last executing test programs: 19m53.004311962s ago: executing program 2 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x9c, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x88, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 19m48.973742022s ago: executing program 2 (id=22): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) 19m48.706916071s ago: executing program 2 (id=24): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) 19m46.890275846s ago: executing program 2 (id=26): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 19m45.913011559s ago: executing program 2 (id=32): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 19m40.235863633s ago: executing program 2 (id=46): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700840000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 19m24.773168773s ago: executing program 32 (id=46): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700840000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 18m34.624914926s ago: executing program 4 (id=229): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) 18m33.668784625s ago: executing program 4 (id=234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 18m32.222167133s ago: executing program 4 (id=238): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210080, &(0x7f0000000ac0)={[{@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@nombcache}, {@resuid}]}, 0xfc, 0x5a0, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r0, &(0x7f0000000140), 0x0, 0xe7c) 18m30.722805033s ago: executing program 4 (id=244): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xffffffffffffffff) 18m27.527612328s ago: executing program 4 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x48, r2, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 18m21.054715873s ago: executing program 4 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x210803, 0x0, 0x0, 0x0, 0x0) 18m4.861355684s ago: executing program 33 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x210803, 0x0, 0x0, 0x0, 0x0) 14m46.317362797s ago: executing program 5 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x0], 0x50) pwrite64(r0, 0x0, 0x0, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x4f41, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x7, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) socket(0x400000000010, 0x3, 0x0) 14m40.712666987s ago: executing program 5 (id=699): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, 0x0}}], 0x0, 0x0, 0x0}) 14m40.397659081s ago: executing program 5 (id=701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000013c0)={0x1a4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x187, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @default, @val, @void, [{0xdd, 0x3c, "18aae49bd5937bad5fda023b2a5a78c05782f92fe27196352514ed223d61c8fc17d2692f2a2eecccd55db037f220440957ec558232ad7346e19d0ffb"}, {0xdd, 0x32, "681a1a58e3ff43cdadc26f69deb1ef3ede9aec85a6554b2c7cd5af891f933549794b8d0f911ffdaed3ba6833441f94f5721c"}, {0xdd, 0xaf, "7e6127b1f68192b4d5902dd5c215d8df43165c4061282fcbe5430fdf2448206d0e1561b338289d64b802476bd7d66916ec22a9ba707a7235efa7d79790006ecf9f6cf9dcdddfd6fc6d331c49964061c06dde5fba9c6d0c3e70ab41f94063dfcae6a3094be521aaeb94d767d83c334beb6c7fb826e4445bc76956fa8925f927e16204df31acbbd681b6d593a68b3b3756ff8a78ffb7134aff566b73b93b0d8563ffefa9d451a88c92c5bbd9f569fd49"}, {0xdd, 0x3e, "a4e41a9083b053576d9d76dc84723e8ddd306603321775ff3374e53586cf70e00d1084a60b81dca512e6ed438467c379d4cf25a29e6a4747f6b644b8ad49"}]}}]}, 0x1a4}}, 0x0) 14m40.054427509s ago: executing program 5 (id=704): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) 14m39.568553722s ago: executing program 5 (id=707): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 14m31.971697664s ago: executing program 5 (id=716): socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 14m15.032252144s ago: executing program 34 (id=716): socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 12m27.070960506s ago: executing program 1 (id=913): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x20, 0x0, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 12m27.003351763s ago: executing program 1 (id=915): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000000), 0x2, 0x7a2, &(0x7f0000000980)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) lseek(r0, 0x7, 0x4) 12m26.654477343s ago: executing program 1 (id=916): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) write$FUSE_LSEEK(r0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0xfee8}}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x1e1902, 0x5e) 12m22.644813315s ago: executing program 1 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r3) 12m19.973675098s ago: executing program 1 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) 12m18.363273771s ago: executing program 1 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0xffffffffffffff18, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0x6a98047402e98331, 0x3fe, 0x0, {0x6}}, 0x14}}, 0x0) 12m1.7339753s ago: executing program 35 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0xffffffffffffff18, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0x6a98047402e98331, 0x3fe, 0x0, {0x6}}, 0x14}}, 0x0) 3m12.66320667s ago: executing program 6 (id=1700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r2) 3m9.171941599s ago: executing program 6 (id=1704): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x8, 0x80}, {0x8, 0xfffff820}], 0xee00}, 0x18, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) 3m8.935334893s ago: executing program 6 (id=1706): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="20000000150a01020000"], 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 3m0.796957308s ago: executing program 6 (id=1713): pipe2$watch_queue(0x0, 0x80) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x141000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 2m57.208790233s ago: executing program 6 (id=1718): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 2m53.520298164s ago: executing program 6 (id=1721): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="20000000150a01020000"], 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 2m44.481331589s ago: executing program 0 (id=1731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x4e24, 0xc00, 0x4e22, 0x3, 0xa, 0xa0, 0x80, 0x2c, 0x0, 0xee00}, {0x3, 0x1ff, 0x9, 0x100, 0x80000000, 0x7a8, 0x9, 0x40}, {0x5, 0x4, 0x3, 0x5}, 0x4, 0x6e6bb5, 0x0, 0x0, 0x5, 0x2}, {{@in6=@private1, 0x4d2, 0x6c}, 0x2, @in=@broadcast, 0x3500, 0x3, 0x1, 0x40, 0x3ff, 0x6, 0x80000001}}, 0xe8) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) 2m43.133769358s ago: executing program 0 (id=1732): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x8, 0x80}, {0x8, 0xfffff820}], 0xee00}, 0x18, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) 2m42.270487218s ago: executing program 0 (id=1733): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, 0x0) 2m40.258079427s ago: executing program 0 (id=1734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x83, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) 2m38.77709517s ago: executing program 8 (id=952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1b, 0x7ff, 0x6}}}}]}, 0x48}}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5e0}], 0x1}, 0x4) 2m37.326039691s ago: executing program 36 (id=1721): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="20000000150a01020000"], 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 2m36.331797976s ago: executing program 0 (id=1739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r3) 2m33.450102577s ago: executing program 0 (id=1743): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, 0x0) 2m22.567826464s ago: executing program 37 (id=952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1b, 0x7ff, 0x6}}}}]}, 0x48}}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5e0}], 0x1}, 0x4) 2m17.067118353s ago: executing program 38 (id=1743): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, 0x0) 2.33176044s ago: executing program 3 (id=1893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r3) 1.320335809s ago: executing program 3 (id=1894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000023000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) 1.28812742s ago: executing program 3 (id=1895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd27, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0c, 0xfac02, 0xfac04]}]]}, 0x34}}, 0x0) 1.248842138s ago: executing program 3 (id=1896): unlinkat(0xffffffffffffffff, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 89.459621ms ago: executing program 3 (id=1897): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="ba831778e8b98deb36b2a820fbb4b2d5b796a2b7f9dab35aa1e9227ca36f1cd480682ddf3b", 0x25}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2400c0a2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x1}], 0x1) 0s ago: executing program 3 (id=1898): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 967.265274][T12486] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 967.265296][T12486] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1520: Failed to acquire dquot type 0 [ 967.265319][T12486] loop0: lost filesystem error report for type 5 error -117 [ 967.328743][T12486] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 967.328769][T12486] loop0: lost filesystem error report for type 5 error -117 [ 967.372317][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.478752][T12486] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.1520: mark_inode_dirty error [ 967.478784][T12486] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 967.478881][T10543] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 967.574608][T10543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 967.594759][T12486] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 967.594891][T12486] EXT4-fs (loop0): 1 orphan inode deleted [ 967.597474][T10543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 967.608045][T10543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 967.616148][T12486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.649953][T10543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 967.791057][T12057] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm kworker/u8:3: lblock 2 mapped to illegal pblock 2 (length 1) [ 967.891634][T12057] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 967.891700][T12057] EXT4-fs error (device loop0): ext4_write_dquot:7014: comm kworker/u8:3: Failed to commit dquot type 0 [ 967.975388][T12057] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 968.129231][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.169655][ T5610] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 968.169687][ T5610] loop0: lost filesystem error report for type 5 error -117 [ 968.313788][ T9825] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 968.347620][T12498] loop6: detected capacity change from 0 to 1024 [ 968.371123][T12498] EXT4-fs: Ignoring removed nobh option [ 968.371149][T12498] EXT4-fs: inline encryption not supported [ 968.417684][ T5610] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 968.417711][ T5610] loop0: lost filesystem error report for type 5 error -117 [ 968.418392][ T5610] EXT4-fs error (device loop0): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 968.418421][ T5610] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 968.495400][ T9825] usb 4-1: Using ep0 maxpacket: 32 [ 968.519759][T12498] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 968.519759][T12498] [ 968.548641][ T9825] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 968.548671][ T9825] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 968.565846][ T9825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 968.565871][ T9825] usb 4-1: config 1 has no interface number 0 [ 968.565912][ T9825] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 968.565936][ T9825] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 968.565975][ T9825] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 968.565997][ T9825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.662116][ T9825] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 969.693300][ T9825] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 969.802425][T10543] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 969.860698][T10543] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 969.869801][T10543] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 969.887293][T10543] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 969.890268][ T9] usb 4-1: USB disconnect, device number 46 [ 969.902608][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 970.012040][T10543] Bluetooth: hci3: command tx timeout [ 970.026374][ T9955] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 970.589890][ T5625] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 972.246347][ T9955] Bluetooth: hci3: command tx timeout [ 972.359381][ T9955] Bluetooth: hci5: command tx timeout [ 972.363216][T12534] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 974.415193][ T9955] Bluetooth: hci3: command tx timeout [ 974.645849][ T9955] Bluetooth: hci5: command tx timeout [ 976.498148][T12558] loop3: detected capacity change from 0 to 512 [ 976.534953][T12558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.535089][T12558] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 976.627710][ T9955] Bluetooth: hci3: command tx timeout [ 976.799343][ T9955] Bluetooth: hci5: command tx timeout [ 977.687658][T12489] lo speed is unknown, defaulting to 1000 [ 978.150204][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.981170][T12503] lo speed is unknown, defaulting to 1000 [ 979.021238][ T9955] Bluetooth: hci5: command tx timeout [ 980.274527][T12592] loop3: detected capacity change from 0 to 256 [ 980.279875][T12592] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 980.279893][T12592] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 980.425111][T12592] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 980.446372][T12592] exFAT-fs (loop3): failed to load alloc-bitmap [ 980.446388][T12592] exFAT-fs (loop3): failed to recognize exfat type [ 982.316973][T12616] loop6: detected capacity change from 0 to 64 [ 982.932455][ T5899] bridge_slave_1: left allmulticast mode [ 982.932500][ T5899] bridge_slave_1: left promiscuous mode [ 982.932804][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.030970][ T5899] bridge_slave_0: left allmulticast mode [ 983.031007][ T5899] bridge_slave_0: left promiscuous mode [ 983.093630][ T37] audit: type=1107 audit(1778151898.387:37): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 