): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000400)=""/246, 0xf6}, {0x0}, {0x0}], 0x3}, 0x40012100) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) 5m34.88392569s ago: executing program 6 (id=440): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 5m34.124855699s ago: executing program 6 (id=444): syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000047977b105c0a3320ab11010203010902120001000000000904"], 0x0) 5m33.326004255s ago: executing program 9 (id=448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r1 = socket(0x2c, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2124, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0x3, 0x4, 0x1, 0xffffffffffffffc0, 0x8}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff5bf3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x72, &(0x7f00000002c0)=""/114, 0x41000, 0x56, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x4, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000580)=[r0, r0, r0], &(0x7f00000005c0)=[{0x5, 0x1, 0xe, 0x8}, {0x3, 0x2, 0xe, 0x3}, {0x5, 0x1, 0x10, 0xe}, {0x4, 0x1, 0x10, 0x3}, {0x5, 0x2, 0x7}, {0x5, 0x3, 0x7, 0xa}], 0x10, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) 5m33.272474116s ago: executing program 6 (id=449): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x3, 0xff) dup(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES8=r2], 0x0) 5m31.202377699s ago: executing program 37 (id=449): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x3, 0xff) dup(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES8=r2], 0x0) 5m31.151550078s ago: executing program 9 (id=453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 5m30.412596628s ago: executing program 9 (id=456): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010200ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x0, 0x7}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5m26.656856341s ago: executing program 9 (id=465): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 5m24.536843513s ago: executing program 9 (id=473): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x2, 0x4}, {0x44, 0x1, 0x9, 0xc39}]}) 5m23.643537327s ago: executing program 9 (id=476): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x12, 0x4008, 0x0, 0x1, 0x0}) r3 = fsmount(r0, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x4980, 0x139) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x29) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000bc0)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x11d808, &(0x7f00000004c0)={[{@data_ordered}, {@auto_da_alloc}, {@nomblk_io_submit}, {@resgid}, {@minixdf}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x7fffffffffffffff}}], [{@fsname={'fsname', 0x3d, 'configfs\x00'}}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}]}, 0x2, 0xbd5, &(0x7f0000000c00)="$eJzs3M1rXNcVAPDznkZj2ZY7ciml7qYqpdhQOpZcZGpjqF1suumi0GwDFvLICI0/kBQcyVqMkn8gJFkHsgkkMQ5ZxGtvEpJtNom9TcgiYIJiJSGEROHNhyRbM7Icj/QU+feDq7n33dGcc+Yx8+6FmQngqTWY/UkjDkXE+SSi1DyeRkSx3uuLqDXut7Q4P/bt4vxYEsvL//8qiSQi7i/Oj7UeK2ne7m8O+iLi438n8dsX18ednp2bHK1WK1PN8dGZS1ePTs/O/X3i0ujFysXK5eHj/xw5NnJ86MRI12r9/rPTt77583++qP3w1o83vn7ljSROR39zbm0d3TIYgyvPyVqFiBjtdrCc9DTrWVtnUnjEP6VbnBQAAB2la9Zwv49S9MTq4q0U73+Sa3IAAABAVyz3RCwDAAAAu1xi/w8AAAC7XOtzAPcX58daLd9PJGyve2ciYqBR/1KzNWYKUavf9kVvROy7n8Tar7UmjX97YoMR8fndE+9kLbboe8gbqS1ExB/anf+kXv9A/Vvc6+tPI2KoC/EHHxr/muo/3YX4edcPwNPp9pnGhWz99S9dWf9Em+tfoc2165fI+/rXWv8trVv/rdbf02H9979Nxrj+5mvXOs1l9Z+6de5mq2XxT92Km09U1GO4txDxx0K7+pOV+pMO9Z/fZIzST9cqneba139u2+pffj3icLSvvyXZ+PeJjo5PVCtDjb9tYyx8NPJ2p/h515+d/30d6m/9/lOn83/1gUf6brlTjGfPnn133cG7q92N60+/LCbP1HvF5pHnR2dmpoYjisl/1x8/tnG9rfu0HiOr/8hfNn79t6s/e0+oNZ+HbC+w0LzNxi88FPNfN66/1ymf1v4vz/N/ocP5X1v/h4X15/+lTcb46wcvH+k0t3b/m7Usfmsv3MnYgU0GBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDXSCOiP5K0vNJP03I5Yn9E/C72pdUr0zN/G7/y3OUL2VzEQPSm4xPVylBElBrjJBsP1/ur42MPjf8REQcj4tXS3vq4PHaleiHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFixPyL6I0nLEZFGxFIpTcvlvLMCAAAAum4g7wQAAACALWf/DwAAALtfY/+f5J0GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9fBP92+k0RE7eTeessUm3O9uWYGbLU07wSA3PTknQCQm0LeCQC5eYw9ftFyAXan5BHzfR1n9nQ9FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2rsOHbt9JIqJ2cm+9ZYrNud5cMwO2Wpp3AkBuejaaLGxfHsD28xKHp5c9PpA8Yr5v9T61B2f2bFlOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOw8/fWWpOWIKDaPlcsRByJiIHqT8YlqZSgifhMRn5Z692Tj4ZxzBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoPumZ+cmR6vVylTWSaPZWTmis9pJGs9Ybafko/OEnWLsiDR2aCfvdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPIwPTs3OVqtVqam884EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNv07NzkaLVamdrCTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQn58DAAD//1ogDJw=") 5m7.265852624s ago: executing program 38 (id=476): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x12, 0x4008, 0x0, 0x1, 0x0}) r3 = fsmount(r0, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x4980, 0x139) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x29) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000bc0)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x11d808, &(0x7f00000004c0)={[{@data_ordered}, {@auto_da_alloc}, {@nomblk_io_submit}, {@resgid}, {@minixdf}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x7fffffffffffffff}}], [{@fsname={'fsname', 0x3d, 'configfs\x00'}}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}]}, 0x2, 0xbd5, &(0x7f0000000c00)="$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") 4m36.792970719s ago: executing program 5 (id=522): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) 4m34.73000731s ago: executing program 5 (id=523): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x1, 0x10, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x800}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x9}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x6}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x4}]}}}]}, 0x5c}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 4m31.985693307s ago: executing program 5 (id=527): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc568}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xd1, 0xb1f, 0x4, 0x8100}}, {0x14, 0x1, {0x7, 0xfb4, 0x8, 0x8100}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x200088c4) 4m30.561930531s ago: executing program 5 (id=529): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4m29.713516364s ago: executing program 7 (id=531): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) 4m25.368200041s ago: executing program 7 (id=533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 4m25.142447596s ago: executing program 5 (id=534): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010200ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x0, 0x7}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4m23.132272074s ago: executing program 7 (id=535): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 4m21.355088821s ago: executing program 7 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x200088c4) 4m19.616758782s ago: executing program 5 (id=539): socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x4, 0x0, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\xf56\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xae\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x40001004, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x4, 0x1, 0x800}) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) 4m19.324518303s ago: executing program 7 (id=540): r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0xa, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4m12.540897739s ago: executing program 7 (id=542): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) 4m2.94829073s ago: executing program 39 (id=539): socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x4, 0x0, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\xf56\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xae\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x40001004, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x4, 0x1, 0x800}) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) 3m55.712442682s ago: executing program 40 (id=542): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) 1m56.985667677s ago: executing program 4 (id=746): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000200)) pread64(0xffffffffffffffff, &(0x7f0000002140)=""/17, 0x11, 0x0) 1m55.91013376s ago: executing program 4 (id=750): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000400)=""/246, 0xf6}, {0x0}, {0x0}], 0x3}, 0x40012100) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) 1m50.75635879s ago: executing program 4 (id=755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x36a3, 0x0) msgget$private(0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1m49.220831256s ago: executing program 4 (id=761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)=@can_newroute={0x34, 0x18, 0x211, 0x70bd29, 0x4, {}, [@CGW_MOD_UID={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "69cb78c00d282e3f"}, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x20008040) 1m48.397979674s ago: executing program 4 (id=765): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000400)=""/246, 0xf6}, {0x0}, {0x0}], 0x3}, 0x40012100) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) 1m46.937864386s ago: executing program 4 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40012100, 0x0) 1m28.030330229s ago: executing program 41 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40012100, 0x0) 57.255708769s ago: executing program 2 (id=873): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 56.496638349s ago: executing program 2 (id=877): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100), 0x0, 0x8001, 0x80) close(r1) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r1, r0, 0x0, 0x101) 55.826885943s ago: executing program 2 (id=879): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200088c1) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 53.633248066s ago: executing program 2 (id=884): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x17) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x8) 52.086795803s ago: executing program 2 (id=887): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 51.49742004s ago: executing program 2 (id=890): r0 = syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5.7646816s ago: executing program 8 (id=939): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$can_j1939(0x1d, 0x2, 0x7) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r0) fanotify_init(0x8, 0x400) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.763997146s ago: executing program 3 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f00ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r6, 0x1}, 0x8) 3.945306987s ago: executing program 8 (id=942): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]}) 3.369036599s ago: executing program 0 (id=943): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000100)={0x980900, 0x7, @name="ea8dd03fa72836ba95935cd834c7b2bb431da1f2462e78a208e78fe608a462a8"}) 3.222259513s ago: executing program 8 (id=944): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x26000000}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000774000608000200000000000800030000000000"], 0x30}, 0x1, 0xffffffff00000003}, 0x0) 2.751006674s ago: executing program 0 (id=945): syz_clone3(&(0x7f00000004c0)={0xaa90b000, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/153, 0x99, 0x0, 0x0}, 0x58) 2.628579394s ago: executing program 8 (id=946): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6(0xa, 0x3, 0x3a) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/159, 0x9f}], 0x1) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2.462320868s ago: executing program 3 (id=947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x9b}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x44000) 2.151798326s ago: executing program 0 (id=948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x90}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x40b9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) 2.090658998s ago: executing program 3 (id=949): capset(&(0x7f00000020c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x3, 0x647, 0x0, 0x40000, 0x1000}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7000000) 1.513310938s ago: executing program 3 (id=950): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)}, 0x40012100) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) 1.458587125s ago: executing program 0 (id=951): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.362090201s ago: executing program 8 (id=952): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 816.409396ms ago: executing program 8 (id=953): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x36a3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xfefffffd}) msgget$private(0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 812.853207ms ago: executing program 3 (id=954): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000100)={0x980900, 0x7, @name="ea8dd03fa72836ba95935cd834c7b2bb431da1f2462e78a208e78fe608a462a8"}) 514.459821ms ago: executing program 0 (id=955): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x26000000}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000774000608000200000000000800030000000000"], 0x30}, 0x1, 0xffffffff00000003}, 0x0) 181.661105ms ago: executing program 3 (id=956): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x30}], 0x1, 0x10) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000004}) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000200)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000040)={0x18, r6}) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f00000001c0)={0x1, 0x4, 0x12, &(0x7f0000000080)=""/18}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, r8, 0x2000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000240)=@req={0x80000003, 0x2, 0x10000, 0x4075}, 0x10) setsockopt$packet_int(r9, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) 0s ago: executing program 0 (id=957): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) kernel console output (not intermixed with test programs): 00 [ 588.642964][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 588.702653][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 588.745655][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 588.787509][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 588.822459][ T5835] usb 10-1: 0:2 : does not exist [ 588.858800][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 588.904047][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 588.914633][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 588.940433][ T5832] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 588.949995][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.958396][ T5832] usb 7-1: Product: syz [ 588.962758][ T5832] usb 7-1: Manufacturer: syz [ 588.967764][ T5832] usb 7-1: SerialNumber: syz [ 589.027070][ T5832] usb 7-1: config 0 descriptor?? [ 589.051642][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 589.069019][ T5835] usb 10-1: USB disconnect, device number 3 [ 589.332789][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 589.354757][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 589.448716][ T5832] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 589.498138][ T24] pwc: Registered as video103. [ 589.503740][ T7027] udevd[7027]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.529173][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input14 [ 589.675257][ T24] usb 8-1: USB disconnect, device number 3 [ 590.263016][ T7924] loop8: detected capacity change from 0 to 2048 [ 590.380238][ T7924] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 590.519297][ T7924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 590.554407][ T5832] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 590.652308][ T5832] usb 7-1: USB disconnect, device number 2 [ 592.247762][ T7954] comedi comedi0: Minor 3 could not be opened [ 592.291408][ T7954] comedi comedi0: comedi_config --init_data is deprecated [ 592.641031][ T5832] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 592.885105][ T5832] usb 8-1: Using ep0 maxpacket: 32 [ 592.936893][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 592.948451][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 592.961317][ T5832] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.139589][ T5832] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 593.149182][ T5832] usb 8-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 593.157699][ T5832] usb 8-1: Product: syz [ 593.162070][ T5832] usb 8-1: Manufacturer: syz [ 593.167412][ T5832] usb 8-1: SerialNumber: syz [ 593.246818][ T5832] usb 8-1: config 0 descriptor?? [ 593.389141][ T5835] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 595.678559][ T5835] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.705181][ T5835] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 595.719254][ T5835] usb 7-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 595.729016][ T5835] usb 7-1: Product: syz [ 595.733452][ T5835] usb 7-1: Manufacturer: syz [ 597.155335][ T5835] usb 7-1: config 0 descriptor?? [ 599.346573][ T10] usb 8-1: USB disconnect, device number 4 [ 601.636730][ T5835] usb 7-1: can't set config #0, error -71 [ 601.736489][ T5835] usb 7-1: USB disconnect, device number 3 [ 602.449543][ T7995] netlink: 248 bytes leftover after parsing attributes in process `syz.7.381'. [ 602.459205][ T7995] netlink: 248 bytes leftover after parsing attributes in process `syz.7.381'. [ 603.216280][ T5835] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 603.416765][ T5835] usb 10-1: Using ep0 maxpacket: 32 [ 603.447915][ T5835] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 603.459708][ T5835] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 603.469648][ T5835] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.570872][ T5835] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 603.580623][ T5835] usb 10-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 603.589218][ T5835] usb 10-1: Product: syz [ 603.596843][ T5835] usb 10-1: Manufacturer: syz [ 603.602782][ T5835] usb 10-1: SerialNumber: syz [ 603.738536][ T5835] usb 10-1: config 0 descriptor?? [ 603.834656][ T8019] loop6: detected capacity change from 0 to 2048 [ 603.943389][ T8019] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 604.051453][ T8019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.827017][ T5835] usb 10-1: USB disconnect, device number 4 [ 617.874968][ T8076] loop5: detected capacity change from 0 to 2048 [ 618.035445][ T8076] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 618.145723][ T8076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 619.079734][ T5835] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 619.316505][ T5835] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 619.329209][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.337852][ T5835] usb 8-1: Product: syz [ 619.342206][ T5835] usb 8-1: Manufacturer: syz [ 619.347082][ T5835] usb 8-1: SerialNumber: syz [ 619.530788][ T5835] usb 8-1: config 0 descriptor?? [ 619.831494][ T5835] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 620.988035][ T5835] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 621.080851][ T5835] usb 8-1: USB disconnect, device number 5 [ 622.389149][ T8125] loop7: detected capacity change from 0 to 2048 [ 622.515145][ T8125] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 622.634676][ T8125] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.162674][ T5835] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 623.404092][ T5835] usb 7-1: Using ep0 maxpacket: 16 [ 623.498351][ T5835] usb 7-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=11.ab [ 623.507973][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.519370][ T5835] usb 7-1: Product: syz [ 623.523698][ T5835] usb 7-1: Manufacturer: syz [ 623.529974][ T5835] usb 7-1: SerialNumber: syz [ 623.570877][ T8144] Zero length message leads to an empty skb [ 623.679005][ T5835] usb 7-1: config 0 descriptor?? [ 623.751901][ T5835] usb 7-1: Direct firmware load for BCM2033-MD.hex failed with error -2 [ 623.760563][ T5835] usb 7-1: Falling back to sysfs fallback for: BCM2033-MD.hex [ 623.900258][ T6509] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 624.186516][ T6509] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.197156][ T6509] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.322522][ T6509] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 624.332009][ T6509] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.342179][ T6509] usb 8-1: Product: syz [ 624.346892][ T6509] usb 8-1: Manufacturer: syz [ 624.351803][ T6509] usb 8-1: SerialNumber: syz [ 624.541804][ T24] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 624.696720][ T6509] usb 8-1: 0:2 : does not exist [ 624.798780][ T6509] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 624.836240][ T24] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 624.845881][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.854417][ T24] usb 10-1: Product: syz [ 624.858821][ T24] usb 10-1: Manufacturer: syz [ 624.863814][ T24] usb 10-1: SerialNumber: syz [ 624.991722][ T24] usb 10-1: config 0 descriptor?? [ 624.998517][ T6509] usb 8-1: USB disconnect, device number 6 [ 625.322875][ T24] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 625.334891][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.341469][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.561235][ T7939] udevd[7939]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.275832][ T8173] loop5: detected capacity change from 0 to 2048 [ 626.439534][ T24] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 626.446603][ T8173] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 626.495473][ T8173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 626.506532][ T24] usb 10-1: USB disconnect, device number 5 [ 627.695327][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 627.889583][ T24] usb 6-1: device descriptor read/64, error -71 [ 628.043905][ T1129] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.198530][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 628.323147][ T1129] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.411522][ T24] usb 6-1: device descriptor read/64, error -71 [ 628.506517][ T1129] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.532105][ T24] usb usb6-port1: attempt power cycle [ 628.678055][ T1129] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.930873][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 628.996575][ T24] usb 6-1: device descriptor read/8, error -71 [ 629.259861][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 629.314236][ T24] usb 6-1: device descriptor read/8, error -71 [ 629.332540][ T1129] bridge_slave_1: left allmulticast mode [ 629.338448][ T1129] bridge_slave_1: left promiscuous mode [ 629.345859][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.402655][ T1129] bridge_slave_0: left allmulticast mode [ 629.409088][ T1129] bridge_slave_0: left promiscuous mode [ 629.415560][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.439822][ T24] usb usb6-port1: unable to enumerate USB device [ 630.337347][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.465437][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.513177][ T1129] bond0 (unregistering): Released all slaves [ 630.554511][ T8217] loop8: detected capacity change from 0 to 2048 [ 630.687984][ T8217] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 630.777919][ T8217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 631.383843][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 631.407297][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 631.417513][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 631.438081][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 631.455500][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 631.512891][ T5840] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 631.845105][ T5840] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 631.854724][ T5840] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.863101][ T5840] usb 10-1: Product: syz [ 631.867751][ T5840] usb 10-1: Manufacturer: syz [ 631.872637][ T5840] usb 10-1: SerialNumber: syz [ 632.232110][ T5840] usb 10-1: config 0 descriptor?? [ 632.259987][ T1129] hsr_slave_0: left promiscuous mode [ 632.277742][ T1129] hsr_slave_1: left promiscuous mode [ 632.526790][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 632.595076][ T5840] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 632.839983][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 632.957688][ T24] usb 8-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=11.ab [ 632.967403][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.975725][ T24] usb 8-1: Product: syz [ 632.980368][ T24] usb 8-1: Manufacturer: syz [ 632.985228][ T24] usb 8-1: SerialNumber: syz [ 633.277916][ T24] usb 8-1: config 0 descriptor?? [ 633.288406][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.295993][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.307855][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.315428][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.757579][ T5780] Bluetooth: hci3: command tx timeout [ 633.855348][ T5840] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 633.927144][ T5840] usb 10-1: USB disconnect, device number 6 [ 634.387972][ T1129] veth1_macvtap: left promiscuous mode [ 634.393810][ T1129] veth0_macvtap: left promiscuous mode [ 634.429582][ T1129] veth1_vlan: left promiscuous mode [ 634.481150][ T1129] veth0_vlan: left promiscuous mode [ 635.137275][ T6749] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 635.342285][ T6749] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.353483][ T6749] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.485453][ T6749] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 635.495316][ T6749] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 635.503781][ T6749] usb 10-1: SerialNumber: syz [ 635.591189][ T8252] loop5: detected capacity change from 0 to 2048 [ 635.703726][ T8252] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 635.840937][ T6749] usb 10-1: 0:2 : does not exist [ 635.870191][ T8252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 635.977103][ T5780] Bluetooth: hci3: command tx timeout [ 636.146579][ T6749] usb 10-1: USB disconnect, device number 7 [ 636.291638][ T8258] loop2: detected capacity change from 0 to 4095 [ 636.520737][ T7939] udevd[7939]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 637.212794][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 637.392521][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 637.521963][ T5840] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 637.740265][ T5840] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 637.754102][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.766415][ T5840] usb 9-1: Product: syz [ 637.770749][ T5840] usb 9-1: Manufacturer: syz [ 637.775649][ T5840] usb 9-1: SerialNumber: syz [ 637.898787][ T5840] usb 9-1: config 0 descriptor?? [ 638.215742][ T5780] Bluetooth: hci3: command tx timeout [ 638.743120][ T8276] loop9: detected capacity change from 0 to 4096 [ 638.893596][ T5840] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 639.134639][ T5840] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 640.018774][ T8294] loop5: detected capacity change from 0 to 2048 [ 640.103314][ T8294] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 640.197746][ T8294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 640.417286][ T5780] Bluetooth: hci3: command tx timeout [ 640.628868][ T8300] usb 9-1: USB disconnect, device number 7 [ 641.194111][ T8311] loop2: detected capacity change from 0 to 4095 [ 641.299605][ T8224] chnl_net:caif_netlink_parms(): no params data found [ 650.513458][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 652.762752][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.770358][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.833855][ T8224] bridge_slave_0: entered allmulticast mode [ 652.875786][ T8224] bridge_slave_0: entered promiscuous mode [ 652.990284][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.998049][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.057136][ T8224] bridge_slave_1: entered allmulticast mode [ 653.114993][ T8224] bridge_slave_1: entered promiscuous mode [ 653.166253][ T8341] loop5: detected capacity change from 0 to 2048 [ 653.335935][ T8341] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 653.431754][ T8341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.509262][ T8224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.679243][ T8224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.251302][ T8224] team0: Port device team_slave_0 added [ 654.304228][ T8224] team0: Port device team_slave_1 added [ 654.676862][ T8353] loop2: detected capacity change from 0 to 4095 [ 654.702534][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.709820][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.739324][ T8224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.113831][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.121469][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.147926][ T8224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.540038][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 655.556767][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 655.579196][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 655.601996][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 655.614790][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 655.716683][ T8224] hsr_slave_0: entered promiscuous mode [ 655.730934][ T8224] hsr_slave_1: entered promiscuous mode [ 656.768824][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dfa8200: rx timeout, send abort [ 657.312039][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dfa8200: abort rx timeout. Force session deactivation [ 658.841394][ T50] Bluetooth: hci5: command tx timeout [ 661.905586][ T5780] Bluetooth: hci5: command tx timeout [ 664.118295][ T50] Bluetooth: hci5: command tx timeout [ 665.538708][ T8386] loop8: detected capacity change from 0 to 2048 [ 665.715450][ T8386] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 665.858595][ T8386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 666.077904][ T5780] Bluetooth: hci4: command 0x0406 tx timeout [ 666.331321][ T5780] Bluetooth: hci5: command tx timeout [ 666.478421][ T8360] chnl_net:caif_netlink_parms(): no params data found [ 666.797471][ T5780] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 666.972515][ T10] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 667.215591][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 667.225202][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.233630][ T10] usb 9-1: Product: syz [ 667.238018][ T10] usb 9-1: Manufacturer: syz [ 667.242916][ T10] usb 9-1: SerialNumber: syz [ 667.286836][ T8224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 667.326530][ T10] usb 9-1: config 0 descriptor?? [ 667.391063][ T8224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 667.466010][ T8224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 667.595874][ T8224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 667.647926][ T10] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 667.905224][ T10] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 668.435996][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.444061][ T8360] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.495455][ T8360] bridge_slave_0: entered allmulticast mode [ 668.530072][ T8360] bridge_slave_0: entered promiscuous mode [ 668.647540][ T8360] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.655216][ T8360] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.679544][ T8360] bridge_slave_1: entered allmulticast mode [ 668.700269][ T8360] bridge_slave_1: entered promiscuous mode [ 668.790415][ T8300] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 668.971911][ T8300] usb 6-1: Using ep0 maxpacket: 8 [ 668.996541][ T8300] usb 6-1: config 3 has an invalid interface number: 177 but max is 0 [ 669.005220][ T8300] usb 6-1: config 3 has no interface number 0 [ 669.036626][ T8300] usb 6-1: config 3 interface 177 has no altsetting 0 [ 669.114742][ T8300] usb 6-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=28.b0 [ 669.124164][ T8300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.132559][ T8300] usb 6-1: Product: syz [ 669.136963][ T8300] usb 6-1: Manufacturer: syz [ 669.141793][ T8300] usb 6-1: SerialNumber: syz [ 669.363480][ T8360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.572701][ T8360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.667594][ T8300] usb 6-1: bad CDC descriptors [ 672.424918][ T5780] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 672.433529][ T5780] Bluetooth: hci1: Injecting HCI hardware error event [ 672.458443][ T5780] Bluetooth: hci1: hardware error 0x00 [ 673.562192][ T8300] usb 6-1: USB disconnect, device number 7 [ 676.659511][ T5780] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 676.898664][ T8360] team0: Port device team_slave_0 added [ 676.931539][ T8360] team0: Port device team_slave_1 added [ 677.108859][ T8296] usb 9-1: USB disconnect, device number 8 [ 677.576878][ T8424] tipc: Failed to remove unknown binding: 66,0,0/0:565148809/565148810 [ 677.604960][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.613066][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.639418][ T8360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.682615][ T8425] tipc: Failed to remove unknown binding: 66,0,0/0:565148809/565148810 [ 677.857822][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.865020][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.891840][ T8360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.503571][ T8224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.881915][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 679.170417][ T8360] hsr_slave_0: entered promiscuous mode [ 679.251308][ T8360] hsr_slave_1: entered promiscuous mode [ 679.270297][ T8360] debugfs: 'hsr0' already exists in 'hsr' [ 679.276229][ T8360] Cannot create hsr debugfs directory [ 679.366899][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.422957][ T8435] loop8: detected capacity change from 0 to 2048 [ 679.495961][ T8435] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 679.553045][ T8435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.771581][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.779119][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.763250][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.770843][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.066970][ T6509] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 681.351605][ T6509] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.394828][ T6509] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 681.404171][ T6509] usb 9-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 681.413206][ T6509] usb 9-1: Product: syz [ 681.417823][ T6509] usb 9-1: Manufacturer: syz [ 683.644648][ T6509] usb 9-1: config 0 descriptor?? [ 683.739548][ T6509] pwc: Askey VC010 type 2 USB webcam detected. [ 684.159938][ T6509] pwc: send_video_command error -71 [ 684.171980][ T6509] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 684.182032][ T6509] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 684.451625][ T6509] usb 9-1: USB disconnect, device number 9 [ 688.594324][ T8360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 688.704012][ T8360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 688.926330][ T8360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 689.161575][ T8360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 689.448046][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.064758][ T8486] loop7: detected capacity change from 0 to 2048 [ 690.158914][ T8486] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 690.279531][ T8486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.453896][ T8224] veth0_vlan: entered promiscuous mode [ 690.911728][ T8224] veth1_vlan: entered promiscuous mode [ 691.012638][ T5835] Bluetooth: Mini driver request failed [ 691.021630][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.030109][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.071443][ T24] Bluetooth: Mini driver request failed [ 691.079715][ T24] bcm203x 8-1:0.0: probe with driver bcm203x failed with error -5 [ 691.155253][ T5835] bcm203x 7-1:0.0: probe with driver bcm203x failed with error -5 [ 691.266313][ T24] usb 8-1: USB disconnect, device number 7 [ 692.090640][ T5835] usb 7-1: USB disconnect, device number 4 [ 692.298879][ T8300] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 692.522315][ T8224] veth0_macvtap: entered promiscuous mode [ 693.079124][ T8300] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 693.088506][ T8300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.097152][ T8300] usb 6-1: Product: syz [ 693.101775][ T8300] usb 6-1: Manufacturer: syz [ 693.106595][ T8300] usb 6-1: SerialNumber: syz [ 694.313800][ T8360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.816154][ T8224] veth1_macvtap: entered promiscuous mode [ 695.431320][ T8360] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.601869][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.609333][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.834224][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.841892][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.007102][ T8300] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 696.019722][ T8300] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 696.031152][ T8300] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 696.308632][ T8300] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 696.660540][ T8300] usb 6-1: USB disconnect, device number 8 [ 697.634344][ T8418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 697.682813][ T8418] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 697.699368][ T8418] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 697.730865][ T8418] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 697.751118][ T8300] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 697.759916][ T8418] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 698.464490][ T8300] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 698.474031][ T8300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.482374][ T8300] usb 6-1: Product: syz [ 698.486723][ T8300] usb 6-1: Manufacturer: syz [ 698.493717][ T8300] usb 6-1: SerialNumber: syz [ 698.875668][ T8300] usb 6-1: config 0 descriptor?? [ 699.338503][ T8300] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 699.697687][ T8528] fuse: Bad value for 'fd' [ 699.744487][ T8300] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 700.061461][ T8418] Bluetooth: hci6: command tx timeout [ 701.516123][ T6749] usb 6-1: USB disconnect, device number 9 [ 701.631369][ T7089] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.235036][ T7089] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.272886][ T8418] Bluetooth: hci6: command tx timeout [ 702.388560][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.477483][ T8418] Bluetooth: hci6: command tx timeout [ 706.760291][ T7089] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.729670][ T50] Bluetooth: hci6: command tx timeout [ 710.783533][ T8515] chnl_net:caif_netlink_parms(): no params data found [ 710.948230][ T7089] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.189048][ T6749] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 711.586937][ T6749] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 711.596472][ T6749] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.679602][ T6749] usb 9-1: config 0 descriptor?? [ 714.104458][ T6749] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 715.167861][ T6749] [drm:udl_init] *ERROR* Selecting channel failed [ 716.119613][ T6749] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 716.126540][ T6749] [drm] Initialized udl on minor 2 [ 716.243748][ T6749] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 716.340885][ T6749] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 716.395458][ T9] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 716.464076][ T9] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 716.494180][ T6749] usb 9-1: USB disconnect, device number 10 [ 716.963567][ T8360] veth0_vlan: entered promiscuous mode [ 716.986484][ T7089] bridge_slave_1: left allmulticast mode [ 716.992360][ T7089] bridge_slave_1: left promiscuous mode [ 716.998774][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.121280][ T7089] bridge_slave_0: left allmulticast mode [ 717.127432][ T7089] bridge_slave_0: left promiscuous mode [ 717.134253][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.909975][ T7089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.981097][ T7089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.149755][ T7089] bond0 (unregistering): Released all slaves [ 720.905560][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 720.915760][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 720.932684][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 720.951357][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 720.960680][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 720.976229][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 720.986135][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 721.006241][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 721.025948][ T8592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 721.037385][ T8592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 721.360874][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.368638][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.514167][ T8515] bridge_slave_0: entered allmulticast mode [ 721.588083][ T8515] bridge_slave_0: entered promiscuous mode [ 721.648008][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.655977][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.721645][ T8515] bridge_slave_1: entered allmulticast mode [ 721.802469][ T8515] bridge_slave_1: entered promiscuous mode [ 722.298264][ T7089] hsr_slave_0: left promiscuous mode [ 722.403264][ T7089] hsr_slave_1: left promiscuous mode [ 722.413102][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.420915][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.502461][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.510167][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.681816][ T7089] veth1_macvtap: left promiscuous mode [ 722.687549][ T7089] veth0_macvtap: left promiscuous mode [ 722.767079][ T7089] veth1_vlan: left promiscuous mode [ 722.772633][ T7089] veth0_vlan: left promiscuous mode [ 723.205458][ T8592] Bluetooth: hci3: command tx timeout [ 723.205922][ T8418] Bluetooth: hci2: command tx timeout [ 724.840730][ T5839] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 725.075034][ T5839] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 725.084455][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.093801][ T5839] usb 9-1: Product: syz [ 725.098791][ T5839] usb 9-1: Manufacturer: syz [ 725.103491][ T5839] usb 9-1: SerialNumber: syz [ 725.124714][ T7089] team0 (unregistering): Port device team_slave_1 removed [ 725.227316][ T7089] team0 (unregistering): Port device team_slave_0 removed [ 725.259202][ T5839] usb 9-1: config 0 descriptor?? [ 725.437949][ T8418] Bluetooth: hci3: command tx timeout [ 725.443900][ T8592] Bluetooth: hci2: command tx timeout [ 725.580483][ T5839] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 725.985502][ T5839] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 726.520207][ T8592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 726.536513][ T8592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 726.547002][ T8592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 726.563027][ T8592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 726.575308][ T8592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 726.696561][ T8515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.375419][ T8515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.653177][ T8418] Bluetooth: hci3: command tx timeout [ 727.654732][ T8592] Bluetooth: hci2: command tx timeout [ 727.878476][ T6749] usb 9-1: USB disconnect, device number 11 [ 728.768183][ T8592] Bluetooth: hci1: command tx timeout [ 728.824336][ T8515] team0: Port device team_slave_0 added [ 729.003483][ T8515] team0: Port device team_slave_1 added [ 729.134504][ T8623] loop8: detected capacity change from 0 to 2048 [ 729.397595][ T8623] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 729.614776][ T8623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 729.886405][ T8592] Bluetooth: hci3: command tx timeout [ 729.887089][ T8418] Bluetooth: hci2: command tx timeout [ 730.048199][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.055267][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.081583][ T8515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.519155][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.526298][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.552630][ T8515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.998669][ T8418] Bluetooth: hci1: command tx timeout [ 731.966448][ T8515] hsr_slave_0: entered promiscuous mode [ 731.997448][ T8515] hsr_slave_1: entered promiscuous mode [ 732.054753][ T8515] debugfs: 'hsr0' already exists in 'hsr' [ 732.060755][ T8515] Cannot create hsr debugfs directory [ 733.213227][ T8418] Bluetooth: hci1: command tx timeout [ 734.550838][ T8586] chnl_net:caif_netlink_parms(): no params data found [ 735.118082][ T8588] chnl_net:caif_netlink_parms(): no params data found [ 735.410006][ T7089] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.437178][ T8418] Bluetooth: hci1: command tx timeout [ 735.849991][ T7089] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.288491][ T7089] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.408884][ T8607] chnl_net:caif_netlink_parms(): no params data found [ 736.565137][ T7089] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.788969][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.796481][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.867733][ T8586] bridge_slave_0: entered allmulticast mode [ 737.908588][ T8586] bridge_slave_0: entered promiscuous mode [ 738.204327][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.211755][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.255305][ T8586] bridge_slave_1: entered allmulticast mode [ 738.311715][ T8586] bridge_slave_1: entered promiscuous mode [ 739.341982][ T8586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.424663][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.432181][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.461991][ T8588] bridge_slave_0: entered allmulticast mode [ 739.490026][ T8588] bridge_slave_0: entered promiscuous mode [ 739.574385][ T8586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.687057][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.694641][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.715596][ T8655] loop8: detected capacity change from 0 to 2048 [ 739.723559][ T8607] bridge_slave_0: entered allmulticast mode [ 739.744259][ T8607] bridge_slave_0: entered promiscuous mode [ 739.812690][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.820240][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.861767][ T8588] bridge_slave_1: entered allmulticast mode [ 739.894477][ T8588] bridge_slave_1: entered promiscuous mode [ 740.001877][ T8655] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 740.025274][ T7089] bridge_slave_1: left allmulticast mode [ 740.031164][ T7089] bridge_slave_1: left promiscuous mode [ 740.037915][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.113280][ T7089] bridge_slave_0: left allmulticast mode [ 740.119453][ T7089] bridge_slave_0: left promiscuous mode [ 740.125732][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.135913][ T8655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 740.201282][ T7089] bridge_slave_1: left allmulticast mode [ 740.207325][ T7089] bridge_slave_1: left promiscuous mode [ 740.216998][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.280776][ T7089] bridge_slave_0: left allmulticast mode [ 740.286773][ T7089] bridge_slave_0: left promiscuous mode [ 740.293549][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.398866][ T7089] bridge_slave_1: left allmulticast mode [ 740.404752][ T7089] bridge_slave_1: left promiscuous mode [ 740.411592][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.496309][ T7089] bridge_slave_0: left allmulticast mode [ 740.502132][ T7089] bridge_slave_0: left promiscuous mode [ 740.509082][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.987800][ T7089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.004347][ T8660] netlink: 68 bytes leftover after parsing attributes in process `syz.8.558'. [ 742.026908][ T7089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.047960][ T7089] bond0 (unregistering): Released all slaves [ 742.450179][ T7089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.495025][ T7089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.523878][ T7089] bond0 (unregistering): Released all slaves [ 742.922565][ T7089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.967209][ T7089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.989557][ T7089] bond0 (unregistering): Released all slaves [ 743.029734][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.037620][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.058133][ T8607] bridge_slave_1: entered allmulticast mode [ 743.082303][ T8607] bridge_slave_1: entered promiscuous mode [ 743.595513][ T8588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.620561][ T8586] team0: Port device team_slave_0 added [ 743.810874][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.836011][ T8588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.893872][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.916021][ T8586] team0: Port device team_slave_1 added [ 744.455821][ T8588] team0: Port device team_slave_0 added [ 744.552205][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.559569][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.586094][ T8586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.670467][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.678651][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.708858][ T8586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.840259][ T8588] team0: Port device team_slave_1 added [ 744.919754][ T7089] hsr_slave_0: left promiscuous mode [ 744.943756][ T7089] hsr_slave_1: left promiscuous mode [ 744.962249][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.979381][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.032800][ T7089] hsr_slave_0: left promiscuous mode [ 745.048499][ T7089] hsr_slave_1: left promiscuous mode [ 745.055613][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.065826][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.628508][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.636341][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.741672][ T7089] hsr_slave_0: left promiscuous mode [ 745.754532][ T7089] hsr_slave_1: left promiscuous mode [ 745.876702][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.725121][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.539628][ T7089] veth0_vlan: left promiscuous mode [ 747.580301][ T7089] veth1_macvtap: left promiscuous mode [ 747.586055][ T7089] veth0_macvtap: left promiscuous mode [ 747.633647][ T7089] veth1_vlan: left promiscuous mode [ 747.639203][ T7089] veth0_vlan: left promiscuous mode [ 747.665733][ T7089] veth1_macvtap: left promiscuous mode [ 747.671371][ T7089] veth0_macvtap: left promiscuous mode [ 747.699291][ T7089] veth1_vlan: left promiscuous mode [ 747.704767][ T7089] veth0_vlan: left promiscuous mode [ 748.174515][ T8674] loop8: detected capacity change from 0 to 2048 [ 748.297960][ T8674] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 748.373460][ T8674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 749.951990][ T7089] team0 (unregistering): Port device team_slave_1 removed [ 750.024187][ T7089] team0 (unregistering): Port device team_slave_0 removed [ 751.141611][ T7089] team0 (unregistering): Port device team_slave_1 removed [ 751.212906][ T7089] team0 (unregistering): Port device team_slave_0 removed [ 751.829298][ T7089] team0 (unregistering): Port device team_slave_1 removed [ 751.854997][ T7089] team0 (unregistering): Port device team_slave_0 removed [ 752.108503][ T8607] team0: Port device team_slave_0 added [ 752.234031][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.241445][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.270598][ T8588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.310189][ T8607] team0: Port device team_slave_1 added [ 752.397976][ T8515] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 752.499329][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.506498][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.533117][ T8588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.594317][ T8678] netlink: 68 bytes leftover after parsing attributes in process `syz.8.565'. [ 752.699682][ T8515] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 752.866919][ T8586] hsr_slave_0: entered promiscuous mode [ 752.877226][ T8586] hsr_slave_1: entered promiscuous mode [ 752.898788][ T8515] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 752.963939][ T8515] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 753.121537][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.128820][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.155945][ T8607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.184038][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.191182][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.217946][ T8607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.438339][ T8588] hsr_slave_0: entered promiscuous mode [ 753.447042][ T8588] hsr_slave_1: entered promiscuous mode [ 753.455560][ T8588] debugfs: 'hsr0' already exists in 'hsr' [ 753.464281][ T8588] Cannot create hsr debugfs directory [ 753.567422][ T24] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 753.769768][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 753.791031][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.169943][ T8607] hsr_slave_0: entered promiscuous mode [ 754.183300][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 754.207068][ T8607] hsr_slave_1: entered promiscuous mode [ 754.207149][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 754.222327][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.225036][ T8607] debugfs: 'hsr0' already exists in 'hsr' [ 754.235334][ T24] usb 9-1: Product: syz [ 754.236806][ T8607] Cannot create hsr debugfs directory [ 754.243007][ T24] usb 9-1: Manufacturer: syz [ 754.251494][ T24] usb 9-1: SerialNumber: syz [ 754.303709][ T24] usb 9-1: config 0 descriptor?? [ 754.805693][ T7089] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.940053][ T7089] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.088811][ T7089] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.180276][ T7089] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.464258][ T8515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.713335][ T8588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 755.791505][ T7089] bridge_slave_1: left allmulticast mode [ 755.797457][ T7089] bridge_slave_1: left promiscuous mode [ 755.804354][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.828359][ T7089] bridge_slave_0: left allmulticast mode [ 755.834846][ T7089] bridge_slave_0: left promiscuous mode [ 755.841174][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.181464][ T7089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.205678][ T7089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.230094][ T7089] bond0 (unregistering): Released all slaves [ 756.247950][ T8588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 756.278858][ T8515] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.320902][ T8588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 756.371879][ T8588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 756.511273][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.518856][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.610605][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.618231][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.680085][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.686734][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.729482][ T8300] usb 9-1: USB disconnect, device number 12 [ 756.930712][ T8688] tipc: Failed to remove unknown binding: 66,0,0/0:702088520/702088521 [ 757.127996][ T7089] hsr_slave_0: left promiscuous mode [ 757.158850][ T7089] hsr_slave_1: left promiscuous mode [ 757.166641][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.174399][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.204560][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.215550][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.273319][ T7089] veth1_macvtap: left promiscuous mode [ 757.279782][ T7089] veth0_macvtap: left promiscuous mode [ 757.285646][ T7089] veth1_vlan: left promiscuous mode [ 757.299874][ T7089] veth0_vlan: left promiscuous mode [ 757.934432][ T7089] team0 (unregistering): Port device team_slave_1 removed [ 757.975390][ T7089] team0 (unregistering): Port device team_slave_0 removed [ 758.908613][ T8698] netlink: 68 bytes leftover after parsing attributes in process `syz.8.572'. [ 759.408062][ T8586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 759.635183][ T8586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 759.880243][ T8588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.927901][ T8586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 759.970306][ T6509] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 759.991821][ T8586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 760.128193][ T8592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 760.149009][ T6509] usb 9-1: Using ep0 maxpacket: 16 [ 760.164172][ T8592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 760.180439][ T8592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 760.212043][ T8592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 760.219518][ T6509] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 760.233746][ T8592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 760.399760][ T6509] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 760.409350][ T6509] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.417558][ T6509] usb 9-1: Product: syz [ 760.422199][ T6509] usb 9-1: Manufacturer: syz [ 760.426994][ T6509] usb 9-1: SerialNumber: syz [ 760.458626][ T8588] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.539754][ T6509] usb 9-1: config 0 descriptor?? [ 760.654729][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.662306][ T7976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.843236][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.850886][ T7976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.098477][ T8607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 761.142523][ T8607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 761.216871][ T8607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 761.243930][ T8607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 762.405041][ T13] bridge_slave_1: left allmulticast mode [ 762.411277][ T13] bridge_slave_1: left promiscuous mode [ 762.417761][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.445508][ T13] bridge_slave_0: left allmulticast mode [ 762.451712][ T13] bridge_slave_0: left promiscuous mode [ 762.458332][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.472765][ T8592] Bluetooth: hci4: command tx timeout [ 762.785106][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.804358][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.819720][ T13] bond0 (unregistering): Released all slaves [ 762.852079][ T8707] chnl_net:caif_netlink_parms(): no params data found [ 762.941440][ T5835] usb 9-1: USB disconnect, device number 13 [ 763.148923][ T13] hsr_slave_0: left promiscuous mode [ 763.160621][ T13] hsr_slave_1: left promiscuous mode [ 763.161828][ T8720] tipc: Failed to remove unknown binding: 66,0,0/0:629707574/629707575 [ 763.172507][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.191522][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.780089][ T13] team0 (unregistering): Port device team_slave_1 removed [ 763.804210][ T13] team0 (unregistering): Port device team_slave_0 removed [ 764.275911][ T8586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.372385][ T8588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.476105][ T8586] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.542869][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.671047][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.678604][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.695786][ T8592] Bluetooth: hci4: command tx timeout [ 764.828952][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.836583][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.922795][ T8733] netlink: 40 bytes leftover after parsing attributes in process `syz.8.579'. [ 764.935105][ T8607] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.008570][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.016166][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.053261][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.060805][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.383375][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.391276][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.399501][ T8707] bridge_slave_0: entered allmulticast mode [ 765.410970][ T8707] bridge_slave_0: entered promiscuous mode [ 765.434690][ T8707] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.442188][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.459892][ T8707] bridge_slave_1: entered allmulticast mode [ 765.474811][ T8707] bridge_slave_1: entered promiscuous mode [ 765.685743][ T8707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.740572][ T8739] tipc: Failed to remove unknown binding: 66,0,0/0:1879485888/1879485889 [ 765.758212][ T8739] tipc: Failed to remove unknown binding: 66,0,0/0:1879485888/1879485889 [ 765.779024][ T8707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.966157][ T8707] team0: Port device team_slave_0 added [ 766.018734][ T8707] team0: Port device team_slave_1 added [ 766.037824][ T8588] veth0_vlan: entered promiscuous mode [ 766.474637][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.482140][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.510336][ T8707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.971546][ T8592] Bluetooth: hci4: command tx timeout [ 767.022134][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.029488][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.057830][ T8707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.206142][ T8588] veth1_vlan: entered promiscuous mode [ 767.812628][ T8707] hsr_slave_0: entered promiscuous mode [ 767.844816][ T8707] hsr_slave_1: entered promiscuous mode [ 767.883905][ T8707] debugfs: 'hsr0' already exists in 'hsr' [ 767.889838][ T8707] Cannot create hsr debugfs directory [ 768.711822][ T8588] veth0_macvtap: entered promiscuous mode [ 768.891534][ T8588] veth1_macvtap: entered promiscuous mode [ 769.032505][ T8757] netlink: 40 bytes leftover after parsing attributes in process `syz.8.586'. [ 769.147046][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.219148][ T8592] Bluetooth: hci4: command tx timeout [ 769.458395][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.608356][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.752400][ T30] audit: type=1326 audit(1769526637.012:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.8.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa552d9aeb9 code=0x7ffc0000 [ 769.808287][ T30] audit: type=1326 audit(1769526637.040:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.8.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa552d9aeb9 code=0x7ffc0000 [ 769.831076][ T30] audit: type=1326 audit(1769526637.049:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.8.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa552d9aeb9 code=0x7ffc0000 [ 769.853702][ T30] audit: type=1326 audit(1769526637.049:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.8.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa552d9aeb9 code=0x7ffc0000 [ 769.876268][ T30] audit: type=1326 audit(1769526637.087:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.8.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa552d9aeb9 code=0x7ffc0000 [ 769.898860][ T30] audit: type=1326 audit(1769526637.087:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.8.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa552d9aeb9 code=0x7ffc0000 [ 769.921412][ T30] audit: type=1326 audit(1769526637.087:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.8.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa552d9aeb9 code=0x7ffc0000 [ 769.974036][ T8607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.008539][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.028323][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.049123][ T30] audit: type=1326 audit(1769526637.105:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.8.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa552d9aeb9 code=0x7ffc0000 [ 770.073369][ T30] audit: type=1326 audit(1769526637.105:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.8.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa552d9aeb9 code=0x7ffc0000 [ 770.096460][ T30] audit: type=1326 audit(1769526637.105:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.8.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa552d9aeb9 code=0x7ffc0000 [ 770.181333][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.191330][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.614722][ T8771] tipc: Failed to remove unknown binding: 66,0,0/0:3267807857/3267807858 [ 770.652897][ T8771] tipc: Failed to remove unknown binding: 66,0,0/0:3267807857/3267807858 [ 770.755242][ T8607] veth0_vlan: entered promiscuous mode [ 771.093716][ T8707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 771.284822][ T8607] veth1_vlan: entered promiscuous mode [ 771.313833][ T8707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 771.431690][ T8707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 771.518227][ T8707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 772.224298][ T8586] veth0_vlan: entered promiscuous mode [ 772.380849][ T8607] veth0_macvtap: entered promiscuous mode [ 772.525484][ T8607] veth1_macvtap: entered promiscuous mode [ 772.632561][ T8586] veth1_vlan: entered promiscuous mode [ 772.955332][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.092632][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.331279][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.442987][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.454065][ T8586] veth0_macvtap: entered promiscuous mode [ 773.558283][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.633433][ T8586] veth1_macvtap: entered promiscuous mode [ 773.687326][ T7976] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.721593][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz.8.593'. [ 774.196951][ T8707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.250144][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.388247][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.633046][ T6034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.712736][ T8707] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.757843][ T7089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.835294][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.842908][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.965440][ T7089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.986659][ T7089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.024472][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.032006][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.153478][ T8300] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 775.419289][ T8300] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 775.428906][ T8300] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.437107][ T8300] usb 9-1: Product: syz [ 775.443046][ T8300] usb 9-1: Manufacturer: syz [ 775.447833][ T8300] usb 9-1: SerialNumber: syz [ 776.154564][ T8300] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 776.168167][ T8300] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 776.263193][ T8300] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 776.281898][ T8300] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 776.383561][ T8300] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 776.514111][ T8300] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 776.866805][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.875286][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.054591][ T7976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.062745][ T7976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.626686][ T8707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.079321][ T6509] usb 9-1: USB disconnect, device number 14 [ 779.190583][ T8707] veth0_vlan: entered promiscuous mode [ 779.408943][ T8707] veth1_vlan: entered promiscuous mode [ 780.016558][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.8.600'. [ 780.075507][ T8707] veth0_macvtap: entered promiscuous mode [ 780.144957][ T8707] veth1_macvtap: entered promiscuous mode [ 780.390999][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.580760][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.789307][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.872308][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.986956][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.056847][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.711562][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.721344][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.896749][ T8296] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 782.023479][ T5890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.032252][ T5890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.133132][ T8296] usb 3-1: Using ep0 maxpacket: 32 [ 782.220132][ T8296] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 782.228825][ T8296] usb 3-1: config 0 has no interface number 0 [ 782.260865][ T8296] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 782.324899][ T8296] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 782.334270][ T8296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.342901][ T8296] usb 3-1: Product: syz [ 782.347574][ T8296] usb 3-1: Manufacturer: syz [ 782.352382][ T8296] usb 3-1: SerialNumber: syz [ 782.458070][ T8296] usb 3-1: config 0 descriptor?? [ 782.517984][ T8894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 782.827503][ T8904] team0 (unregistering): Port device team_slave_0 removed [ 782.853374][ T8894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 782.932417][ T8904] team0 (unregistering): Port device team_slave_1 removed [ 784.146304][ T8917] tipc: Failed to remove unknown binding: 66,0,0/0:1898428612/1898428613 [ 784.210297][ T8917] tipc: Failed to remove unknown binding: 66,0,0/0:1898428612/1898428613 [ 784.506535][ T8418] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 784.532110][ T8418] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 784.556137][ T8418] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 784.574834][ T8418] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 784.591113][ T8418] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 785.726511][ T8296] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 785.737347][ T8296] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 786.687078][ T8938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.609'. [ 786.764229][ T8296] asix 3-1:0.188: probe with driver asix failed with error -71 [ 786.807823][ T8296] usb 3-1: USB disconnect, device number 2 [ 786.843542][ T8418] Bluetooth: hci5: command tx timeout [ 787.015569][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'. [ 788.912231][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.059587][ T8418] Bluetooth: hci5: command tx timeout [ 789.129020][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.426424][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.547889][ T8923] chnl_net:caif_netlink_parms(): no params data found [ 789.636619][ T8971] tipc: Failed to remove unknown binding: 66,0,0/0:3735028309/3735028310 [ 789.688247][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.706238][ T8971] tipc: Failed to remove unknown binding: 66,0,0/0:3735028309/3735028310 [ 790.390212][ T8983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.572914][ T8986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.619'. [ 790.609996][ T58] bridge_slave_1: left allmulticast mode [ 790.615878][ T58] bridge_slave_1: left promiscuous mode [ 790.623936][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.810996][ T58] bridge_slave_0: left allmulticast mode [ 790.817583][ T58] bridge_slave_0: left promiscuous mode [ 790.824268][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.947140][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.8.620'. [ 791.316024][ T8418] Bluetooth: hci5: command tx timeout [ 791.832028][ T8998] loop3: detected capacity change from 0 to 2048 [ 792.053159][ T8998] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 793.037614][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.113921][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.165859][ T58] bond0 (unregistering): Released all slaves [ 793.256484][ T8998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 793.507210][ T8418] Bluetooth: hci5: command tx timeout [ 793.539090][ T8296] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 794.178973][ T8296] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.255897][ T8296] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 794.335018][ T58] hsr_slave_0: left promiscuous mode [ 794.352322][ T8296] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 794.362009][ T8296] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 794.370239][ T8296] usb 9-1: Manufacturer: syz [ 794.420597][ T58] hsr_slave_1: left promiscuous mode [ 794.460528][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.468158][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.503754][ T8296] usb 9-1: config 0 descriptor?? [ 794.582369][ T8296] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 794.592612][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.600601][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.680474][ T58] veth1_macvtap: left promiscuous mode [ 794.705338][ T58] veth0_macvtap: left promiscuous mode [ 794.725821][ T58] veth1_vlan: left promiscuous mode [ 794.773857][ T58] veth0_vlan: left promiscuous mode [ 795.979771][ T9032] tipc: Failed to remove unknown binding: 66,0,0/0:338837860/338837861 [ 796.017913][ T9032] tipc: Failed to remove unknown binding: 66,0,0/0:338837860/338837861 [ 796.319739][ T58] team0 (unregistering): Port device team_slave_1 removed [ 796.398634][ T8296] usb 9-1: USB disconnect, device number 15 [ 796.465937][ T58] team0 (unregistering): Port device team_slave_0 removed [ 797.544095][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.552630][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.843694][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.852114][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.876209][ T8923] bridge_slave_0: entered allmulticast mode [ 797.967732][ T8923] bridge_slave_0: entered promiscuous mode [ 798.257296][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.265426][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.332953][ T8923] bridge_slave_1: entered allmulticast mode [ 798.390678][ T8923] bridge_slave_1: entered promiscuous mode [ 798.945680][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.954286][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.131642][ T8923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.323364][ T8923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.085986][ T8923] team0: Port device team_slave_0 added [ 800.187777][ T8923] team0: Port device team_slave_1 added [ 801.055106][ T9061] loop8: detected capacity change from 0 to 2048 [ 801.127997][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.135411][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.162170][ T8923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.316734][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.324351][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.351107][ T8923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.415058][ T9061] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 801.607044][ T9061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 802.006817][ T8923] hsr_slave_0: entered promiscuous mode [ 802.085807][ T8923] hsr_slave_1: entered promiscuous mode [ 802.242686][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 802.475980][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 802.533539][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 802.543120][ T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 802.551517][ T10] usb 1-1: Manufacturer: syz [ 802.684895][ T10] usb 1-1: config 0 descriptor?? [ 802.771844][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 803.513304][ T8592] Bluetooth: hci3: command 0x0406 tx timeout [ 805.783667][ T8296] usb 1-1: USB disconnect, device number 2 [ 805.852497][ T8923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 805.905283][ T8923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 806.070424][ T8923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 806.126769][ T8923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 807.003272][ T9131] loop3: detected capacity change from 0 to 2048 [ 807.080450][ T9131] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 807.180521][ T9131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 807.364188][ T5832] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 807.442325][ T9140] netlink: 68 bytes leftover after parsing attributes in process `syz.0.653'. [ 807.557395][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 807.570778][ T5832] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.606705][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 807.618542][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 807.629300][ T5832] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 807.639407][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.727174][ T8923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.830097][ T5832] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 807.839583][ T5832] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 807.848384][ T5832] usb 3-1: Manufacturer: syz [ 807.932517][ T5832] usb 3-1: config 0 descriptor?? [ 807.949982][ T8923] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.074549][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.082301][ T5890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.237357][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.245093][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.699673][ T5832] rc_core: IR keymap rc-hauppauge not found [ 808.705861][ T5832] Registered IR keymap rc-empty [ 808.726488][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 808.783855][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 808.820915][ T5832] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 808.866320][ T8923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 808.905203][ T5832] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 808.959521][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 809.062220][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 809.083883][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 809.144810][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 809.198154][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 809.234010][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 809.299242][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 809.350335][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 809.373124][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 809.436941][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 809.553330][ T5832] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 809.562652][ T5832] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 809.720458][ T5832] usb 3-1: USB disconnect, device number 3 [ 810.323137][ T5835] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 811.018477][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.086569][ T5835] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 811.096580][ T5835] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 811.104950][ T5835] usb 4-1: Manufacturer: syz [ 811.229427][ T5835] usb 4-1: config 0 descriptor?? [ 811.315395][ T5835] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 811.873957][ T8923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.201864][ T9180] loop0: detected capacity change from 0 to 2048 [ 812.308160][ T9180] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 812.377371][ T9180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 812.759552][ T9190] netlink: 68 bytes leftover after parsing attributes in process `syz.2.665'. [ 813.316211][ T8300] usb 4-1: USB disconnect, device number 5 [ 815.393169][ T8923] veth0_vlan: entered promiscuous mode [ 815.480307][ T8923] veth1_vlan: entered promiscuous mode [ 816.036697][ T8923] veth0_macvtap: entered promiscuous mode [ 816.115060][ T8923] veth1_macvtap: entered promiscuous mode [ 816.377404][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.569157][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.758851][ T7976] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.786105][ T7976] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.810893][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.8.677'. [ 816.905650][ T7976] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.016408][ T9239] netlink: 68 bytes leftover after parsing attributes in process `syz.0.678'. [ 817.300842][ T7089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.737539][ T9248] kAFS: unparsable volume name [ 820.911773][ T9278] netlink: 68 bytes leftover after parsing attributes in process `syz.3.692'. [ 821.537409][ T8296] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 821.594141][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 821.777767][ T8296] usb 9-1: Using ep0 maxpacket: 16 [ 821.851119][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 821.883500][ T8296] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 821.897476][ T8296] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 821.922368][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 821.930931][ T10] usb 1-1: config 0 has no interface number 0 [ 821.992386][ T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 822.044175][ T8296] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 822.053679][ T8296] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.062116][ T8296] usb 9-1: Product: syz [ 822.066474][ T8296] usb 9-1: Manufacturer: syz [ 822.071284][ T8296] usb 9-1: SerialNumber: syz [ 822.148616][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 822.160460][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.169288][ T10] usb 1-1: Product: syz [ 822.173742][ T10] usb 1-1: Manufacturer: syz [ 822.178765][ T10] usb 1-1: SerialNumber: syz [ 822.275262][ T8296] usb 9-1: config 0 descriptor?? [ 822.306471][ T10] usb 1-1: config 0 descriptor?? [ 822.352310][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.359045][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 822.378618][ T8296] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 822.390522][ T8296] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 822.399750][ T9284] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 822.801886][ T9284] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 823.130569][ T8296] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 823.162883][ T8296] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 823.190903][ T8296] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 823.206228][ T8296] em28xx 9-1:0.0: No AC97 audio processor [ 823.285357][ T8296] usb 9-1: USB disconnect, device number 16 [ 823.350240][ T8296] em28xx 9-1:0.0: Disconnecting em28xx [ 823.393086][ T8296] em28xx 9-1:0.0: Freeing device [ 824.841073][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 824.852427][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 824.946940][ T10] asix 1-1:0.188: probe with driver asix failed with error -71 [ 825.106067][ T10] usb 1-1: USB disconnect, device number 3 [ 825.910135][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 826.210788][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.284265][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 826.293699][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.453540][ T10] usb 4-1: config 0 descriptor?? [ 826.518483][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 827.069366][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 827.108342][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 827.235544][ T7089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.245035][ T7089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.357537][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 827.376759][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 827.416327][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 827.450769][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 827.460494][ T9335] netlink: 68 bytes leftover after parsing attributes in process `syz.2.704'. [ 827.487909][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 827.513537][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 827.557467][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 827.589517][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 827.614441][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.614560][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 827.624504][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.703614][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 827.754132][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 827.824384][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 827.896405][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 828.003784][ T10] pwc: Registered as video103. [ 828.134948][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 828.273417][ T10] usb 4-1: USB disconnect, device number 6 [ 828.324332][ T8418] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 828.333036][ T8418] Bluetooth: hci1: Injecting HCI hardware error event [ 828.350573][ T8418] Bluetooth: hci1: hardware error 0x00 [ 828.980029][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 829.180670][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 829.236333][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 829.248338][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 829.402689][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 829.413200][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.421579][ T10] usb 3-1: Product: syz [ 829.425930][ T10] usb 3-1: Manufacturer: syz [ 829.430875][ T10] usb 3-1: SerialNumber: syz [ 829.562528][ T10] usb 3-1: config 0 descriptor?? [ 829.645429][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 829.659683][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 830.207992][ T5835] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 830.393055][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 830.443699][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 830.485520][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 830.501510][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 830.509496][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 830.564414][ T5835] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 830.573095][ T5835] usb 1-1: config 0 has no interface number 0 [ 830.642460][ T8418] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 830.683372][ T10] usb 3-1: USB disconnect, device number 4 [ 830.705973][ T5835] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 830.767950][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 830.842248][ T5835] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 830.852071][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.863055][ T5835] usb 1-1: Product: syz [ 830.867412][ T5835] usb 1-1: Manufacturer: syz [ 830.873106][ T5835] usb 1-1: SerialNumber: syz [ 830.905344][ T10] em28xx 3-1:0.0: Freeing device [ 830.980942][ T8418] Bluetooth: hci2: command 0x1003 tx timeout [ 830.995117][ T8592] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 831.140916][ T5835] usb 1-1: config 0 descriptor?? [ 831.254645][ T9364] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 831.821150][ T9364] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 834.038682][ T5835] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 834.049448][ T5835] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 834.158784][ T5835] asix 1-1:0.188: probe with driver asix failed with error -71 [ 834.260667][ T5835] usb 1-1: USB disconnect, device number 4 [ 835.149157][ T5835] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 835.414267][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 835.487904][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 835.501891][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 835.745890][ T5835] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 835.755428][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.764091][ T5835] usb 5-1: Product: syz [ 835.769019][ T5835] usb 5-1: Manufacturer: syz [ 835.773795][ T5835] usb 5-1: SerialNumber: syz [ 835.972322][ T5835] usb 5-1: config 0 descriptor?? [ 836.041468][ T5835] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 836.057022][ T5835] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 836.703407][ T5835] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 836.722241][ T5835] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 836.806469][ T5835] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 836.814713][ T5835] em28xx 5-1:0.0: No AC97 audio processor [ 836.900596][ T5835] usb 5-1: USB disconnect, device number 2 [ 836.925481][ T5835] em28xx 5-1:0.0: Disconnecting em28xx [ 836.974105][ T5835] em28xx 5-1:0.0: Freeing device [ 840.848803][ T9438] comedi comedi0: Minor 47 could not be opened [ 850.553061][ T9494] loop8: detected capacity change from 0 to 256 [ 850.797756][ T9494] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 851.925935][ T8418] Bluetooth: hci3: command 0x0406 tx timeout [ 853.586305][ T9537] loop0: detected capacity change from 0 to 256 [ 853.731385][ T9537] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 857.612318][ C0] hrtimer: interrupt took 223790 ns [ 857.764065][ T5835] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 858.029085][ T5835] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 858.040052][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.048572][ T5835] usb 3-1: Product: syz [ 858.052921][ T5835] usb 3-1: Manufacturer: syz [ 858.058146][ T5835] usb 3-1: SerialNumber: syz [ 858.420707][ T5835] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 858.433530][ T5835] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 858.448838][ T5835] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 858.535576][ T5835] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 861.442756][ T8296] usb 3-1: USB disconnect, device number 5 [ 864.602483][ T9654] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.783546][ T9654] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.990400][ T9654] virt_wifi0 speed is unknown, defaulting to 1000 [ 865.172075][ T9654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 865.568128][ T9654] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 865.972712][ T9654] virt_wifi0 speed is unknown, defaulting to 1000 [ 866.115531][ T9654] virt_wifi0 speed is unknown, defaulting to 1000 [ 