last executing test programs: 2m42.771687024s ago: executing program 4 (id=765): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) sendmsg$nl_route_sched(r0, 0x0, 0x4000) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m42.625128623s ago: executing program 4 (id=767): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) r1 = socket$inet6(0xa, 0x803, 0x6) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 2m38.569067088s ago: executing program 4 (id=813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 2m38.416521701s ago: executing program 4 (id=816): socket(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 2m38.212513621s ago: executing program 4 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2m38.038875799s ago: executing program 4 (id=824): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff000) 2m22.776260189s ago: executing program 32 (id=824): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff000) 9.918024785s ago: executing program 3 (id=1675): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 9.915324501s ago: executing program 1 (id=1685): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc000000010902"], 0x0) timer_create(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000100)="e0b9547ed3", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x1) r2 = fcntl$dupfd(r1, 0x0, r1) socket$nl_route(0x10, 0x3, 0x0) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {}, @control={0x9, 0x0, 0xa}}], 0x1c) sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000400)="48abd87a409aac58c40d5e485d859cc71d027281f02035fb7f", 0x19}, {&(0x7f0000000580)="9d1117a3df620072f1512262870310bb9100f1f2ad7e1e7748ccb5b832d429d5a251e029249613b51d06c014405886c0de17e0854010067c35185860f89c8b8267b84fdb5ab0d7808f9293254f4286897e", 0x51}, {0x0}], 0x3}, 0x24040810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 7.996302694s ago: executing program 3 (id=1679): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d40)="54af385182a9a5123acb61176f6963465d6ab5682a206237d7af45361a2191caf6d91fe5d0df0977dbd25f681088d9376f204016738af11e3e512c5204ba4110ab10a9fe2c5d7c1178abe58c351cbe841b155e1d826b9a0db6e1d4a94bf37e749c67f3b4bda42589345e41b45c799ed834c5385d5d88d9691bcb72335b1b6d261cac83d45c45865c8d0f76b7aec2595de76ad6b86c019934d05d4066d3ddcff32297c0bf3098d239ccc652eacdbe6405a90b9410e71c86dffcf717b8e85083120748420393b30117517a4ed739f4f3f3d4a91aa10fda0ddd5b95976e2d8aabdc07", 0xe1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 6.565049388s ago: executing program 3 (id=1689): socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x236, &(0x7f0000000140)={0x0, 0x2eb8, 0x40, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x16, 0x4, 0x4, 0xa, 0x10004, 0x1, 0x200000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') preadv(r5, &(0x7f0000000c80), 0x0, 0x4b6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x2a20, 0x0, 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) syz_io_uring_submit(r0, r1, 0x0) 6.441339167s ago: executing program 2 (id=1691): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x3, {0x1, 0x5, "4592f03c75"}}, 0xa) 5.472731455s ago: executing program 2 (id=1692): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 5.471603151s ago: executing program 1 (id=1702): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000007100)={0x2020}, 0x2020) flock(0xffffffffffffffff, 0x5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x80841, 0x8) write$tcp_mem(r4, &(0x7f0000000180)={0x9, 0x20, 0x8000000000000000, 0x20, 0x7}, 0x48) 3.93566966s ago: executing program 2 (id=1695): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000800)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x4000, 0x0, 0x1e}, @fda={0x66646185, 0x8, 0x0, 0x30}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x80000000002d}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 3.703712011s ago: executing program 5 (id=1696): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) 3.682877195s ago: executing program 3 (id=1698): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 3.634293212s ago: executing program 2 (id=1699): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4) 3.484920213s ago: executing program 0 (id=1700): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x101}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 3.434732163s ago: executing program 5 (id=1701): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 3.402761157s ago: executing program 2 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @mcast1, @empty, 0x20, 0x0, 0x0, 0xa}}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 3.362193412s ago: executing program 0 (id=1704): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2040400) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r0], 0x10) 3.20719097s ago: executing program 0 (id=1705): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000002c0)={0xc}) 3.206403533s ago: executing program 5 (id=1706): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001800)=ANY=[@ANYRES32=0x0], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x6, 0x0, 0x0, 0xa, 0x2, "4ae23a0900f20000000036c4091c912abad802", 0x0, 0x9}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000040)={0x2, 0xa, 0x401, 0x0, 0x2, 0xffff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) 2.908952927s ago: executing program 0 (id=1707): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) 1.488231165s ago: executing program 2 (id=1708): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x184}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 1.48753678s ago: executing program 0 (id=1709): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 1.485981449s ago: executing program 5 (id=1710): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000800)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x4000, 0x0, 0x1e}, @fda={0x66646185, 0x8, 0x0, 0x30}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x80000000002d}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 1.410457308s ago: executing program 1 (id=1711): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001f80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40051}], 0x1, 0x4c044) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001b40)=""/99, 0x63}], 0x1}, 0x20) 