983.212542][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.695459][T10536] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 984.855816][T10536] usb 4-1: Using ep0 maxpacket: 16 [ 984.857806][T10536] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 984.857843][T10536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.857861][T10536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.857877][T10536] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 984.857906][T10536] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 984.857924][T10536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.980316][T12638] loop6: detected capacity change from 0 to 256 [ 985.004098][T12638] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 985.004169][T12638] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 985.041102][T10536] usb 4-1: config 0 descriptor?? [ 985.104431][T12638] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 985.105260][T12638] exFAT-fs (loop6): failed to load alloc-bitmap [ 985.105274][T12638] exFAT-fs (loop6): failed to recognize exfat type [ 985.896480][T10536] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0003/input/input50 [ 986.044944][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.045057][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.809565][T10536] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0003/input/input51 [ 988.325536][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.460381][T10536] kye 0003:0458:5013.0003: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 988.485372][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.514297][T10536] usb 4-1: USB disconnect, device number 47 [ 988.602673][ T5899] bond0 (unregistering): Released all slaves [ 989.036561][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17 [ 989.166598][T12650] fido_id[12650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 989.750093][ T5899] hsr_slave_0: left promiscuous mode [ 989.796064][ T5899] hsr_slave_1: left promiscuous mode [ 989.797274][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.818889][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.009179][ T5899] veth0_vlan: left promiscuous mode [ 990.564133][ T37] audit: type=1107 audit(1778151904.900:38): pid=12651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 993.351336][T12677] loop3: detected capacity change from 0 to 64 [ 994.500053][ T5899] team0 (unregistering): Port device team_slave_1 removed [ 994.635837][ T5899] team0 (unregistering): Port device team_slave_0 removed [ 994.807045][ T32] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 994.971412][ T32] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 994.971444][ T32] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 994.971464][ T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 994.971514][ T32] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 994.971541][ T32] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 994.974205][ T32] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 994.974234][ T32] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 994.974256][ T32] usb 7-1: Product: syz [ 994.974272][ T32] usb 7-1: Manufacturer: syz [ 995.054711][ T32] cdc_wdm 7-1:1.0: skipping garbage [ 995.054732][ T32] cdc_wdm 7-1:1.0: skipping garbage [ 995.120213][ T32] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 995.120236][ T32] cdc_wdm 7-1:1.0: Unknown control protocol [ 995.794096][T12489] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.795986][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.801863][T12489] bridge_slave_0: entered allmulticast mode [ 995.859448][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 995.860158][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1568'. [ 995.968350][T12489] bridge_slave_0: entered promiscuous mode [ 997.229547][T12697] loop0: detected capacity change from 0 to 32768 [ 997.649937][T12489] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.650553][T12489] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.651086][T12489] bridge_slave_1: entered allmulticast mode [ 997.664248][T12489] bridge_slave_1: entered promiscuous mode [ 997.977199][T12697] JBD2: Ignoring recovery information on journal [ 998.249374][ T32] usb 7-1: USB disconnect, device number 29 [ 998.304814][T12489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.379373][T12489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.381836][T12503] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.382221][T12503] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.382537][T12503] bridge_slave_0: entered allmulticast mode [ 998.480171][T12697] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 998.498398][T12503] bridge_slave_0: entered promiscuous mode [ 998.627914][T12503] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.628191][T12503] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.628524][T12503] bridge_slave_1: entered allmulticast mode [ 998.633739][T12503] bridge_slave_1: entered promiscuous mode [ 998.987457][ T9825] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 999.151862][ T9825] usb 7-1: Using ep0 maxpacket: 16 [ 999.161933][ T9825] usb 7-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 999.161989][ T9825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 999.162019][ T9825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 999.162042][ T9825] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 999.162067][ T9825] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 999.222630][ T9825] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 999.222654][ T9825] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 999.222669][ T9825] usb 7-1: Manufacturer: syz [ 999.257594][ T9825] usb 7-1: config 0 descriptor?? [ 999.422583][T12489] team0: Port device team_slave_0 added [ 999.488894][T12503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.498914][T12489] team0: Port device team_slave_1 added [ 999.524392][T12503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.698699][ T9825] rc_core: IR keymap rc-hauppauge not found [ 999.698718][ T9825] Registered IR keymap rc-empty [ 999.698850][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 999.720504][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 999.746528][ T9825] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 999.898015][ T9825] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input52 [ 999.926593][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 999.941701][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18 [ 999.971258][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 999.983537][ T5610] ocfs2: Unmounting device (7,0) on (node local) [ 999.992498][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.010727][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.102259][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.115481][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.140930][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.158363][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.181280][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.200999][ T9825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.268524][ T9825] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1000.268550][ T9825] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1000.281667][T12489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.281709][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.281791][T12489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.393758][ T9825] usb 7-1: USB disconnect, device number 30 [ 1000.457514][T12503] team0: Port device team_slave_0 added [ 1000.465762][T12489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.465774][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.465795][T12489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.571707][T12503] team0: Port device team_slave_1 added [ 1000.827146][T12503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.827164][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.827195][T12503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.882145][T12736] loop3: detected capacity change from 0 to 512 [ 1000.891619][T12736] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1000.891653][T12736] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1001.069229][T12736] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.1577: Invalid inode table block 1 in block_group 0 [ 1001.069277][T12736] loop3: lost filesystem error report for type 5 error -117 [ 1001.078718][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1001.078743][ C0] EXT4-fs (loop3): initial error at time 1778151915: __ext4_get_inode_loc:4885 [ 1001.078768][ C0] EXT4-fs (loop3): last error at time 1778151915: __ext4_get_inode_loc:4885 [ 1001.097636][T12736] EXT4-fs (loop3): Remounting filesystem read-only [ 1001.098020][T12736] EXT4-fs (loop3): get root inode failed [ 1001.098054][T12736] EXT4-fs (loop3): mount failed [ 1002.191699][T12503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.191718][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.191749][T12503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.234353][T12489] hsr_slave_0: entered promiscuous mode [ 1002.237827][T12489] hsr_slave_1: entered promiscuous mode [ 1002.698152][T12503] hsr_slave_0: entered promiscuous mode [ 1002.709329][T12503] hsr_slave_1: entered promiscuous mode [ 1002.715804][T12503] debugfs: 'hsr0' already exists in 'hsr' [ 1002.715885][T12503] Cannot create hsr debugfs directory [ 1003.153861][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1578'. [ 1003.155522][T12750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1578'. [ 1004.218465][T12752] loop3: detected capacity change from 0 to 4096 [ 1004.299092][T12752] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1005.071571][T12752] ntfs3(loop3): ino=19, mi_enum_attr [ 1005.100694][T12752] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1005.848381][ T5899] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.358461][ T37] audit: type=1800 audit(1778151920.154:39): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1579" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 1006.603644][ T5269] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1008.117371][T12786] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 1008.179400][T12789] loop6: detected capacity change from 0 to 512 [ 1008.200581][T12789] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1008.200607][T12789] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1008.201751][T12789] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.1587: Invalid inode table block 1 in block_group 0 [ 1008.201781][T12789] loop6: lost filesystem error report for type 5 error -117 [ 1008.206381][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1008.206433][ C1] EXT4-fs (loop6): initial error at time 1778151921: __ext4_get_inode_loc:4885 [ 1008.206491][ C1] EXT4-fs (loop6): last error at time 1778151921: __ext4_get_inode_loc:4885 [ 1008.209178][T12789] EXT4-fs (loop6): Remounting filesystem read-only [ 1008.209538][T12789] EXT4-fs (loop6): get root inode failed [ 1008.209568][T12789] EXT4-fs (loop6): mount failed [ 1008.598029][ T5899] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.681301][ T5899] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.766842][T12800] loop3: detected capacity change from 0 to 128 [ 1011.809132][T12815] loop0: detected capacity change from 0 to 64 [ 1013.286186][ T5899] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.173870][T12831] loop6: detected capacity change from 0 to 1024 [ 1015.201906][T12831] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1015.342566][T12831] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.1600: lblock 2 mapped to illegal pblock 2 (length 1) [ 1015.342608][T12831] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1015.353654][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1015.353677][ C0] EXT4-fs (loop6): initial error at time 1778151928: ext4_map_blocks:791: inode 3: block 2 [ 1015.353711][ C0] EXT4-fs (loop6): last error at time 1778151928: ext4_map_blocks:791: inode 3: block 2 [ 1015.355683][T12831] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1015.355828][T12831] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.1600: lblock 0 mapped to illegal pblock 48 (length 1) [ 1015.355942][T12831] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1015.421467][T12831] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1015.421486][T12831] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1600: Failed to acquire dquot type 0 [ 1015.421503][T12831] loop6: lost filesystem error report for type 5 error -117 [ 1015.422017][T12831] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1015.422048][T12831] loop6: lost filesystem error report for type 5 error -117 [ 1015.422397][T12831] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.1600: mark_inode_dirty error [ 1015.422417][T12831] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1015.423117][T12831] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1015.423183][T12831] EXT4-fs (loop6): 1 orphan inode deleted [ 1015.428223][T12831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.482579][ T1193] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 1015.865703][ T1193] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1015.865996][ T1193] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 0 [ 1016.172265][T12831] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1016.809872][ T7462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.023624][T12855] ALSA: mixer_oss: invalid OSS volume '' [ 1026.428598][T12889] ALSA: mixer_oss: invalid OSS volume '' [ 1026.451017][ T32] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1027.087812][ T5269] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1027.108503][ T32] usb 7-1: Using ep0 maxpacket: 16 [ 1027.116858][ T32] usb 7-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 1027.116913][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1027.116945][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1027.116969][ T32] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1027.116995][ T32] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1027.118852][ T32] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1027.118882][ T32] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1027.118905][ T32] usb 7-1: Manufacturer: syz [ 1028.680701][ T32] usb 7-1: config 0 descriptor?? [ 1029.309414][ T32] usb 7-1: can't set config #0, error -71 [ 1029.356168][ T32] usb 7-1: USB disconnect, device number 31 [ 1031.018504][T12925] loop0: detected capacity change from 0 to 1024 [ 