866.188518][ T9654] virt_wifi0 speed is unknown, defaulting to 1000 [ 866.288251][ T9654] virt_wifi0 speed is unknown, defaulting to 1000 [ 866.362422][ T9654] virt_wifi0 speed is unknown, defaulting to 1000 [ 876.988082][ T8418] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 877.044834][ T8418] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 877.061356][ T8418] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 877.081552][ T8418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 877.092834][ T8418] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 877.866124][ T9703] virt_wifi0 speed is unknown, defaulting to 1000 [ 878.612475][ T9713] loop8: detected capacity change from 0 to 256 [ 879.089601][ T9713] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 879.288313][ T8418] Bluetooth: hci2: command tx timeout [ 881.240968][ T9703] chnl_net:caif_netlink_parms(): no params data found [ 881.511725][ T8418] Bluetooth: hci2: command tx timeout [ 882.515510][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.539207][ T8296] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 882.758728][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.795829][ T8296] usb 9-1: not running at top speed; connect to a high speed hub [ 882.829379][ T8296] usb 9-1: config 3 has an invalid interface number: 47 but max is 1 [ 882.837973][ T8296] usb 9-1: config 3 has no interface number 0 [ 882.871333][ T8296] usb 9-1: config 3 interface 1 has no altsetting 0 [ 882.878197][ T8296] usb 9-1: config 3 interface 47 has no altsetting 0 [ 882.982846][ T8296] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 882.992310][ T8296] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.000687][ T8296] usb 9-1: Product: syz [ 883.005033][ T8296] usb 9-1: Manufacturer: syz [ 883.009999][ T8296] usb 9-1: SerialNumber: syz [ 883.065140][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.281002][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.542040][ T8296] snd-usb-audio 9-1:3.1: probe with driver snd-usb-audio failed with error -22 [ 883.735431][ T8418] Bluetooth: hci2: command tx timeout [ 883.799898][ T9703] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.807636][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.877922][ T9703] bridge_slave_0: entered allmulticast mode [ 883.891558][ T9703] bridge_slave_0: entered promiscuous mode [ 883.923393][ T8296] snd-usb-audio 9-1:3.47: probe with driver snd-usb-audio failed with error -22 [ 883.966818][ T9703] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.974752][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.994361][ T8296] usb 9-1: USB disconnect, device number 17 [ 884.097950][ T9703] bridge_slave_1: entered allmulticast mode [ 884.144584][ T9703] bridge_slave_1: entered promiscuous mode [ 884.218480][ T7939] udevd[7939]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:3.47/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.110869][ T9768] loop2: detected capacity change from 0 to 256 [ 885.455833][ T9768] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 885.670297][ T5835] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 885.982303][ T8418] Bluetooth: hci2: command tx timeout [ 886.011119][ T5835] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.021906][ T5835] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 886.279789][ T5835] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 886.289388][ T5835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 886.297814][ T5835] usb 9-1: SerialNumber: syz [ 886.428661][ T9703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.769893][ T9703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.814986][ T59] bridge_slave_1: left allmulticast mode [ 886.820969][ T59] bridge_slave_1: left promiscuous mode [ 886.827809][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.969918][ T5835] usb 9-1: 0:2 : does not exist [ 887.090408][ T59] bridge_slave_0: left allmulticast mode [ 887.096620][ T59] bridge_slave_0: left promiscuous mode [ 887.103316][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.326817][ T5835] usb 9-1: USB disconnect, device number 18 [ 888.040065][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 888.047020][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 888.289086][ T7027] udevd[7027]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.651039][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.719154][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.785383][ T59] bond0 (unregistering): Released all slaves [ 890.023196][ T9785] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 890.023263][ T9809] loop8: detected capacity change from 0 to 256 [ 890.118806][ T9809] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 890.208278][ T8296] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 890.377601][ T9703] team0: Port device team_slave_0 added [ 890.445808][ T9703] team0: Port device team_slave_1 added [ 890.493457][ T8296] usb 3-1: not running at top speed; connect to a high speed hub [ 890.536757][ T8296] usb 3-1: config 3 has an invalid interface number: 47 but max is 1 [ 890.545578][ T8296] usb 3-1: config 3 has no interface number 0 [ 890.596429][ T8296] usb 3-1: config 3 interface 1 has no altsetting 0 [ 890.603699][ T8296] usb 3-1: config 3 interface 47 has no altsetting 0 [ 890.684866][ T8296] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 890.694480][ T8296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.702957][ T8296] usb 3-1: Product: syz [ 890.707903][ T8296] usb 3-1: Manufacturer: syz [ 890.712778][ T8296] usb 3-1: SerialNumber: syz [ 890.817323][ T9814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.850'. [ 891.063953][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.077591][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.106727][ T9703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.232560][ T8296] snd-usb-audio 3-1:3.1: probe with driver snd-usb-audio failed with error -22 [ 891.300242][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.307639][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.335362][ T9703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.441516][ T8296] snd-usb-audio 3-1:3.47: probe with driver snd-usb-audio failed with error -22 [ 891.557931][ T8296] usb 3-1: USB disconnect, device number 6 [ 891.687036][ T59] hsr_slave_0: left promiscuous mode [ 891.714860][ T59] hsr_slave_1: left promiscuous mode [ 891.725100][ T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 891.749179][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.757120][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.839922][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.847800][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.006797][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.017400][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.155783][ T59] veth1_macvtap: left promiscuous mode [ 892.172454][ T59] veth0_macvtap: left promiscuous mode [ 892.181476][ T10] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 892.190845][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 892.199144][ T10] usb 9-1: SerialNumber: syz [ 892.259544][ T59] veth1_vlan: left promiscuous mode [ 892.286288][ T7939] udevd[7939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.47/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.299446][ T59] veth0_vlan: left promiscuous mode [ 892.650926][ T10] usb 9-1: 0:2 : does not exist [ 895.710068][ T8418] Bluetooth: hci4: command 0x0406 tx timeout [ 895.803024][ T10] usb 9-1: USB disconnect, device number 19 [ 896.537153][ T7027] udevd[7027]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 897.021258][ T9852] loop2: detected capacity change from 0 to 256 [ 897.957653][ T9852] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 898.539851][ T59] team0 (unregistering): Port device team_slave_1 removed [ 898.686821][ T59] team0 (unregistering): Port device team_slave_0 removed [ 899.678570][ T9847] netlink: 'syz.0.860': attribute type 29 has an invalid length. [ 899.750308][ T5835] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 899.918016][ T9703] hsr_slave_0: entered promiscuous mode [ 899.990517][ T9703] hsr_slave_1: entered promiscuous mode [ 900.015954][ T5835] usb 4-1: not running at top speed; connect to a high speed hub [ 900.067158][ T5835] usb 4-1: config 3 has an invalid interface number: 47 but max is 1 [ 900.076382][ T5835] usb 4-1: config 3 has no interface number 0 [ 900.145780][ T5835] usb 4-1: config 3 interface 1 has no altsetting 0 [ 900.154403][ T5835] usb 4-1: config 3 interface 47 has no altsetting 0 [ 900.223316][ T5835] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 900.232886][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.241136][ T5835] usb 4-1: Product: syz [ 900.245727][ T5835] usb 4-1: Manufacturer: syz [ 900.250497][ T5835] usb 4-1: SerialNumber: syz [ 900.949223][ T5835] snd-usb-audio 4-1:3.1: probe with driver snd-usb-audio failed with error -22 [ 901.498434][ T5835] snd-usb-audio 4-1:3.47: probe with driver snd-usb-audio failed with error -22 [ 901.648603][ T5835] usb 4-1: USB disconnect, device number 7 [ 902.079573][ T7050] udevd[7050]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.47/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 903.004208][ T8296] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 903.331092][ T8296] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.341387][ T8296] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.399947][ T8296] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 903.409537][ T8296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 903.417976][ T8296] usb 1-1: SerialNumber: syz [ 903.729712][ T8296] usb 1-1: 0:2 : does not exist [ 903.887045][ T8296] usb 1-1: USB disconnect, device number 5 [ 904.131867][ T9892] loop3: detected capacity change from 0 to 256 [ 904.218611][ T9895] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 904.398480][ T9892] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 904.473395][ T7027] udevd[7027]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.927976][ T9901] netlink: 'syz.8.875': attribute type 29 has an invalid length. [ 905.289578][ T9703] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 905.441049][ T9703] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 905.548437][ T9703] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 905.661775][ T9703] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 908.445405][ T9703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.953338][ T9703] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.071404][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.079038][ T5890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.212728][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.220350][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.273722][ T5835] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 909.510911][ T5835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.521553][ T5835] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 909.633794][ T5835] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 909.644443][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 909.653968][ T5835] usb 4-1: SerialNumber: syz [ 909.718684][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.062346][ T5835] usb 4-1: 0:2 : does not exist [ 910.082629][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.166234][ T9943] netlink: 'syz.8.889': attribute type 29 has an invalid length. [ 910.226015][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.250322][ T5835] usb 4-1: USB disconnect, device number 8 [ 910.405380][ T9944] netlink: 'syz.8.889': attribute type 29 has an invalid length. [ 910.539523][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.592319][ T7027] udevd[7027]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.435684][ T12] bridge_slave_1: left allmulticast mode [ 911.441545][ T12] bridge_slave_1: left promiscuous mode [ 911.448331][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.546711][ T12] bridge_slave_0: left allmulticast mode [ 911.555763][ T12] bridge_slave_0: left promiscuous mode [ 911.562426][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.250094][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.358960][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.408021][ T9960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.891'. [ 912.425746][ T12] bond0 (unregistering): Released all slaves [ 913.400119][ T9965] overlayfs: missing 'lowerdir' [ 921.861909][ T12] hsr_slave_0: left promiscuous mode [ 922.651480][ T8418] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 922.665329][ T8418] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 922.676712][ T8418] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 922.766017][ T8418] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 922.795491][ T8418] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 922.870386][ T12] hsr_slave_1: left promiscuous mode [ 923.029716][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.041808][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.302074][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.309819][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.292041][ T12] veth1_macvtap: left promiscuous mode [ 924.357357][ T12] veth0_macvtap: left promiscuous mode [ 924.410640][ T12] veth1_vlan: left promiscuous mode [ 924.469113][ T12] veth0_vlan: left promiscuous mode [ 925.135533][ T8418] Bluetooth: hci3: command tx timeout [ 926.538856][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 927.259789][ T12] team0 (unregistering): Port device team_slave_1 removed [ 927.317551][ T12] team0 (unregistering): Port device team_slave_0 removed [ 927.354346][ T8418] Bluetooth: hci3: command tx timeout [ 927.487679][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 927.707146][ T10] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 927.715708][ T10] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 927.726325][ T10] usb 1-1: config 8 has no interface number 0 [ 927.813852][ T9991] netlink: 'syz.3.900': attribute type 25 has an invalid length. [ 927.820537][ T10] usb 1-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.886622][ T10] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 927.896344][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.904705][ T10] usb 1-1: Product: syz [ 927.909158][ T10] usb 1-1: Manufacturer: syz [ 927.913935][ T10] usb 1-1: SerialNumber: syz [ 928.072159][ T9703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.391182][ T10] usb 1-1: USB disconnect, device number 6 [ 928.603645][T10000] netlink: 'syz.3.902': attribute type 29 has an invalid length. [ 928.655065][T10000] netlink: 'syz.3.902': attribute type 29 has an invalid length. [ 929.132475][ T9703] veth0_vlan: entered promiscuous mode [ 929.403702][ T9703] veth1_vlan: entered promiscuous mode [ 929.951751][ T8418] Bluetooth: hci3: command tx timeout [ 931.503604][ T9703] veth0_macvtap: entered promiscuous mode [ 931.666842][ T9703] veth1_macvtap: entered promiscuous mode [ 932.142525][ T8418] Bluetooth: hci3: command tx timeout [ 932.808562][ T9976] chnl_net:caif_netlink_parms(): no params data found [ 937.058316][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.080924][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.236376][ T5989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.461242][ T5989] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.644215][ T5989] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.706764][ T5989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.050760][ T8592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 943.060035][ T8592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 943.080085][ T8592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 943.123690][ T8592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 943.147759][ T8592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 943.474888][ T9976] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.482416][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.573192][ T9976] bridge_slave_0: entered allmulticast mode [ 943.607707][ T9976] bridge_slave_0: entered promiscuous mode [ 943.624414][ T8296] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 943.816952][ T9976] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.824500][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.883947][ T8296] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 943.892885][ T8296] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 943.903444][ T9976] bridge_slave_1: entered allmulticast mode [ 943.903512][ T8296] usb 1-1: config 8 has no interface number 0 [ 943.979140][ T9976] bridge_slave_1: entered promiscuous mode [ 944.034309][ T8296] usb 1-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 944.138563][ T8296] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 944.149049][ T8296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.157264][ T8296] usb 1-1: Product: syz [ 944.164915][ T8296] usb 1-1: Manufacturer: syz [ 944.170937][ T8296] usb 1-1: SerialNumber: syz [ 944.615092][ T8296] usb 1-1: USB disconnect, device number 7 [ 944.871440][ T9976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.034165][ T9976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.400823][ T8418] Bluetooth: hci5: command tx timeout [ 946.197614][ T9976] team0: Port device team_slave_0 added [ 946.208417][T10067] netlink: 'syz.0.913': attribute type 29 has an invalid length. [ 946.310226][ T9976] team0: Port device team_slave_1 added [ 946.320652][T10070] netlink: 'syz.0.913': attribute type 29 has an invalid length. [ 946.454394][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.836562][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.929153][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.936321][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.962810][ T9976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.096666][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.107295][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.135387][ T9976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.310428][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.611729][ T8296] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 947.624273][ T8418] Bluetooth: hci5: command tx timeout [ 947.633404][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.819629][ T8296] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 947.828205][ T8296] usb 9-1: config 1 has no interface number 0 [ 947.870441][ T8296] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 947.885933][ T8296] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 947.897219][ T8296] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.997631][ T8296] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 948.007398][ T8296] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.015628][ T8296] usb 9-1: Product: syz [ 948.020186][ T8296] usb 9-1: Manufacturer: syz [ 948.024951][ T8296] usb 9-1: SerialNumber: syz [ 948.079257][T10085] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 948.235243][ T9976] hsr_slave_0: entered promiscuous mode [ 948.280598][ T9976] hsr_slave_1: entered promiscuous mode [ 948.314365][ T9976] debugfs: 'hsr0' already exists in 'hsr' [ 948.324210][ T9976] Cannot create hsr debugfs directory [ 948.390473][T10085] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 948.521285][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 948.521364][ T30] audit: type=1326 audit(1769526804.233:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f576e53c2d9 code=0x7ffc0000 [ 948.668115][ T30] audit: type=1326 audit(1769526804.289:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f576e53c2d9 code=0x7ffc0000 [ 948.693169][ T30] audit: type=1326 audit(1769526804.289:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f576e53c2d9 code=0x7ffc0000 [ 948.715959][ T30] audit: type=1326 audit(1769526804.289:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f576e53c2d9 code=0x7ffc0000 [ 948.738455][ T30] audit: type=1326 audit(1769526804.289:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f576e53c2d9 code=0x7ffc0000 [ 948.763926][ T30] audit: type=1326 audit(1769526804.308:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f576e53c2d9 code=0x7ffc0000 [ 948.786911][ T30] audit: type=1326 audit(1769526804.308:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576e59aeb9 code=0x7ffc0000 [ 948.809379][ T30] audit: type=1326 audit(1769526804.308:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f576e53c2d9 code=0x7ffc0000 [ 948.831766][ T30] audit: type=1326 audit(1769526804.308:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f576e53c2d9 code=0x7ffc0000 [ 948.854171][ T30] audit: type=1326 audit(1769526804.317:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f576e53c2d9 code=0x7ffc0000 [ 949.200245][ T8296] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 949.491806][ T8296] usb 9-1: USB disconnect, device number 20 [ 949.532219][T10053] chnl_net:caif_netlink_parms(): no params data found [ 949.575754][ T8296] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem [ 949.847342][ T8418] Bluetooth: hci5: command tx timeout [ 949.942510][ T8296] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 950.760634][ T36] bridge_slave_1: left allmulticast mode [ 950.766765][ T36] bridge_slave_1: left promiscuous mode [ 950.773099][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.817442][ T36] bridge_slave_0: left allmulticast mode [ 950.823574][ T36] bridge_slave_0: left promiscuous mode [ 950.830525][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.350599][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 951.913860][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.980392][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.023339][ T36] bond0 (unregistering): Released all slaves [ 952.072735][ T8418] Bluetooth: hci5: command tx timeout [ 952.186548][T10124] netlink: 'syz.0.924': attribute type 29 has an invalid length. [ 952.200125][T10129] netlink: 'syz.0.924': attribute type 29 has an invalid length. [ 952.610453][ T36] hsr_slave_0: left promiscuous mode [ 952.649569][ T36] hsr_slave_1: left promiscuous mode [ 952.687680][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.695468][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.760458][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.768344][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.865553][ T36] veth1_macvtap: left promiscuous mode [ 952.893077][ T36] veth0_macvtap: left promiscuous mode [ 952.899016][ T36] veth1_vlan: left promiscuous mode [ 952.925102][ T36] veth0_vlan: left promiscuous mode [ 953.725735][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 953.732700][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 954.696446][ T36] team0 (unregistering): Port device team_slave_1 removed [ 954.754361][ T36] team0 (unregistering): Port device team_slave_0 removed [ 955.438746][T10165] netlink: 'syz.0.938': attribute type 29 has an invalid length. [ 955.455965][T10166] netlink: 'syz.0.938': attribute type 29 has an invalid length. [ 956.667233][T10053] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.674741][T10053] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.742741][T10053] bridge_slave_0: entered allmulticast mode [ 956.834663][T10053] bridge_slave_0: entered promiscuous mode [ 956.856597][T10053] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.867194][T10053] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.893877][T10053] bridge_slave_1: entered allmulticast mode [ 956.906541][T10053] bridge_slave_1: entered promiscuous mode [ 957.487003][T10053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.647388][T10053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.206372][T10053] team0: Port device team_slave_0 added [ 958.253132][ T9976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 958.405013][T10053] team0: Port device team_slave_1 added [ 958.418597][ T9976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 958.752036][ T9976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 958.833840][ T9976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 958.986881][T10053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.994203][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.020845][T10053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.249525][T10053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.257048][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.287387][T10053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.431593][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 959.441070][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 960.006159][T10203] netlink: 'syz.3.950': attribute type 29 has an invalid length. [ 960.047064][T10206] netlink: 'syz.3.950': attribute type 29 has an invalid length. [ 960.091564][T10053] hsr_slave_0: entered promiscuous mode [ 960.148301][T10053] hsr_slave_1: entered promiscuous mode [ 961.556134][T10224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.789702][T10229] ===================================================== [ 961.797126][T10229] BUG: KMSAN: uninit-value in pfn_reader_next+0x1d4c/0x3e40 [ 961.806259][T10229] pfn_reader_next+0x1d4c/0x3e40 [ 961.811469][T10229] pfn_reader_first+0xbdc/0xcc0 [ 961.816492][T10229] iopt_area_fill_domains+0x20c/0x13a0 [ 961.822336][T10229] iopt_map_pages+0x1b97/0x2120 [ 961.827381][T10229] iopt_map_common+0x224/0x610 [ 961.832401][T10229] iopt_map_user_pages+0x148/0x1c0 [ 961.837623][T10229] iommufd_ioas_map+0x6a2/0x9b0 [ 961.843032][T10229] iommufd_fops_ioctl+0x82a/0x9e0 [ 961.848298][T10229] __se_sys_ioctl+0x23c/0x400 [ 961.857749][T10229] __x64_sys_ioctl+0x97/0xe0 [ 961.863280][T10229] x64_sys_call+0x18a7/0x3e70 [ 961.868171][T10229] do_syscall_64+0xc9/0xf80 [ 961.873095][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.873942][ T6509] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 961.879157][T10229] [ 961.879186][T10229] Local variable pfns created at: [ 961.896310][T10229] iopt_area_fill_domains+0x5c/0x13a0 [ 961.901871][T10229] iopt_map_pages+0x1b97/0x2120 [ 961.907661][T10229] [ 961.910128][T10229] CPU: 0 UID: 0 PID: 10229 Comm: syz.3.956 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 961.924085][T10229] Tainted: [L]=SOFTLOCKUP [ 961.928838][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 961.939137][T10229] ===================================================== [ 961.946165][T10229] Disabling lock debugging due to kernel taint [ 961.952569][T10229] Kernel panic - not syncing: kmsan.panic set ... [ 961.959143][T10229] CPU: 0 UID: 0 PID: 10229 Comm: syz.3.956 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 961.970648][T10229] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 961.976292][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 961.986493][T10229] Call Trace: [ 961.989874][T10229] [ 961.992897][T10229] __dump_stack+0x26/0x30 [ 961.997425][T10229] dump_stack_lvl+0x50/0x1c0 [ 962.002219][T10229] ? dump_stack+0x12/0x25 [ 962.006748][T10229] dump_stack+0x1e/0x25 [ 962.011080][T10229] vpanic+0x435/0xd40 [ 962.015259][T10229] panic+0x15d/0x160 [ 962.019410][T10229] kmsan_report+0x31a/0x320 [ 962.024141][T10229] ? __msan_warning+0x1b/0x30 [ 962.029007][T10229] ? pfn_reader_next+0x1d4c/0x3e40 [ 962.034264][T10229] ? pfn_reader_first+0xbdc/0xcc0 [ 962.039437][T10229] ? iopt_area_fill_domains+0x20c/0x13a0 [ 962.045256][T10229] ? iopt_map_pages+0x1b97/0x2120 [ 962.050476][T10229] ? iopt_map_common+0x224/0x610 [ 962.055607][T10229] ? iopt_map_user_pages+0x148/0x1c0 [ 962.061219][T10229] ? iommufd_ioas_map+0x6a2/0x9b0 [ 962.066483][T10229] ? iommufd_fops_ioctl+0x82a/0x9e0 [ 962.071900][T10229] ? __se_sys_ioctl+0x23c/0x400 [ 962.076932][T10229] ? __x64_sys_ioctl+0x97/0xe0 [ 962.081918][T10229] ? x64_sys_call+0x18a7/0x3e70 [ 962.086969][T10229] ? do_syscall_64+0xc9/0xf80 [ 962.091852][T10229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.098112][T10229] ? kmsan_get_metadata+0xf1/0x160 [ 962.103473][T10229] ? kmsan_get_metadata+0xf1/0x160 [ 962.108928][T10229] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 962.114955][T10229] ? pfn_reader_user_pin+0x1d9e/0x20b0 [ 962.120611][T10229] ? iopt_map_pages+0x1b97/0x2120 [ 962.125813][T10229] ? iopt_map_common+0x224/0x610 [ 962.130854][T10229] ? iopt_map_user_pages+0x148/0x1c0 [ 962.136244][T10229] ? iommufd_ioas_map+0x6a2/0x9b0 [ 962.141388][T10229] ? iommufd_fops_ioctl+0x82a/0x9e0 [ 962.146802][T10229] ? __se_sys_ioctl+0x23c/0x400 [ 962.151763][T10229] ? kmsan_get_metadata+0xf1/0x160 [ 962.157021][T10229] __msan_warning+0x1b/0x30 [ 962.161663][T10229] pfn_reader_next+0x1d4c/0x3e40 [ 962.166759][T10229] ? should_fail_ex+0x45/0x8c0 [ 962.171629][T10229] ? kmsan_get_metadata+0xf1/0x160 [ 962.176872][T10229] ? kmsan_get_metadata+0xf1/0x160 [ 962.182126][T10229] ? kmsan_get_metadata+0xf1/0x160 [ 962.187379][T10229] ? kmsan_get_metadata+0xf1/0x160 [ 962.192644][T10229] pfn_reader_first+0xbdc/0xcc0 [ 962.197647][T10229] iopt_area_fill_domains+0x20c/0x13a0 [ 962.203266][T10229] ? kmsan_get_metadata+0xf1/0x160 [ 962.208544][T10229] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 962.215013][T10229] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 962.221195][T10229] ? kmsan_get_metadata+0xf1/0x160 [ 962.226486][T10229] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 962.232516][T10229] iopt_map_pages+0x1b97/0x2120 [ 962.237598][T10229] iopt_map_common+0x224/0x610 [ 962.242489][T10229] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 962.248429][T10229] iopt_map_user_pages+0x148/0x1c0 [ 962.253669][T10229] iommufd_ioas_map+0x6a2/0x9b0 [ 962.258664][T10229] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 962.264152][T10229] iommufd_fops_ioctl+0x82a/0x9e0 [ 962.269343][T10229] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 962.275011][T10229] __se_sys_ioctl+0x23c/0x400 [ 962.279804][T10229] __x64_sys_ioctl+0x97/0xe0 [ 962.284563][T10229] x64_sys_call+0x18a7/0x3e70 [ 962.289349][T10229] do_syscall_64+0xc9/0xf80 [ 962.293962][T10229] ? clear_bhb_loop+0x40/0x90 [ 962.298755][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.304758][T10229] RIP: 0033:0x7f576e59aeb9 [ 962.309242][T10229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.328977][T10229] RSP: 002b:00007f576f41a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.337510][T10229] RAX: ffffffffffffffda RBX: 00007f576e816270 RCX: 00007f576e59aeb9 [ 962.345647][T10229] RDX: 0000200000000180 RSI: 0000000000003b85 RDI: 0000000000000009 [ 962.353741][T10229] RBP: 00007f576e608c1f R08: 0000000000000000 R09: 0000000000000000 [ 962.361848][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.369899][T10229] R13: 00007f576e816308 R14: 00007f576e816270 R15: 00007ffd6439cc68 [ 962.378006][T10229] [ 962.381738][T10229] Kernel Offset: disabled [ 962.386144][T10229] Rebooting in 86400 seconds..