1.253025394s ago: executing program 1 (id=1712): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) 1.241901502s ago: executing program 5 (id=1713): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4) 1.10519812s ago: executing program 1 (id=1714): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x101}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 112.347791ms ago: executing program 0 (id=1715): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2040400) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r0], 0x10) 100.725686ms ago: executing program 3 (id=1716): socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x236, &(0x7f0000000140)={0x0, 0x2eb8, 0x40, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x16, 0x4, 0x4, 0xa, 0x10004, 0x1, 0x200000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') preadv(r5, &(0x7f0000000c80), 0x0, 0x4b6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x2a20, 0x0, 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) syz_io_uring_submit(r0, r1, 0x0) 11.345015ms ago: executing program 1 (id=1717): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000002c0)={0xc}) 10.724072ms ago: executing program 5 (id=1718): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x4000000) 0s ago: executing program 3 (id=1719): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) kernel console output (not intermixed with test programs): 1) entered disabled state [ 77.542067][ T5845] bridge_slave_1: entered allmulticast mode [ 77.549640][ T5845] bridge_slave_1: entered promiscuous mode [ 77.624225][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.631525][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.639390][ T5835] bridge_slave_0: entered allmulticast mode [ 77.647008][ T5835] bridge_slave_0: entered promiscuous mode [ 77.683401][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.692881][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.701703][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.708931][ T5835] bridge_slave_1: entered allmulticast mode [ 77.716334][ T5835] bridge_slave_1: entered promiscuous mode [ 77.752472][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.824541][ T5845] team0: Port device team_slave_0 added [ 77.841498][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.854762][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.862187][ T5840] bridge_slave_0: entered allmulticast mode [ 77.869120][ T5840] bridge_slave_0: entered promiscuous mode [ 77.877316][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.884419][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.892279][ T5840] bridge_slave_1: entered allmulticast mode [ 77.899267][ T5840] bridge_slave_1: entered promiscuous mode [ 77.910905][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.918308][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.925971][ T5849] bridge_slave_0: entered allmulticast mode [ 77.933061][ T5849] bridge_slave_0: entered promiscuous mode [ 77.941919][ T5845] team0: Port device team_slave_1 added [ 77.959567][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.985815][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.993006][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.000364][ T5849] bridge_slave_1: entered allmulticast mode [ 78.008119][ T5849] bridge_slave_1: entered promiscuous mode [ 78.026994][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.074777][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.082065][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.109037][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.121159][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.128210][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.154235][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.175895][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.187629][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.203124][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.215402][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.231320][ T5835] team0: Port device team_slave_0 added [ 78.239537][ T5835] team0: Port device team_slave_1 added [ 78.306743][ T5840] team0: Port device team_slave_0 added [ 78.346848][ T5840] team0: Port device team_slave_1 added [ 78.361585][ T5849] team0: Port device team_slave_0 added [ 78.369424][ T5849] team0: Port device team_slave_1 added [ 78.380042][ T5845] hsr_slave_0: entered promiscuous mode [ 78.386688][ T5845] hsr_slave_1: entered promiscuous mode [ 78.392998][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.401013][ T5845] Cannot create hsr debugfs directory [ 78.406955][ T5146] Bluetooth: hci1: command tx timeout [ 78.413564][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.420625][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.446869][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.485090][ T5146] Bluetooth: hci0: command tx timeout [ 78.497376][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.504359][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.531138][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.555476][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.562478][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.577557][ T5146] Bluetooth: hci2: command tx timeout [ 78.588685][ T5843] Bluetooth: hci3: command tx timeout [ 78.594179][ T54] Bluetooth: hci4: command tx timeout [ 78.599936][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.624907][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.632380][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.658606][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.671984][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.679104][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.705373][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.721509][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.728658][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.755102][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.869249][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.912915][ T5835] hsr_slave_0: entered promiscuous mode [ 78.919868][ T5835] hsr_slave_1: entered promiscuous mode [ 78.926275][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.933844][ T5835] Cannot create hsr debugfs directory [ 78.949390][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.960760][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.973309][ T5849] hsr_slave_0: entered promiscuous mode [ 78.979742][ T5849] hsr_slave_1: entered promiscuous mode [ 78.986200][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.993784][ T5849] Cannot create hsr debugfs directory [ 79.017790][ T5840] hsr_slave_0: entered promiscuous mode [ 79.024336][ T5840] hsr_slave_1: entered promiscuous mode [ 79.030962][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.038929][ T5840] Cannot create hsr debugfs directory [ 79.046830][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.337005][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.369075][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.397007][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.410859][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.422376][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.435837][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.449615][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.473412][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.542010][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.552800][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.574549][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.600043][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.613251][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.668910][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.681412][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.692333][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.723817][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.754590][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.807419][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.814689][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.843414][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.850579][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.880988][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.938556][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.984052][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.004701][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.029660][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.039460][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.046617][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.090079][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.103614][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.110787][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.139653][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.161487][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.168791][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.182170][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.189359][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.227680][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.271242][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.308418][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.315581][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.337165][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.344281][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.367451][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.374577][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.403711][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.410855][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.433382][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.486121][ T54] Bluetooth: hci1: command tx timeout [ 80.568486][ T54] Bluetooth: hci0: command tx timeout [ 80.645225][ T54] Bluetooth: hci4: command tx timeout [ 80.650699][ T54] Bluetooth: hci2: command tx timeout [ 80.656460][ T5146] Bluetooth: hci3: command tx timeout [ 80.679903][ T5841] veth0_vlan: entered promiscuous mode [ 80.712739][ T5841] veth1_vlan: entered promiscuous mode [ 80.803428][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.848838][ T5841] veth0_macvtap: entered promiscuous mode [ 80.883293][ T5841] veth1_macvtap: entered promiscuous mode [ 80.931898][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.975843][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.997163][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.029606][ T5845] veth0_vlan: entered promiscuous mode [ 81.048100][ T5845] veth1_vlan: entered promiscuous mode [ 81.057559][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.066718][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.076814][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.085864][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.106342][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.150901][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.222604][ T5835] veth0_vlan: entered promiscuous mode [ 81.274106][ T5845] veth0_macvtap: entered promiscuous mode [ 81.292397][ T5835] veth1_vlan: entered promiscuous mode [ 81.328056][ T5845] veth1_macvtap: entered promiscuous mode [ 81.395573][ T5849] veth0_vlan: entered promiscuous mode [ 81.411125][ T5849] veth1_vlan: entered promiscuous mode [ 81.429904][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.442143][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.461564][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.477562][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.491891][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.512713][ T5835] veth0_macvtap: entered promiscuous mode [ 81.535148][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.546449][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.557807][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.591259][ T5835] veth1_macvtap: entered promiscuous mode [ 81.599285][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.609835][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.618947][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.628286][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.640379][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.659878][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.663886][ T5849] veth0_macvtap: entered promiscuous mode [ 81.690137][ T5849] veth1_macvtap: entered promiscuous mode [ 81.703307][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.714853][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.730613][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.741172][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.758072][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.785188][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.810087][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.821558][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.832071][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.842647][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.854857][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.883655][ T5840] veth0_vlan: entered promiscuous mode [ 81.894454][ T5840] veth1_vlan: entered promiscuous mode [ 81.920028][ T5840] veth0_macvtap: entered promiscuous mode [ 81.929665][ T5840] veth1_macvtap: entered promiscuous mode [ 81.950807][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.960248][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.969111][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.977926][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.014239][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.026703][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.036738][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.047238][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.057314][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.068254][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.079277][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.094156][ T5918] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 82.126269][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.137408][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.147648][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.158400][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.168555][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.179075][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.188983][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.199499][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.210768][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.222347][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.232933][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.242843][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.254015][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.264023][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.275110][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.286613][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.303009][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.313583][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.323668][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.334579][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.344493][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.355028][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.365890][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.376885][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.393816][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.565803][ T5843] Bluetooth: hci1: command tx timeout [ 82.591151][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.602889][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.613324][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.630027][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.645906][ T5843] Bluetooth: hci0: command tx timeout [ 82.670622][ T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.711366][ T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.724266][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.733139][ T5843] Bluetooth: hci2: command tx timeout [ 82.733188][ T5843] Bluetooth: hci3: command tx timeout [ 82.733215][ T5843] Bluetooth: hci4: command tx timeout [ 82.765183][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.774348][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.783631][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.841051][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.885181][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.959032][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.972836][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.099482][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.124230][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.164479][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.188760][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.212085][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.224066][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.331319][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.358323][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.382971][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.394583][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.742642][ T5940] xt_hashlimit: size too large, truncated to 1048576 [ 83.774425][ T5941] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.888414][ T5936] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 84.405906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 84.645167][ T54] Bluetooth: hci1: command tx timeout [ 84.785741][ T54] Bluetooth: hci0: command tx timeout [ 84.806723][ T54] Bluetooth: hci4: command tx timeout [ 84.812184][ T54] Bluetooth: hci3: command tx timeout [ 84.819032][ T54] Bluetooth: hci2: command tx timeout [ 85.885996][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.067688][ T5838] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 86.092097][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.163045][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.257250][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.312153][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.395055][ T5838] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.424622][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.483159][ T5838] usb 3-1: config 0 descriptor?? [ 86.515503][ T5969] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 86.997667][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.055107][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.105046][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.112501][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.185063][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.223075][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.274042][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.314717][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.366801][ T5975] capability: warning: `syz.1.18' uses deprecated v2 capabilities in a way that may be insecure [ 87.378589][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.418632][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.459122][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.485062][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.534719][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.575038][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.626394][ T5838] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 87.667902][ T5979] binder: BINDER_SET_CONTEXT_MGR already set [ 87.674084][ T5979] binder: 5978:5979 ioctl 4018620d 20004a80 returned -16 [ 87.676884][ T5838] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 87.684145][ T5979] binder: 5978:5979 ioctl c0306201 200003c0 returned -14 [ 87.841156][ T5838] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 87.958544][ T5987] ufs: You didn't specify the type of your ufs filesystem [ 87.958544][ T5987] [ 87.958544][ T5987] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 87.958544][ T5987] [ 87.958544][ T5987] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 87.973307][ T5838] usb 3-1: USB disconnect, device number 2 [ 88.042874][ T5987] ufs: ufstype=old is supported read-only [ 88.089368][ T5989] Zero length message leads to an empty skb [ 88.118552][ T5987] syz.2.23: attempt to access beyond end of device [ 88.118552][ T5987] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 90.585545][ T5843] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 90.594132][ T5843] Bluetooth: hci1: Injecting HCI hardware error event [ 90.603046][ T5843] Bluetooth: hci1: hardware error 0x00 [ 90.837433][ T6011] rdma_op ffff88805ce7f1f0 conn xmit_rdma 0000000000000000 [ 92.033345][ T6019] loop4: detected capacity change from 0 to 1024 [ 92.244103][ T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 92.252763][ T54] Bluetooth: hci2: Injecting HCI hardware error event [ 92.264092][ T54] Bluetooth: hci2: hardware error 0x00 [ 92.414593][ T6019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.551998][ T6019] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.31: bg 0: block 200: padding at end of block bitmap is not set [ 92.569367][ T6019] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 92.741505][ T3701] cfg80211: failed to load regulatory.db [ 95.310081][ T6036] loop1: detected capacity change from 0 to 1024 [ 96.036079][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.666364][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.790822][ T6036] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.34: bg 0: block 200: padding at end of block bitmap is not set [ 96.806917][ T5843] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 96.817466][ T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 96.852475][ T6036] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 99.006479][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.315850][ T6048] loop4: detected capacity change from 0 to 1024 [ 99.525959][ T6044] loop3: detected capacity change from 0 to 262144 [ 100.302769][ T6044] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 101.036291][ T6052] loop0: detected capacity change from 0 to 1024 [ 103.356978][ T6048] EXT4-fs: error -4 creating inode table initialization thread [ 103.366468][ T6048] EXT4-fs (loop4): mount failed [ 105.205329][ T6052] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 108.155747][ T6072] loop2: detected capacity change from 0 to 1024 [ 110.616824][ T6072] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 112.865417][ T6086] loop4: detected capacity change from 0 to 1024 [ 114.520289][ T6091] loop3: detected capacity change from 0 to 1024 [ 115.285321][ T6086] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 115.285490][ T6086] EXT4-fs: failed to create workqueue [ 115.300518][ T6086] EXT4-fs (loop4): mount failed [ 117.287221][ T6091] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 117.985715][ T6104] loop2: detected capacity change from 0 to 1024 [ 118.805256][ T6106] loop0: detected capacity change from 0 to 1024 [ 120.945117][ T6106] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 121.035263][ T6104] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 122.444630][ T6117] loop3: detected capacity change from 0 to 1024 [ 122.782297][ T6117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.872583][ T6117] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.49: bg 0: block 200: padding at end of block bitmap is not set [ 122.892687][ T6117] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 123.292873][ T6122] fuse: Unknown parameter 'group_i00000000000000000000' [ 124.405681][ T6130] loop0: detected capacity change from 0 to 1024 [ 124.627226][ T6131] loop2: detected capacity change from 0 to 1024 [ 126.050787][ T6122] Process accounting resumed [ 127.415646][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.475042][ T6130] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 128.300266][ T6131] EXT4-fs: error -4 creating inode table initialization thread [ 128.308308][ T6131] EXT4-fs (loop2): mount failed [ 129.962294][ T6150] fuse: Unknown parameter 'group_i00000000000000000000' [ 130.099294][ T6156] loop3: detected capacity change from 0 to 1024 [ 130.176428][ T6156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.300059][ T6156] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.55: bg 0: block 200: padding at end of block bitmap is not set [ 130.335178][ T6156] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 131.026875][ T6150] Process accounting resumed [ 