1031.021850][T12925] EXT4-fs: Ignoring removed nobh option [ 1031.021876][T12925] EXT4-fs: inline encryption not supported [ 1031.028469][T12925] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1031.028469][T12925] [ 1031.366970][ T5899] bridge_slave_1: left allmulticast mode [ 1031.367003][ T5899] bridge_slave_1: left promiscuous mode [ 1031.367303][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.528506][ T5899] bridge_slave_0: left allmulticast mode [ 1031.528544][ T5899] bridge_slave_0: left promiscuous mode [ 1031.528812][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.243190][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1032.330775][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1032.341184][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1032.381856][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1032.771278][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1033.657070][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1033.707572][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1033.716342][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1033.717762][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1033.718707][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1035.026885][ T9955] Bluetooth: hci0: command tx timeout [ 1035.104739][ T44] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1035.333869][T12962] loop3: detected capacity change from 0 to 32768 [ 1035.355945][T12962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1628 (12962) [ 1035.899868][ T9955] Bluetooth: hci6: command tx timeout [ 1036.708205][T12962] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1036.708245][T12962] BTRFS info (device loop3): using crc32c checksum algorithm [ 1036.815273][T12057] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 1036.892780][T12962] BTRFS warning (device loop3): couldn't read tree root [ 1036.892809][T12962] BTRFS warning (device loop3): try to load backup roots slot 1 [ 1036.893278][ T13] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 1036.893444][T12962] BTRFS warning (device loop3): couldn't read tree root [ 1036.893465][T12962] BTRFS warning (device loop3): try to load backup roots slot 2 [ 1036.893838][ T13] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1036.894801][T12962] BTRFS warning (device loop3): couldn't read tree root [ 1036.894823][T12962] BTRFS warning (device loop3): try to load backup roots slot 3 [ 1037.019651][T12962] BTRFS info (device loop3): checking UUID tree [ 1037.023826][T12962] BTRFS info (device loop3): setting nodatasum [ 1037.023873][T12962] BTRFS info (device loop3): enabling ssd optimizations [ 1037.023893][T12962] BTRFS info (device loop3): turning on flush-on-commit [ 1037.023910][T12962] BTRFS info (device loop3): turning on async discard [ 1037.023928][T12962] BTRFS info (device loop3): enabling free space tree [ 1037.023946][T12962] BTRFS info (device loop3): trying to use backup root at mount time [ 1037.024051][T12962] BTRFS info (device loop3): max_inline set to 0 [ 1037.399105][T12952] ALSA: mixer_oss: invalid OSS volume '' [ 1038.094200][ T9955] Bluetooth: hci6: command tx timeout [ 1040.316739][ T9955] Bluetooth: hci6: command tx timeout [ 1041.400260][T12988] loop6: detected capacity change from 0 to 1024 [ 1041.403181][T12988] EXT4-fs: Ignoring removed nobh option [ 1041.403206][T12988] EXT4-fs: inline encryption not supported [ 1041.452184][T12988] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1041.452184][T12988] [ 1042.550128][ T9955] Bluetooth: hci6: command tx timeout [ 1043.027886][ T9955] Bluetooth: hci0: command tx timeout [ 1043.039959][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 1043.044116][ T44] usb 7-1: device descriptor read/all, error -71 [ 1043.596506][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.667288][ T5613] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1043.760606][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.843591][ T5899] bond0 (unregistering): Released all slaves [ 1045.964857][ T9955] Bluetooth: hci0: command tx timeout [ 1047.340197][ T5899] hsr_slave_0: left promiscuous mode [ 1048.100190][T13020] loop3: detected capacity change from 0 to 16 [ 1048.183730][ T9955] Bluetooth: hci0: command tx timeout [ 1048.200284][T13020] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 1048.200745][T13020] erofs (device loop3): mounted with root inode @ nid 36. [ 1048.217536][ T9955] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1048.405789][ T5899] hsr_slave_1: left promiscuous mode [ 1048.488945][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.488992][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.498528][T13020] syz.3.1637: attempt to access beyond end of device [ 1048.498528][T13020] loop3: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 1048.499289][T13020] erofs (device loop3): read error -5 @ 0 of nid 36 [ 1048.716997][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.717028][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.739947][T13027] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1638'. [ 1048.807787][T13027] loop6: detected capacity change from 0 to 256 [ 1048.809036][T13027] vfat: Unknown parameter 'iocharseÚýdŠ¾}àt' [ 1050.511957][ T5899] veth1_macvtap: left promiscuous mode [ 1050.514614][ T5899] veth0_macvtap: left promiscuous mode [ 1050.518815][ T5899] veth1_vlan: left promiscuous mode [ 1050.519244][ T5899] veth0_vlan: left promiscuous mode [ 1051.301941][T13035] ALSA: mixer_oss: invalid OSS volume '' [ 1054.068674][T13038] loop6: detected capacity change from 0 to 64 [ 1054.685953][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.686071][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.795284][T13038] hfs: inconsistency in B*Tree (4,2,0,3,0) [ 1054.795325][T13038] hfs: get root inode failed [ 1054.933061][T13040] loop3: detected capacity change from 0 to 1024 [ 1054.951307][T13040] EXT4-fs: Ignoring removed nobh option [ 1054.951381][T13040] EXT4-fs: inline encryption not supported [ 1054.967178][T13040] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 1054.967178][T13040] [ 1057.158482][ T5899] team0 (unregistering): Port device team_slave_1 removed [ 1057.559976][T13063] loop6: detected capacity change from 0 to 24 [ 1057.561270][T13063] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1057.787841][T13060] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1647'. [ 1057.797266][T13060] loop0: detected capacity change from 0 to 256 [ 1057.798689][T13060] vfat: Unknown parameter 'iocharseÚýdŠ¾}àt' [ 1058.280214][ T5899] team0 (unregistering): Port device team_slave_0 removed [ 1058.775474][T13063] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1059.645849][T13085] loop3: detected capacity change from 0 to 1024 [ 1059.673205][T13085] EXT4-fs: Ignoring removed nobh option [ 1059.673246][T13085] EXT4-fs: inline encryption not supported [ 1059.677067][T13085] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 1059.677067][T13085] [ 1059.829109][T12926] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1060.017239][T12926] usb 7-1: device descriptor read/64, error -71 [ 1060.375255][T12926] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1060.523756][T12926] usb 7-1: device descriptor read/64, error -71 [ 1060.641801][T12926] usb usb7-port1: attempt power cycle [ 1061.401058][T12926] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1061.423604][T12926] usb 7-1: device descriptor read/8, error -71 [ 1061.704751][T12934] lo speed is unknown, defaulting to 1000 [ 1061.753176][T12949] lo speed is unknown, defaulting to 1000 [ 1061.867716][T12926] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1061.881545][T12926] usb 7-1: device descriptor read/8, error -71 [ 1062.036880][T12926] usb usb7-port1: unable to enumerate USB device [ 1062.397427][T13115] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1657'. [ 1062.412142][T13115] loop0: detected capacity change from 0 to 256 [ 1062.413486][T13115] vfat: Unknown parameter 'iocharseÚýdŠ¾}àt' [ 1063.040054][T13131] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1063.206231][ T5269] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1063.723448][ T5625] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1065.495436][T13159] loop3: detected capacity change from 0 to 1024 [ 1065.496649][T13159] EXT4-fs: Ignoring removed nobh option [ 1065.496674][T13159] EXT4-fs: inline encryption not supported [ 1065.502150][T13159] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 1065.502150][T13159] [ 1065.784605][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1066.078179][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1066.078226][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1066.078265][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1066.078402][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1066.078448][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1066.172705][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1066.172737][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1066.172756][ T9] usb 7-1: Product: syz [ 1066.172769][ T9] usb 7-1: Manufacturer: syz [ 1066.377939][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 1066.377962][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 1066.545904][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1066.545925][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 1066.723458][T13160] loop0: detected capacity change from 0 to 32768 [ 1066.725757][T13160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1664 (13160) [ 1066.759588][ T5899] bridge_slave_1: left allmulticast mode [ 1066.759630][ T5899] bridge_slave_1: left promiscuous mode [ 1066.760043][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.789422][T13160] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1066.789454][T13160] BTRFS info (device loop0): using crc32c checksum algorithm [ 1066.850553][ T5899] bridge_slave_0: left allmulticast mode [ 1066.850669][ T5899] bridge_slave_0: left promiscuous mode [ 1066.850942][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.855827][ T9] usb 7-1: USB disconnect, device number 38 [ 1066.912000][T13171] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 1066.912020][T13171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1666'. [ 1067.030077][T13171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1666'. [ 1067.195478][T13160] BTRFS info (device loop0): enabling ssd optimizations [ 1067.195507][T13160] BTRFS info (device loop0): turning on flush-on-commit [ 1067.195526][T13160] BTRFS info (device loop0): enabling free space tree [ 1067.195545][T13160] BTRFS info (device loop0): enabling auto defrag [ 1067.195572][T13160] BTRFS info (device loop0): use lzo compression, level 1 [ 1067.195591][T13160] BTRFS info (device loop0): max_inline set to 4096 [ 1067.459355][ T5610] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1068.058234][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.143161][T13191] loop0: detected capacity change from 0 to 64 [ 1068.308667][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.419668][ T5899] bond0 (unregistering): Released all slaves [ 1068.701970][T13191] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1070.891325][T13203] loop0: detected capacity change from 0 to 512 [ 1070.910850][T13203] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1070.910883][T13203] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1071.014027][T13203] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.1669: Invalid inode table block 1 in block_group 0 [ 1071.014059][T13203] loop0: lost filesystem error report for type 5 error -117 [ 1071.017289][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1071.017311][ C1] EXT4-fs (loop0): initial error at time 1778151980: __ext4_get_inode_loc:4885 [ 1071.017337][ C1] EXT4-fs (loop0): last error at time 1778151980: __ext4_get_inode_loc:4885 [ 1071.116816][T13203] EXT4-fs (loop0): Remounting filesystem read-only [ 1071.116933][T13203] EXT4-fs (loop0): get root inode failed [ 1071.116950][T13203] EXT4-fs (loop0): mount failed [ 1071.205022][T13205] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1071.242412][ T5899] hsr_slave_0: left promiscuous mode [ 1071.318074][ T5899] hsr_slave_1: left promiscuous mode [ 1071.319307][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.376551][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.067163][ T9955] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1072.160810][T12926] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1072.439331][T12926] usb 4-1: device descriptor read/64, error -71 [ 1072.490187][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 1072.508323][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1674'. [ 1075.991624][T12926] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1077.283263][T13225] loop6: detected capacity change from 0 to 128 [ 1077.695490][ T5899] team0 (unregistering): Port device team_slave_1 removed [ 1077.964407][ T5899] team0 (unregistering): Port device team_slave_0 removed [ 1078.581133][T13230] binder: 13229:13230 ioctl c0285840 200000000000 returned -22 [ 1080.446847][T13254] loop0: detected capacity change from 0 to 256 [ 1080.538501][T13254] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1080.538558][T13254] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1080.750415][T13254] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 1080.751238][T13254] exFAT-fs (loop0): failed to load alloc-bitmap [ 1080.751253][T13254] exFAT-fs (loop0): failed to recognize exfat type [ 1082.075705][T12934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.076180][T12934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.076483][T12934] bridge_slave_0: entered allmulticast mode [ 1082.151272][T12934] bridge_slave_0: entered promiscuous mode [ 1082.210818][T12934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.211143][T12934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.211415][T12934] bridge_slave_1: entered allmulticast mode [ 1082.243368][T12934] bridge_slave_1: entered promiscuous mode [ 1084.561616][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1684'. [ 1084.588264][T13290] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1684'. [ 1088.396018][T12949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.396348][T12949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.396780][T12949] bridge_slave_0: entered allmulticast mode [ 1088.400375][T12949] bridge_slave_0: entered promiscuous mode [ 1088.470336][T12934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.510434][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1088.609605][T12949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.609951][T12949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.610283][T12949] bridge_slave_1: entered allmulticast mode [ 1088.649402][ T10] usb 1-1: device descriptor read/64, error -71 [ 1088.661948][T12949] bridge_slave_1: entered promiscuous mode [ 1088.699353][T12934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.905865][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1088.938056][ T5899] bridge_slave_1: left allmulticast mode [ 1088.938100][ T5899] bridge_slave_1: left promiscuous mode [ 1088.938508][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.024601][ T5899] bridge_slave_0: left allmulticast mode [ 1089.024642][ T5899] bridge_slave_0: left promiscuous mode [ 1089.024866][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.044778][ T10] usb 1-1: device descriptor read/64, error -71 [ 1089.174976][ T10] usb usb1-port1: attempt power cycle [ 1089.462642][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.548043][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.568452][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1089.590593][ T10] usb 1-1: device descriptor read/8, error -71 [ 1089.614447][ T5899] bond0 (unregistering): Released all slaves [ 1089.985282][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1090.007567][ T10] usb 1-1: device descriptor read/8, error -71 [ 1090.124661][ T10] usb usb1-port1: unable to enumerate USB device [ 1090.187156][T12949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.211636][T12934] team0: Port device team_slave_0 added [ 1091.340427][T12949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.351268][T12934] team0: Port device team_slave_1 added [ 1092.244242][T13304] ALSA: mixer_oss: invalid OSS volume '' [ 1092.930749][T13310] binder: 13303:13310 ioctl c0285840 200000000000 returned -22 [ 1094.203244][T13325] loop3: detected capacity change from 0 to 256 [ 1094.214052][T13325] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1094.214069][T13325] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1094.261955][T13325] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 1094.262959][T13325] exFAT-fs (loop3): failed to load alloc-bitmap [ 1094.262973][T13325] exFAT-fs (loop3): failed to recognize exfat type [ 1094.267887][ T5899] hsr_slave_0: left promiscuous mode [ 1094.310301][ T5899] hsr_slave_1: left promiscuous mode [ 1094.332733][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.349764][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.472849][ T5899] team0 (unregistering): Port device team_slave_1 removed [ 1096.601358][ T5899] team0 (unregistering): Port device team_slave_0 removed [ 1097.172000][T12949] team0: Port device team_slave_0 added [ 1097.184098][T12949] team0: Port device team_slave_1 added [ 1098.352412][T12949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.352431][T12949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.352459][T12949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.535366][T12949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.535384][T12949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.535416][T12949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.924152][ T9955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1098.974656][ T9955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1098.980660][ T9955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1099.081148][ T9955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1099.110101][ T9955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1099.545395][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1694'. [ 1099.547882][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1694'. [ 1100.059449][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1100.091198][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1100.203794][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1100.251888][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1100.263603][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1101.163017][ T43] bridge_slave_1: left allmulticast mode [ 1101.163055][ T43] bridge_slave_1: left promiscuous mode [ 1101.163364][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.754999][ T43] bridge_slave_0: left allmulticast mode [ 1102.755054][ T43] bridge_slave_0: left promiscuous mode [ 1102.755342][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.762741][ T9955] Bluetooth: hci3: command tx timeout [ 1102.767518][ T9955] Bluetooth: hci0: command tx timeout [ 1103.108417][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.215323][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.282070][ T43] bond0 (unregistering): Released all slaves [ 1104.156339][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1104.230393][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1104.796373][ T32] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1104.828726][T13367] lo speed is unknown, defaulting to 1000 [ 1104.934913][ T32] usb 1-1: device descriptor read/64, error -71 [ 1104.959461][ T9955] Bluetooth: hci0: command tx timeout [ 1104.959480][ T5625] Bluetooth: hci3: command tx timeout [ 1105.192912][ T32] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1105.283683][T13380] lo speed is unknown, defaulting to 1000 [ 1105.330369][ T32] usb 1-1: device descriptor read/64, error -71 [ 1105.456559][ T32] usb usb1-port1: attempt power cycle [ 1105.907334][ T32] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1105.942427][ T32] usb 1-1: device descriptor read/8, error -71 [ 1106.195913][ T32] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1106.218000][ T32] usb 1-1: device descriptor read/8, error -71 [ 1106.335218][ T32] usb usb1-port1: unable to enumerate USB device [ 1106.550413][ T43] bridge_slave_1: left allmulticast mode [ 1106.550446][ T43] bridge_slave_1: left promiscuous mode [ 1106.550692][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.625508][ T43] bridge_slave_0: left allmulticast mode [ 1106.627428][ T43] bridge_slave_0: left promiscuous mode [ 1106.627722][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.008903][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.137680][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.170617][ T5625] Bluetooth: hci0: command tx timeout [ 1107.170646][ T5625] Bluetooth: hci3: command tx timeout [ 1107.269072][T13415] binder: 13413:13415 ioctl c0285840 0 returned -22 [ 1107.293626][ T43] bond0 (unregistering): Released all slaves [ 1108.696465][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.120397][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.393917][ T9955] Bluetooth: hci3: command tx timeout [ 1109.393951][ T9955] Bluetooth: hci0: command tx timeout [ 1109.930208][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1110.032449][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1112.814034][T13367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.814376][T13367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.814659][T13367] bridge_slave_0: entered allmulticast mode [ 1112.844746][T13367] bridge_slave_0: entered promiscuous mode [ 1112.868962][T13367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.874054][T13367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.874346][T13367] bridge_slave_1: entered allmulticast mode [ 1112.903896][T13367] bridge_slave_1: entered promiscuous mode [ 1113.185508][T13367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.290153][T13367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.566859][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1706'. [ 1113.594323][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1706'. [ 1113.650067][T13367] team0: Port device team_slave_0 added [ 1113.717592][T13367] team0: Port device team_slave_1 added [ 1114.075481][T13380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.075828][T13380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.076109][T13380] bridge_slave_0: entered allmulticast mode [ 1114.099565][T13380] bridge_slave_0: entered promiscuous mode [ 1114.127291][T13367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.127306][T13367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.127334][T13367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.130943][T13380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.131329][T13380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.131579][T13380] bridge_slave_1: entered allmulticast mode [ 1114.208678][T13380] bridge_slave_1: entered promiscuous mode [ 1114.511472][T13367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.511489][T13367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.511519][T13367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.873317][T13380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.943129][T13380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.030278][T13367] hsr_slave_0: entered promiscuous mode [ 1116.032598][T13367] hsr_slave_1: entered promiscuous mode [ 1116.049119][ T32] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1116.137285][T13380] team0: Port device team_slave_0 added [ 1116.151652][T13380] team0: Port device team_slave_1 added [ 1116.210948][ T32] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1116.210976][ T32] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1116.210995][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1116.211042][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1116.211068][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1116.222299][ T32] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1116.222337][ T32] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1116.222357][ T32] usb 4-1: Product: syz [ 1116.222371][ T32] usb 4-1: Manufacturer: syz [ 1116.316410][ T32] cdc_wdm 4-1:1.0: skipping garbage [ 1116.316429][ T32] cdc_wdm 4-1:1.0: skipping garbage [ 1116.344761][ T32] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1116.344782][ T32] cdc_wdm 4-1:1.0: Unknown control protocol [ 1116.422441][T12926] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1116.451021][T13380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.451035][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.451062][T13380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.514061][T13380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.514079][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.514110][T13380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.561354][T12926] usb 1-1: device descriptor read/64, error -71 [ 1116.654184][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1116.654342][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1116.654651][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1116.654683][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1116.654919][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1116.654937][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1116.655162][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1116.655180][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1116.655400][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1116.655421][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1116.655642][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1116.655660][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1116.655878][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1116.655895][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1116.656113][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1116.656131][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1116.656331][ T32] usb 4-1: USB disconnect, device number 50 [ 1116.656375][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1116.656393][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1116.656407][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1116.930056][T12926] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1117.002217][T13380] hsr_slave_0: entered promiscuous mode [ 1117.004460][T13380] hsr_slave_1: entered promiscuous mode [ 1117.006356][T13380] debugfs: 'hsr0' already exists in 'hsr' [ 1117.006379][T13380] Cannot create hsr debugfs directory [ 1117.063617][T12926] usb 1-1: device descriptor read/64, error -71 [ 1117.182524][T12926] usb usb1-port1: attempt power cycle [ 1117.544500][T12926] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1117.600319][T12926] usb 1-1: device descriptor read/8, error -71 [ 1117.876010][T13468] binder: 13466:13468 ioctl c0285840 0 returned -22 [ 1117.883373][T12926] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1117.898192][T12926] usb 1-1: device descriptor read/8, error -71 [ 1118.015743][T12926] usb usb1-port1: unable to enumerate USB device [ 1119.207605][T13367] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1119.316861][T13367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1119.398911][T13367] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1119.528262][T13367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1121.911556][T13367] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1122.008615][T13367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1122.029840][T13367] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1122.081197][T13367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1123.019192][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.038052][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.236273][T13380] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1123.694120][T13380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1123.730229][T13380] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1123.760985][T13380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1123.804581][T13380] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1123.841172][T13501] binder: 13499:13501 ioctl c0285840 0 returned -22 [ 1124.048630][T12926] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1124.189494][T13380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1124.366663][T12926] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1124.366695][T12926] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1124.366707][T12926] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1124.366761][T12926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1124.366779][T12926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1124.370581][T12926] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1124.370600][T12926] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1124.370613][T12926] usb 7-1: Product: syz [ 1124.370623][T12926] usb 7-1: Manufacturer: syz [ 1124.520033][T12926] cdc_wdm 7-1:1.0: skipping garbage [ 1124.520048][T12926] cdc_wdm 7-1:1.0: skipping garbage [ 1124.548428][T12926] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1124.548445][T12926] cdc_wdm 7-1:1.0: Unknown control protocol [ 1124.914643][T13380] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1125.044457][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1125.044483][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1125.044716][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1125.044733][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1125.044960][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1125.044977][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1125.045203][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1125.045221][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1125.045446][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1125.045462][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1125.045693][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1125.045712][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1125.045978][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1125.045997][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1125.046237][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1125.046254][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1125.046480][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1125.046497][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1125.046744][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1125.046762][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1125.239487][ T32] usb 7-1: USB disconnect, device number 39 [ 1125.239576][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1125.315808][T13380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1127.186345][T13367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.192503][T13367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.219832][ T5748] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1128.327855][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1721'. [ 1128.577945][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.578132][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.601767][ T5748] usb 4-1: device descriptor read/64, error -71 [ 1128.661088][T13380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.697309][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.699204][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.831760][T13380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.873659][ T5748] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1130.567058][T12057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.569042][T12057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.602780][ T5748] usb 4-1: device descriptor read/64, error -71 [ 1130.747112][ T5748] usb usb4-port1: attempt power cycle [ 1130.820521][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.820623][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.235983][T13553] binder: 13548:13553 ioctl c0285840 200000000000 returned -22 [ 1134.413263][T13562] binder: BINDER_SET_CONTEXT_MGR already set [ 1134.413280][T13562] binder: 13561:13562 ioctl 4018620d 200000004a80 returned -16 [ 1134.479684][T13367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.003396][T13380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.517275][T13367] veth0_vlan: entered promiscuous mode [ 1135.580310][T13367] veth1_vlan: entered promiscuous mode [ 1135.689585][ T32] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1135.699029][T13367] veth0_macvtap: entered promiscuous mode [ 1135.729993][T13367] veth1_macvtap: entered promiscuous mode [ 1135.807163][T13367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.830549][T13367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.852880][ T32] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1135.852910][ T32] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1135.852931][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1135.852985][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1135.853015][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1136.061212][ T32] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1136.061292][ T32] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1136.061362][ T32] usb 4-1: Product: syz [ 1136.061402][ T32] usb 4-1: Manufacturer: syz [ 1136.596072][ T178] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.599676][ T178] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.601928][ T178] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.603783][ T178] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.875794][ T32] cdc_wdm 4-1:1.0: skipping garbage [ 1136.875815][ T32] cdc_wdm 4-1:1.0: skipping garbage [ 1136.881563][ T32] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1136.881584][ T32] cdc_wdm 4-1:1.0: Unknown control protocol [ 1137.099828][ C1] wdm_int_callback: 899 callbacks suppressed [ 1137.099850][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1137.099865][ C1] wdm_int_callback: 899 callbacks suppressed [ 1137.099877][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1137.100256][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1137.100272][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1137.100625][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1137.100640][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1137.100855][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1137.100870][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1137.101126][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1137.101140][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1137.101241][ T32] usb 4-1: USB disconnect, device number 54 [ 1137.101359][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1137.101374][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1137.101387][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1139.923872][ T1502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.923894][ T1502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.263890][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.263911][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.716890][T13380] veth0_vlan: entered promiscuous mode [ 1140.858404][T13380] veth1_vlan: entered promiscuous mode [ 1142.310931][T13380] veth0_macvtap: entered promiscuous mode [ 1142.424133][T13380] veth1_macvtap: entered promiscuous mode [ 1142.721658][T13608] binder: 13604:13608 ioctl c0285840 200000000000 returned -22 [ 1143.974116][T13380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.284377][ T9955] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1145.383499][ T9955] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1145.422729][ T9955] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1145.451577][ T9955] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1145.452404][ T9955] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1148.101377][ T9955] Bluetooth: hci5: command tx timeout [ 1150.418635][ T9955] Bluetooth: hci5: command tx timeout [ 1151.672815][T13655] binder: 13653:13655 ioctl c0285840 200000000000 returned -22 [ 1152.568043][ T9955] Bluetooth: hci5: command tx timeout [ 1154.827994][ T9955] Bluetooth: hci5: command tx timeout [ 1156.153290][ T822] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1156.313535][ T822] usb 4-1: device descriptor read/64, error -71 [ 1156.605342][ T822] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1156.741066][ T822] usb 4-1: device descriptor read/64, error -71 [ 1156.859235][ T822] usb usb4-port1: attempt power cycle [ 1157.244506][ T822] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1157.298124][ T822] usb 4-1: device descriptor read/8, error -71 [ 1157.569772][ T822] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1157.653687][ T822] usb 4-1: device descriptor read/8, error -71 [ 1157.668191][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1157.767263][ T822] usb usb4-port1: unable to enumerate USB device [ 1157.769126][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1157.771767][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1157.773815][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1157.774559][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1160.395479][ T9955] Bluetooth: hci1: command tx timeout [ 1162.673384][ T9955] Bluetooth: hci1: command tx timeout [ 1163.197324][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1163.344135][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1164.052312][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1164.081068][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1164.081782][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1164.872985][ T9955] Bluetooth: hci1: command tx timeout [ 1165.721025][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1165.733028][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1165.740563][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1165.765140][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1165.853347][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1166.585074][ T9955] Bluetooth: hci6: command tx timeout [ 1167.129198][ T9955] Bluetooth: hci1: command tx timeout [ 1168.527154][ T9955] Bluetooth: hci7: command tx timeout [ 1168.816140][ T9955] Bluetooth: hci6: command tx timeout [ 1170.013496][ T822] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1170.181735][ T822] usb 4-1: device descriptor read/64, error -71 [ 1170.453059][ T822] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1170.633046][ T822] usb 4-1: device descriptor read/64, error -71 [ 1170.710617][ T9955] Bluetooth: hci7: command tx timeout [ 1170.784591][ T822] usb usb4-port1: attempt power cycle [ 1171.028369][ T9955] Bluetooth: hci6: command tx timeout [ 1171.169232][ T822] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1171.189026][ T822] usb 4-1: device descriptor read/8, error -71 [ 1171.445724][ T822] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1171.466902][ T822] usb 4-1: device descriptor read/8, error -71 [ 1171.584933][ T822] usb usb4-port1: unable to enumerate USB device [ 1172.944508][ T9955] Bluetooth: hci7: command tx timeout [ 1173.251050][ T9955] Bluetooth: hci6: command tx timeout [ 1175.131717][ T9955] Bluetooth: hci7: command tx timeout [ 1181.543552][T13751] loop3: detected capacity change from 0 to 256 [ 1181.568723][T13751] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 1181.607510][ T997] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.662157][T13753] loop3: detected capacity change from 0 to 40427 [ 1182.667881][T13753] F2FS-fs (loop3): build fault injection rate: 14 [ 1182.667937][T13753] F2FS-fs (loop3): build fault injection type: 0xe4 [ 1182.670893][T13753] F2FS-fs (loop3): invalid crc value [ 1182.702066][T13753] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 1183.102778][T13753] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1183.180906][T13753] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1183.209969][T13753] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x89d/0x2060 [ 1183.247232][ T997] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.434091][T13753] F2FS-fs (loop3): inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x28d/0x460 [ 1183.592624][ T5613] syz-executor: attempt to access beyond end of device [ 1183.592624][ T5613] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1183.626624][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1183.626649][ T5613] Tainted: [L]=SOFTLOCKUP [ 1183.626654][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1183.626680][ T5613] Call Trace: [ 1183.626686][ T5613] [ 1183.626692][ T5613] dump_stack_lvl+0xe8/0x150 [ 1183.626716][ T5613] f2fs_stop_checkpoint+0x383/0x540 [ 1183.626739][ T5613] f2fs_write_end_io+0x1274/0x1740 [ 1183.626783][ T5613] __submit_merged_bio+0x256/0x6a0 [ 1183.626808][ T5613] __submit_merged_write_cond+0x3c9/0x4e0 [ 1183.626854][ T5613] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1183.626905][ T5613] f2fs_write_data_pages+0x287e/0x34f0 [ 1183.626936][ T5613] ? unwind_next_frame+0xa6/0x2550 [ 1183.626963][ T5613] ? lock_release+0x4b/0x3c0 [ 1183.627020][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1183.627102][ T5613] ? do_raw_spin_lock+0x12b/0x2f0 [ 1183.627146][ T5613] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1183.627164][ T5613] ? lockdep_hardirqs_on+0x7a/0x110 [ 1183.627181][ T5613] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1183.627198][ T5613] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1183.627220][ T5613] ? reacquire_held_locks+0x104/0x190 [ 1183.627239][ T5613] ? rt_spin_lock+0x1e0/0x400 [ 1183.627266][ T5613] ? rt_spin_unlock+0x14f/0x200 [ 1183.627291][ T5613] ? rt_spin_unlock+0x160/0x200 [ 1183.627312][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1183.627336][ T5613] do_writepages+0x32e/0x550 [ 1183.627356][ T5613] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1183.627380][ T5613] ? rt_spin_unlock+0x14f/0x200 [ 1183.627409][ T5613] filemap_fdatawrite+0x1ec/0x2f0 [ 1183.627430][ T5613] ? irqentry_exit+0x218/0x780 [ 1183.627447][ T5613] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1183.627492][ T5613] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1183.627517][ T5613] ? __rcu_read_unlock+0x83/0xe0 [ 1183.627542][ T5613] ? rt_spin_unlock+0x160/0x200 [ 1183.627566][ T5613] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1183.627600][ T5613] f2fs_write_checkpoint+0x9df/0x26a0 [ 1183.627623][ T5613] ? __lock_acquire+0x6b5/0x2d10 [ 1183.627661][ T5613] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1183.627726][ T5613] kill_f2fs_super+0x314/0x730 [ 1183.627758][ T5613] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1183.627791][ T5613] ? lockdep_hardirqs_on+0x7a/0x110 [ 1183.627837][ T5613] deactivate_locked_super+0xbc/0x130 [ 1183.627861][ T5613] cleanup_mnt+0x437/0x4d0 [ 1183.627885][ T5613] ? _raw_spin_unlock_irq+0x23/0x50 [ 1183.627908][ T5613] task_work_run+0x1d9/0x270 [ 1183.627929][ T5613] ? __pfx_task_work_run+0x10/0x10 [ 1183.627961][ T5613] exit_to_user_mode_loop+0xed/0x4d0 [ 1183.627977][ T5613] ? rcu_is_watching+0x15/0xb0 [ 1183.627997][ T5613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.628015][ T5613] ? do_syscall_64+0x33e/0xf80 [ 1183.628032][ T5613] ? trace_irq_disable+0x3b/0x140 [ 1183.628057][ T5613] ? clear_bhb_loop+0x40/0x90 [ 1183.628077][ T5613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.628106][ T5613] [ 1183.637522][ T5613] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1184.320998][ T997] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.371876][T13623] lo speed is unknown, defaulting to 1000 [ 1184.753791][ T997] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.805282][T13672] lo speed is unknown, defaulting to 1000 [ 1184.828636][T13687] lo speed is unknown, defaulting to 1000 [ 1184.885377][T13699] lo speed is unknown, defaulting to 1000 [ 1186.769327][ T997] bridge_slave_1: left allmulticast mode [ 1186.769375][ T997] bridge_slave_1: left promiscuous mode [ 1186.769657][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.877049][ T997] bridge_slave_0: left allmulticast mode [ 1186.892941][ T997] bridge_slave_0: left promiscuous mode [ 1186.893202][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.945037][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.030740][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.074625][ T997] bond0 (unregistering): Released all slaves [ 1189.581639][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1189.581739][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1190.794761][T13623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.795051][T13623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.795342][T13623] bridge_slave_0: entered allmulticast mode [ 1190.820035][T13623] bridge_slave_0: entered promiscuous mode [ 1190.829109][T13672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.837438][T13672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.837655][T13672] bridge_slave_0: entered allmulticast mode [ 1190.854715][T13672] bridge_slave_0: entered promiscuous mode [ 1190.880558][T13816] loop3: detected capacity change from 0 to 4096 [ 1190.928729][ T997] tipc: Disabling bearer [ 1190.974136][ T997] tipc: Left network mode [ 1191.052735][T13623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.053075][T13623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.053403][T13623] bridge_slave_1: entered allmulticast mode [ 1191.088261][T13623] bridge_slave_1: entered promiscuous mode [ 1191.092244][T13672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.092524][T13672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.092757][T13672] bridge_slave_1: entered allmulticast mode [ 1191.126989][T13672] bridge_slave_1: entered promiscuous mode [ 1192.320365][T13623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.352355][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1192.506783][T13672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.517856][T13687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.518291][T13687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.518612][T13687] bridge_slave_0: entered allmulticast mode [ 1192.524688][T13687] bridge_slave_0: entered promiscuous mode [ 1192.623335][T13623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.643084][T13672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.643509][T13687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.643846][T13687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.644133][T13687] bridge_slave_1: entered allmulticast mode [ 1192.678192][T13687] bridge_slave_1: entered promiscuous mode [ 1192.680921][T13699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.681236][T13699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.681835][T13699] bridge_slave_0: entered allmulticast mode [ 1192.686081][T13699] bridge_slave_0: entered promiscuous mode [ 1193.229628][T13699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.229968][T13699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.230253][T13699] bridge_slave_1: entered allmulticast mode [ 1193.237116][T13699] bridge_slave_1: entered promiscuous mode [ 1193.470722][T13623] team0: Port device team_slave_0 added [ 1193.474394][T13672] team0: Port device team_slave_0 added [ 1193.561801][T13687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.601082][T13623] team0: Port device team_slave_1 added [ 1193.604958][T13672] team0: Port device team_slave_1 added [ 1193.621395][T13687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.627447][T13699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.778927][ T997] hsr_slave_0: left promiscuous mode [ 1193.800084][ T997] hsr_slave_1: left promiscuous mode [ 1193.801070][ T997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.801089][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.854924][ T997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.854944][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.962107][ T997] veth1_macvtap: left promiscuous mode [ 1193.962220][ T997] veth0_macvtap: left promiscuous mode [ 1193.962425][ T997] veth1_vlan: left promiscuous mode [ 1193.962539][ T997] veth0_vlan: left promiscuous mode [ 1194.745081][ T997] team_slave_1 (unregistering): left allmulticast mode [ 1194.784919][ T997] team0 (unregistering): Port device team_slave_1 removed [ 1194.806309][ T997] team_slave_0 (unregistering): left allmulticast mode [ 1194.847972][ T997] team0 (unregistering): Port device team_slave_0 removed [ 1194.999782][ T997] dummy0 (unregistering): left allmulticast mode [ 1195.041751][ T997] team0 (unregistering): Port device dummy0 removed [ 1195.054769][ T997] team0 (unregistering): left allmulticast mode [ 1195.167433][T13699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1195.201288][T13847] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1195.328798][T13623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.328811][T13623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.328831][T13623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.331114][T13672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.331141][T13672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.331159][T13672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.335338][T13687] team0: Port device team_slave_0 added [ 1195.449810][T13623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.449826][T13623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.449856][T13623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.455167][T13672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.455178][T13672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.455197][T13672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.550714][T13687] team0: Port device team_slave_1 added [ 1195.604201][T13699] team0: Port device team_slave_0 added [ 1195.635477][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1780'. [ 1195.752242][T13699] team0: Port device team_slave_1 added [ 1195.876886][T13687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.876898][T13687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.876917][T13687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.082258][T13687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.082271][T13687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.082291][T13687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.084363][T13699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.084374][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.084392][T13699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.271073][T13699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.271085][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.271102][T13699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.560240][T13623] hsr_slave_0: entered promiscuous mode [ 1196.573085][T13623] hsr_slave_1: entered promiscuous mode [ 1196.583831][T13623] debugfs: 'hsr0' already exists in 'hsr' [ 1196.583857][T13623] Cannot create hsr debugfs directory [ 1196.862407][T13672] hsr_slave_0: entered promiscuous mode [ 1196.864737][T13672] hsr_slave_1: entered promiscuous mode [ 1196.866694][T13672] debugfs: 'hsr0' already exists in 'hsr' [ 1196.866717][T13672] Cannot create hsr debugfs directory [ 1197.116098][ T997] IPVS: stop unused estimator thread 0... [ 1197.207070][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1197.319433][T13687] hsr_slave_0: entered promiscuous mode [ 1197.339934][T13687] hsr_slave_1: entered promiscuous mode [ 1197.341385][T13687] debugfs: 'hsr0' already exists in 'hsr' [ 1197.341411][T13687] Cannot create hsr debugfs directory [ 1197.373418][T13699] hsr_slave_0: entered promiscuous mode [ 1197.374984][T13699] hsr_slave_1: entered promiscuous mode [ 1197.376383][T13699] debugfs: 'hsr0' already exists in 'hsr' [ 1197.376405][T13699] Cannot create hsr debugfs directory [ 1202.018488][ T5269] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1202.209571][T13623] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1202.251029][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1202.272832][T13623] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1202.323643][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1203.004718][T13623] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1203.103984][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1203.166283][ T5269] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1203.181591][T13623] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1203.315113][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1206.569502][T13623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.669530][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1207.724900][T12926] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1207.740003][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1207.741965][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1207.744930][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1207.749591][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1207.803659][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1207.886981][T12926] usb 4-1: Using ep0 maxpacket: 32 [ 1207.896611][T12926] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1207.896648][T12926] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1207.896672][T12926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.942037][T12926] usb 4-1: config 0 descriptor?? [ 1209.924560][T13988] lo speed is unknown, defaulting to 1000 [ 1210.100738][ T9955] Bluetooth: hci0: command tx timeout [ 1210.809374][ T9825] usb 4-1: USB disconnect, device number 63 [ 1211.276881][ T997] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.282836][ T9825] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1211.476900][ T9825] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 1211.476929][ T9825] usb 4-1: config 0 has no interface number 1 [ 1211.476982][ T9825] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1211.477016][ T9825] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1211.478359][ T9825] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1211.478386][ T9825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1211.478408][ T9825] usb 4-1: SerialNumber: syz [ 1211.484632][ T9825] usb 4-1: config 0 descriptor?? [ 1211.578057][ T9825] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 1211.578097][ T9825] uvcvideo 4-1:0.199: No valid video chain found. [ 1211.789491][ T5749] usb 4-1: USB disconnect, device number 64 [ 1211.971092][ T997] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.319103][ T9955] Bluetooth: hci0: command tx timeout [ 1212.374850][ T997] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.714554][ T9825] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1212.781751][ T997] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.874775][ T9825] usb 4-1: Using ep0 maxpacket: 16 [ 1212.879468][ T9825] usb 4-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1212.879508][ T9825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.879532][ T9825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1212.879550][ T9825] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1212.879570][ T9825] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.880851][ T9825] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1212.880877][ T9825] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1212.880899][ T9825] usb 4-1: Manufacturer: syz [ 1212.885646][ T9825] usb 4-1: config 0 descriptor?? [ 1213.162955][T13988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.170735][T13988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.171043][T13988] bridge_slave_0: entered allmulticast mode [ 1213.174630][ T9825] rc_core: IR keymap rc-hauppauge not found [ 1213.174650][ T9825] Registered IR keymap rc-empty [ 1213.175168][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.202227][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.217901][ T9825] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1213.221325][ T9825] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input53 [ 1213.222377][T13988] bridge_slave_0: entered promiscuous mode [ 1213.239796][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.271145][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.291574][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.300430][T13988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.300690][T13988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.300909][T13988] bridge_slave_1: entered allmulticast mode [ 1213.313734][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.335635][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.349502][T13988] bridge_slave_1: entered promiscuous mode [ 1213.355850][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.377080][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.399831][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.420625][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.444699][ T9825] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.480059][ T9825] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1213.480082][ T9825] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1213.616463][ T9] usb 4-1: USB disconnect, device number 65 [ 1213.686950][T13988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.728049][T13988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.831376][T13988] team0: Port device team_slave_0 added [ 1213.887955][T13988] team0: Port device team_slave_1 added [ 1214.336580][T13988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.336597][T13988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.336623][T13988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.506649][T13988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.506666][T13988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.506695][T13988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.552623][ T9955] Bluetooth: hci0: command tx timeout [ 1214.871129][T13988] hsr_slave_0: entered promiscuous mode [ 1214.872720][T13988] hsr_slave_1: entered promiscuous mode [ 1214.876550][T13988] debugfs: 'hsr0' already exists in 'hsr' [ 1214.876576][T13988] Cannot create hsr debugfs directory [ 1214.880666][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1215.813639][ T997] bridge_slave_1: left allmulticast mode [ 1215.813680][ T997] bridge_slave_1: left promiscuous mode [ 1215.813950][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.899948][ T997] bridge_slave_0: left allmulticast mode [ 1215.899988][ T997] bridge_slave_0: left promiscuous mode [ 1215.900255][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.144995][ T997] bridge_slave_1: left allmulticast mode [ 1216.145044][ T997] bridge_slave_1: left promiscuous mode [ 1216.145314][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.237184][ T997] bridge_slave_0: left allmulticast mode [ 1216.237216][ T997] bridge_slave_0: left promiscuous mode [ 1216.237546][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.509110][ T997] bridge_slave_1: left allmulticast mode [ 1216.509148][ T997] bridge_slave_1: left promiscuous mode [ 1216.511081][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.594945][ T997] bridge_slave_0: left allmulticast mode [ 1216.594977][ T997] bridge_slave_0: left promiscuous mode [ 1216.597869][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.764542][ T9955] Bluetooth: hci0: command tx timeout [ 1218.549679][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.637672][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.678599][ T997] bond0 (unregistering): Released all slaves [ 1219.746537][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.832301][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.855092][ T997] bond0 (unregistering): Released all slaves [ 1220.323553][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.409991][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.432027][ T997] bond0 (unregistering): Released all slaves [ 1220.612277][ T5269] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1220.737168][T13672] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1220.789605][T13672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1220.879096][T13672] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1220.947308][T13672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1220.987757][T13672] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1221.069052][T13672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1221.112026][T13672] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1221.178475][T13672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1222.520317][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1222.577277][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1222.579592][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1222.581199][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1222.582130][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1225.268422][T13687] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1225.903944][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1226.178965][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1226.265563][T13687] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1226.312053][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.340509][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1226.342353][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.342378][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1226.343695][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1226.343728][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1226.343743][ T9] usb 4-1: SerialNumber: syz [ 1226.497956][T13687] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1226.512548][ T5625] Bluetooth: hci3: command tx timeout [ 1226.516171][ T9] usb 4-1: 0:2 : does not exist [ 1226.541935][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.962375][ T9] usb 4-1: USB disconnect, device number 66 [ 1227.184814][T13687] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1227.231766][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1227.331394][T14145] lo speed is unknown, defaulting to 1000 [ 1227.653251][ T9955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1227.705280][ T9955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1227.723107][ T9955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1227.724239][ T9955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1227.725369][ T9955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1228.749055][ T5625] Bluetooth: hci3: command tx timeout [ 1228.979383][ T997] hsr_slave_0: left promiscuous mode [ 1229.203057][ T997] hsr_slave_1: left promiscuous mode [ 1229.203925][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.407058][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.389165][ T997] hsr_slave_0: left promiscuous mode [ 1230.431937][ T997] hsr_slave_1: left promiscuous mode [ 1230.433343][ T997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.433361][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.456467][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.624236][ T997] hsr_slave_0: left promiscuous mode [ 1230.645661][ T997] hsr_slave_1: left promiscuous mode [ 1230.646759][ T997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.646785][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.722395][ T997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.722416][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.787589][ T997] veth1_macvtap: left promiscuous mode [ 1230.787678][ T997] veth0_macvtap: left promiscuous mode [ 1230.787925][ T997] veth1_vlan: left promiscuous mode [ 1230.788150][ T997] veth0_vlan: left promiscuous mode [ 1230.806310][ T997] veth1_macvtap: left promiscuous mode [ 1230.806409][ T997] veth0_macvtap: left promiscuous mode [ 1230.806693][ T997] veth1_vlan: left promiscuous mode [ 1230.806887][ T997] veth0_vlan: left promiscuous mode [ 1230.955605][ T9955] Bluetooth: hci1: command tx timeout [ 1230.956546][ T9955] Bluetooth: hci3: command tx timeout [ 1231.640293][ T997] team0 (unregistering): Port device team_slave_1 removed [ 1231.684598][ T997] team0 (unregistering): Port device team_slave_0 removed [ 1231.909789][ T9955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1231.915691][ T9955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1232.001898][ T9955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1232.074219][ T9955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1232.125403][ T9955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1232.420220][ T997] team0 (unregistering): Port device team_slave_1 removed [ 1232.473606][ T997] team0 (unregistering): Port device team_slave_0 removed [ 1233.093406][ T997] team0 (unregistering): Port device team_slave_1 removed [ 1233.126236][ T997] team0 (unregistering): Port device team_slave_0 removed [ 1233.178380][ T9955] Bluetooth: hci3: command tx timeout [ 1233.178413][ T9955] Bluetooth: hci1: command tx timeout [ 1234.458678][ T5625] Bluetooth: hci4: command tx timeout [ 1235.410432][ T5625] Bluetooth: hci1: command tx timeout [ 1236.330632][ T5340] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1236.488909][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1236.503458][ T5340] usb 4-1: Using ep0 maxpacket: 16 [ 1236.506862][ T5340] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.509211][ T5340] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1236.509240][ T5340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.509261][ T5340] usb 4-1: Product: syz [ 1236.509278][ T5340] usb 4-1: Manufacturer: syz [ 1236.509294][ T5340] usb 4-1: SerialNumber: syz [ 1236.567844][ T5340] usb 4-1: config 0 descriptor?? [ 1236.597811][ T5625] Bluetooth: hci4: command tx timeout [ 1236.617988][ T5340] sr9700 4-1:0.0: probe with driver sr9700 failed with error -22 [ 1237.623616][ T5625] Bluetooth: hci1: command tx timeout [ 1237.998333][T14221] lo speed is unknown, defaulting to 1000 [ 1238.043272][T14208] lo speed is unknown, defaulting to 1000 [ 1238.834742][ T5625] Bluetooth: hci4: command tx timeout [ 1239.218207][ T5749] usb 4-1: USB disconnect, device number 67 [ 1239.711059][T14145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.711398][T14145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.711711][T14145] bridge_slave_0: entered allmulticast mode [ 1239.730826][T14145] bridge_slave_0: entered promiscuous mode [ 1239.872528][T14145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.872747][T14145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.872981][T14145] bridge_slave_1: entered allmulticast mode [ 1239.875356][T14145] bridge_slave_1: entered promiscuous mode [ 1240.239741][T14145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.292328][T14145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.044078][ T5625] Bluetooth: hci4: command tx timeout [ 1241.115019][T14145] team0: Port device team_slave_0 added [ 1241.256281][T14145] team0: Port device team_slave_1 added [ 1241.279112][ T997] IPVS: stop unused estimator thread 0... [ 1241.795973][T14145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.795991][T14145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.796017][T14145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.882568][T14145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.882584][T14145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.882611][T14145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.164432][T14221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.164861][T14221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.182332][T14221] bridge_slave_0: entered allmulticast mode [ 1242.200107][T14221] bridge_slave_0: entered promiscuous mode [ 1242.272720][T14221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.273165][T14221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.273567][T14221] bridge_slave_1: entered allmulticast mode [ 1242.308292][T14221] bridge_slave_1: entered promiscuous mode [ 1242.326643][T13988] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1242.366668][T13988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1242.545584][T13988] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1242.611976][T13988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1242.617866][T14208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.622143][T14208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.622757][T14208] bridge_slave_0: entered allmulticast mode [ 1242.646166][T14208] bridge_slave_0: entered promiscuous mode [ 1242.778865][T13988] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1242.857759][T13988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1242.859842][T14208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.860159][T14208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.860420][T14208] bridge_slave_1: entered allmulticast mode [ 1242.899363][T14208] bridge_slave_1: entered promiscuous mode [ 1242.921269][T14145] hsr_slave_0: entered promiscuous mode [ 1242.922918][T14145] hsr_slave_1: entered promiscuous mode [ 1242.966853][T14221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.078561][T13988] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1243.144877][T13988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1243.399785][T14221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.620311][T14208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.002849][T14208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.035950][T14221] team0: Port device team_slave_0 added [ 1245.114990][ T9825] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1245.227131][T14221] team0: Port device team_slave_1 added [ 1245.302177][ T9825] usb 4-1: config 255 has an invalid interface number: 207 but max is 0 [ 1245.302205][ T9825] usb 4-1: config 255 has no interface number 0 [ 1245.302236][ T9825] usb 4-1: config 255 interface 207 has no altsetting 0 [ 1245.309208][ T9825] usb 4-1: New USB device found, idVendor=182d, idProduct=021c, bcdDevice=4b.a8 [ 1245.309240][ T9825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.309263][ T9825] usb 4-1: Product: syz [ 1245.309280][ T9825] usb 4-1: Manufacturer: syz [ 1245.309297][ T9825] usb 4-1: SerialNumber: syz [ 1245.469248][T14208] team0: Port device team_slave_0 added [ 1245.542457][T14208] team0: Port device team_slave_1 added [ 1245.661787][ T9825] sisusb 4-1:255.207: Invalid USB2VGA device [ 1245.661821][ T9825] sisusb 4-1:255.207: probe with driver sisusb failed with error -22 [ 1245.696400][ T9825] usb 4-1: USB disconnect, device number 68 [ 1245.879226][T14221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.879239][T14221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.879260][T14221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.981060][T14221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.981075][T14221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.981099][T14221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.175817][T14208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.175835][T14208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.175863][T14208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.263590][T14208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.263607][T14208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.263637][T14208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.111788][T14221] hsr_slave_0: entered promiscuous mode [ 1247.121673][T14221] hsr_slave_1: entered promiscuous mode [ 1247.124576][T14221] debugfs: 'hsr0' already exists in 'hsr' [ 1247.124623][T14221] Cannot create hsr debugfs directory [ 1247.604924][T14208] hsr_slave_0: entered promiscuous mode [ 1247.607287][T14208] hsr_slave_1: entered promiscuous mode [ 1247.609303][T14208] debugfs: 'hsr0' already exists in 'hsr' [ 1247.609339][T14208] Cannot create hsr debugfs directory [ 1249.861602][T14466] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1254.147599][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.147711][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1254.700157][T13988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.930043][T13988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.960867][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.965254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.074971][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.075140][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1258.175804][ T997] bridge_slave_1: left allmulticast mode [ 1258.175840][ T997] bridge_slave_1: left promiscuous mode [ 1258.176165][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.241021][ T997] bridge_slave_0: left allmulticast mode [ 1258.241058][ T997] bridge_slave_0: left promiscuous mode [ 1258.241411][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.664556][ T997] bridge_slave_1: left allmulticast mode [ 1258.664592][ T997] bridge_slave_1: left promiscuous mode [ 1258.664859][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.499746][ T997] bridge_slave_0: left allmulticast mode [ 1259.499783][ T997] bridge_slave_0: left promiscuous mode [ 1259.500042][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.207963][ T997] bridge_slave_1: left allmulticast mode [ 1261.207990][ T997] bridge_slave_1: left promiscuous mode [ 1261.208199][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.294251][ T997] bridge_slave_0: left allmulticast mode [ 1261.294276][ T997] bridge_slave_0: left promiscuous mode [ 1261.294447][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.335986][ T9825] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 1261.464262][ T997] bridge_slave_1: left allmulticast mode [ 1261.464286][ T997] bridge_slave_1: left promiscuous mode [ 1261.464452][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.506378][ T9825] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1261.506418][ T9825] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1261.506442][ T9825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.532171][ T9825] usb 4-1: config 0 descriptor?? [ 1261.582781][ T997] bridge_slave_0: left allmulticast mode [ 1261.582804][ T997] bridge_slave_0: left promiscuous mode [ 1261.582967][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.935084][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.020464][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.085389][ T997] bond0 (unregistering): Released all slaves [ 1263.409677][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.495976][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.561168][ T997] bond0 (unregistering): Released all slaves [ 1263.730350][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.816421][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.880837][ T997] bond0 (unregistering): Released all slaves [ 1264.360626][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1264.488963][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1264.512017][ T5749] usb 4-1: USB disconnect, device number 69 [ 1264.579866][ T997] bond0 (unregistering): Released all slaves [ 1265.780156][T14145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1265.841807][T14145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.875536][T14145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1265.935759][T14145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.987178][T14145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1266.059348][T14145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1266.074068][T13988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.771341][T14145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1268.892518][T14145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1268.938493][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1269.158223][ T997] hsr_slave_0: left promiscuous mode [ 1269.179527][ T997] hsr_slave_1: left promiscuous mode [ 1269.180176][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.232347][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.393265][ T997] hsr_slave_0: left promiscuous mode [ 1269.414649][ T997] hsr_slave_1: left promiscuous mode [ 1269.415580][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.460622][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.831303][ T997] hsr_slave_0: left promiscuous mode [ 1269.938446][ T997] hsr_slave_1: left promiscuous mode [ 1269.939475][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.981626][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.987139][ T997] hsr_slave_0: left promiscuous mode [ 1271.006811][ T997] hsr_slave_1: left promiscuous mode [ 1271.007614][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.050434][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.509625][ T997] team0 (unregistering): Port device team_slave_1 removed [ 1271.563211][ T997] team0 (unregistering): Port device team_slave_0 removed [ 1272.023074][ T997] team0 (unregistering): Port device team_slave_1 removed [ 1272.088464][ T997] team0 (unregistering): Port device team_slave_0 removed [ 1272.228787][ T9955] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1272.233648][ T9955] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1272.303776][ T9955] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1272.327787][ T9955] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1272.339689][ T9955] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1272.835473][ T997] team0 (unregistering): Port device team_slave_1 removed [ 1272.888257][ T997] team0 (unregistering): Port device team_slave_0 removed [ 1273.380222][ T997] team0 (unregistering): Port device team_slave_1 removed [ 1273.433233][ T997] team0 (unregistering): Port device team_slave_0 removed [ 1274.654109][ T5625] Bluetooth: hci5: command tx timeout [ 1275.701451][T14676] lo speed is unknown, defaulting to 1000 [ 1276.864156][ T5625] Bluetooth: hci5: command tx timeout [ 1278.075166][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1278.535127][T14145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.875891][T14145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.904541][ T1502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.904801][ T1502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.966889][ T1502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.967017][ T1502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.093882][ T5625] Bluetooth: hci5: command tx timeout [ 1281.331208][ T5625] Bluetooth: hci5: command tx timeout [ 1281.616317][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1281.621670][T14676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.622015][T14676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.622273][T14676] bridge_slave_0: entered allmulticast mode [ 1281.631393][T14676] bridge_slave_0: entered promiscuous mode [ 1281.822224][T14676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.822643][T14676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.894511][T14676] bridge_slave_1: entered allmulticast mode [ 1281.914681][T14676] bridge_slave_1: entered promiscuous mode [ 1282.830999][T14221] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1282.898729][T14221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1282.955824][T14676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.040386][T14221] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1283.163068][T14221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1283.180359][T14676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.282947][T14221] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1283.337987][T14221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1283.382725][T14221] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1283.427869][T14221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1285.056485][T14676] team0: Port device team_slave_0 added [ 1285.129536][T14676] team0: Port device team_slave_1 added [ 1286.155569][T14676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.155589][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.155619][T14676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.207174][T14676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.207190][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.207220][T14676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.617013][ T9955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1286.701288][ T9955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1286.736417][ T9955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1286.759529][ T9955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1286.776151][ T9955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1287.027236][T14676] hsr_slave_0: entered promiscuous mode [ 1287.053388][T14676] hsr_slave_1: entered promiscuous mode [ 1287.067665][T14676] debugfs: 'hsr0' already exists in 'hsr' [ 1287.067692][T14676] Cannot create hsr debugfs directory [ 1287.088211][T14208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1287.139904][T14208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1287.193100][T14208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1287.293592][T14208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1287.325354][T14208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1287.686005][T14208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1287.750080][T14208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1287.788354][T14208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1288.269867][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1289.173821][ T5625] Bluetooth: hci0: command tx timeout [ 1289.209724][T14808] lo speed is unknown, defaulting to 1000 [ 1289.845038][T14221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.216502][ T9955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1292.255397][ T9955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1292.337783][ T9955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1292.340569][ T9955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1292.342792][ T9955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1292.795477][T14221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.764501][ T5625] Bluetooth: hci3: command tx timeout [ 1295.031994][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.032173][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.570496][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.570705][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.745675][T14883] lo speed is unknown, defaulting to 1000 [ 1296.179037][T14808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.179493][T14808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.180120][T14808] bridge_slave_0: entered allmulticast mode [ 1296.206103][T14808] bridge_slave_0: entered promiscuous mode [ 1296.290330][T14808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.290588][T14808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.290800][T14808] bridge_slave_1: entered allmulticast mode [ 1296.293374][T14808] bridge_slave_1: entered promiscuous mode [ 1296.479406][T14676] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1296.511277][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1296.652930][T14808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.663589][T14676] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1296.711496][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1296.740678][T14808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.740770][T14676] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1296.782176][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1296.893971][T14676] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1296.925996][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1296.969174][ T5625] Bluetooth: hci3: command tx timeout [ 1297.251438][T14808] team0: Port device team_slave_0 added [ 1297.348274][ T997] bridge_slave_1: left allmulticast mode [ 1297.348312][ T997] bridge_slave_1: left promiscuous mode [ 1297.348620][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.445103][ T997] bridge_slave_0: left allmulticast mode [ 1297.445130][ T997] bridge_slave_0: left promiscuous mode [ 1297.445324][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.773645][ T9955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1297.813001][ T997] bridge_slave_1: left allmulticast mode [ 1297.813039][ T997] bridge_slave_1: left promiscuous mode [ 1297.813313][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.839596][ T9955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1297.860956][ T9955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1297.861992][ T9955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1297.882740][ T9955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1298.086442][ T997] bridge_slave_0: left allmulticast mode [ 1298.086478][ T997] bridge_slave_0: left promiscuous mode [ 1298.086759][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.548973][ T5625] Bluetooth: hci3: command tx timeout [ 1300.032040][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.095857][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.139557][ T997] bond0 (unregistering): Released all slaves [ 1300.212108][ T5624] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1300.286717][ T5625] Bluetooth: hci1: command tx timeout [ 1300.421867][ T5624] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1300.421894][ T5624] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1300.421913][ T5624] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1300.421955][ T5624] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1300.423577][ T5624] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1300.423601][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1300.423619][ T5624] usb 4-1: Product: syz [ 1300.423628][ T5624] usb 4-1: Manufacturer: syz [ 1300.527423][ T5624] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1300.693540][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.743586][ C1] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 0 to 2 [ 1300.743687][ T5624] usb 4-1: USB disconnect, device number 70 [ 1300.746819][ C1] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 2 to 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1300.788195][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.826365][ T997] bond0 (unregistering): Released all slaves [ 1300.919844][T14808] team0: Port device team_slave_1 added [ 1301.246434][T14676] kthread_run failed with err -4 [ 1301.763524][ T5625] Bluetooth: hci3: command tx timeout [ 1301.949460][ T997] hsr_slave_0: left promiscuous mode [ 1302.013519][ T997] hsr_slave_1: left promiscuous mode [ 1302.014729][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.042349][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.306334][ T997] hsr_slave_0: left promiscuous mode [ 1302.375070][ T997] hsr_slave_1: left promiscuous mode [ 1302.376090][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.424872][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.269498][ T997] team0 (unregistering): Port device team_slave_1 removed [ 1303.321999][ T997] team0 (unregistering): Port device team_slave_0 removed [ 1303.825563][ T997] team0 (unregistering): Port device team_slave_1 removed [ 1303.877851][ T997] team0 (unregistering): Port device team_slave_0 removed [ 1309.407126][ T997] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1309.493966][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1309.715678][ T997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1310.038265][ T997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1310.159576][ T5269] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1310.325580][ T997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0