132.284198][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.844248][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.853942][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.010192][ T6208] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.032088][ T6208] Cannot find set identified by id 0 to match [ 140.907620][ T6241] bridge0: port 3(hsr_slave_1) entered blocking state [ 140.914735][ T6241] bridge0: port 3(hsr_slave_1) entered disabled state [ 140.922223][ T6241] hsr_slave_1: entered allmulticast mode [ 140.926449][ T6243] Cannot find set identified by id 0 to match [ 140.931252][ T6241] hsr_slave_1: left allmulticast mode [ 141.215417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.545780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 141.759648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.769072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.779280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 146.719372][ T6272] Cannot find set identified by id 0 to match [ 148.480746][ T6281] Cannot find set identified by id 0 to match [ 149.411719][ T6286] tty tty3: ldisc open failed (-12), clearing slot 2 [ 149.542249][ T6290] Cannot find set identified by id 0 to match [ 150.140330][ T6292] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 150.495629][ T6296] Cannot find set identified by id 0 to match [ 152.809053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 153.116333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 153.218699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 153.541583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 153.928192][ T6312] bridge0: port 3(hsr_slave_1) entered blocking state [ 153.936785][ T6312] bridge0: port 3(hsr_slave_1) entered disabled state [ 153.944963][ T6312] hsr_slave_1: entered allmulticast mode [ 153.959015][ T6312] hsr_slave_1: left allmulticast mode [ 154.288349][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 162.155631][ T6360] Cannot find set identified by id 0 to match [ 163.436065][ T6366] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 165.046622][ T6377] bridge0: port 3(hsr_slave_1) entered blocking state [ 165.053862][ T6377] bridge0: port 3(hsr_slave_1) entered disabled state [ 165.060989][ T6377] hsr_slave_1: entered allmulticast mode [ 165.078674][ T6377] hsr_slave_1: left allmulticast mode [ 165.170826][ T6379] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 165.596959][ T6380] bridge0: port 3(hsr_slave_1) entered blocking state [ 165.603848][ T6380] bridge0: port 3(hsr_slave_1) entered disabled state [ 165.611564][ T6380] hsr_slave_1: entered allmulticast mode [ 165.618691][ T6380] hsr_slave_1: left allmulticast mode [ 166.973149][ T6390] bridge0: port 3(hsr_slave_1) entered blocking state [ 166.980503][ T6390] bridge0: port 3(hsr_slave_1) entered disabled state [ 166.988610][ T6390] hsr_slave_1: entered allmulticast mode [ 167.002626][ T6390] hsr_slave_1: left allmulticast mode [ 169.165221][ T6400] bridge0: port 3(hsr_slave_1) entered blocking state [ 169.172147][ T6400] bridge0: port 3(hsr_slave_1) entered disabled state [ 169.179268][ T6400] hsr_slave_1: entered allmulticast mode [ 169.186593][ T6400] hsr_slave_1: left allmulticast mode [ 169.951888][ T6402] Cannot find set identified by id 0 to match [ 171.762959][ T6406] Cannot find set identified by id 0 to match [ 173.174136][ T6419] bridge0: port 3(hsr_slave_1) entered blocking state [ 173.181423][ T6419] bridge0: port 3(hsr_slave_1) entered disabled state [ 173.190588][ T6419] hsr_slave_1: entered allmulticast mode [ 173.204269][ T6419] hsr_slave_1: left allmulticast mode [ 178.051865][ T6443] Cannot find set identified by id 0 to match [ 181.973009][ T6460] Cannot find set identified by id 0 to match [ 183.783365][ T6468] Cannot find set identified by id 0 to match [ 184.302048][ T6470] bridge0: port 3(hsr_slave_1) entered blocking state [ 184.309328][ T6470] bridge0: port 3(hsr_slave_1) entered disabled state [ 184.318345][ T6470] hsr_slave_1: entered allmulticast mode [ 184.331932][ T6470] hsr_slave_1: left allmulticast mode [ 188.706693][ T6489] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 189.071153][ T6494] loop4: detected capacity change from 0 to 16 [ 189.158621][ T6494] erofs (device loop4): mounted with root inode @ nid 36. [ 189.587753][ T6502] overlayfs: failed to resolve './file1': -2 [ 192.660501][ T6513] bridge1: entered promiscuous mode [ 192.665812][ T6513] bridge1: entered allmulticast mode [ 194.956177][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.962547][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.592046][ T5843] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 196.641845][ T6545] ufs: You didn't specify the type of your ufs filesystem [ 196.641845][ T6545] [ 196.641845][ T6545] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 196.641845][ T6545] [ 196.641845][ T6545] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 196.683219][ T6545] ufs: ufstype=old is supported read-only [ 196.695448][ T6545] syz.0.154: attempt to access beyond end of device [ 196.695448][ T6545] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 196.938949][ T6547] binder: 6546:6547 ioctl c0306201 200003c0 returned -14 [ 197.122953][ T6556] trusted_key: syz.1.160 sent an empty control message without MSG_MORE. [ 197.184212][ T6559] ufs: You didn't specify the type of your ufs filesystem [ 197.184212][ T6559] [ 197.184212][ T6559] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 197.184212][ T6559] [ 197.184212][ T6559] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 197.246149][ T6559] ufs: ufstype=old is supported read-only [ 197.263910][ T6559] syz.3.169: attempt to access beyond end of device [ 197.263910][ T6559] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 197.765279][ T3701] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 197.937567][ T3701] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 197.946039][ T3701] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.957692][ T3701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.970179][ T3701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.981529][ T3701] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.994686][ T3701] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.012265][ T3701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.026424][ T3701] usb 4-1: config 0 descriptor?? [ 198.032743][ T6570] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 198.239471][ T6587] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 198.276465][ T6589] binder: 6588:6589 ioctl c0306201 200003c0 returned -14 [ 198.456520][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.464223][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.486233][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.499152][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.506856][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.514284][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.521797][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.529363][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.536863][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.544299][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.551985][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.559712][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.567593][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.575124][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.584373][ T3701] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 198.592513][ T3701] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 198.633444][ T3701] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 198.913776][ T3701] usb 4-1: USB disconnect, device number 2 [ 199.736387][ T6624] binder: 6621:6624 ioctl c0306201 200003c0 returned -14 [ 200.063219][ T6633] binder: 6629:6633 ioctl c0306201 200003c0 returned -14 [ 200.659808][ T5839] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 200.669671][ T5887] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 200.677391][ T5839] Bluetooth: hci4: Injecting HCI hardware error event [ 200.837787][ T5887] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 200.846346][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.865015][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.878919][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.891364][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.904526][ T5887] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.913737][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.931721][ T5887] usb 1-1: config 0 descriptor?? [ 200.938593][ T6647] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.125359][ T5839] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 201.134663][ T5839] Bluetooth: hci3: Injecting HCI hardware error event [ 201.368355][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.401940][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.426006][ T6668] binder: 6667:6668 ioctl c0306201 200003c0 returned -14 [ 201.435010][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.442470][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.494984][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.502462][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.529786][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.558662][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.614622][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.670633][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.693984][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.711408][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.732171][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.753330][ T5843] Bluetooth: hci4: hardware error 0x00 [ 201.762934][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.774133][ T5887] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 201.783361][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 201.783383][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 201.789442][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 201.794712][ T5887] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 201.813237][ T5887] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 201.835817][ T5887] usb 1-1: USB disconnect, device number 2 [ 201.846989][ T5146] Bluetooth: hci3: hardware error 0x00 [ 202.618280][ T6704] binder: 6703:6704 ioctl c0306201 200003c0 returned -14 [ 202.896019][ T6714] insert transport fail, errno -7 [ 202.912938][ T6717] xt_hashlimit: size too large, truncated to 1048576 [ 203.714967][ T6739] binder: 6737:6739 ioctl c0306201 200003c0 returned -14 [ 203.925221][ T5843] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 203.945091][ T5146] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 204.071978][ T6746] binder: 6745:6746 ioctl c0306201 200003c0 returned -14 [ 205.705211][ T6775] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 206.335703][ T6790] binder: 6787:6790 ioctl c0306201 200003c0 returned -14 [ 206.883609][ T6803] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 207.310019][ T6824] binder: 6823:6824 ioctl c0306201 200003c0 returned -14 [ 207.622478][ T6834] xt_hashlimit: size too large, truncated to 1048576 [ 207.819627][ T6840] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 208.393490][ T6854] binder: 6853:6854 ioctl c0306201 200003c0 returned -14 [ 210.340577][ T6890] binder: 6889:6890 ioctl c0306201 200003c0 returned -14 [ 211.362958][ T6917] binder: 6916:6917 ioctl c0306201 200003c0 returned -14 [ 211.632025][ T6929] xt_hashlimit: size too large, truncated to 1048576 [ 211.656835][ T6927] binder: 6926:6927 ioctl c0306201 200003c0 returned -14 [ 212.239471][ T6951] overlayfs: failed to resolve './file1': -2 [ 212.700259][ T6968] binder_alloc: 6967: binder_alloc_buf, no vma [ 212.712485][ T6968] binder: 6967:6968 ioctl c0306201 200003c0 returned -14 [ 213.798425][ T6990] overlayfs: failed to resolve './file1': -2 [ 214.174261][ T5146] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 214.175229][ T6997] binder_alloc: 6994: binder_alloc_buf, no vma [ 214.272784][ T7002] binder: 6994:7002 ioctl c0306201 200003c0 returned -14 [ 214.820879][ T7018] overlayfs: failed to resolve './file1': -2 [ 215.215366][ T7031] binder_alloc: 7030: binder_alloc_buf, no vma [ 215.238054][ T7031] binder: 7030:7031 ioctl c0306201 200003c0 returned -14 [ 216.088598][ T7062] binder: 7061:7062 ioctl c0306201 200003c0 returned -14 [ 216.947002][ T7094] binder: 7093:7094 ioctl c0306201 200003c0 returned -14 [ 217.697000][ T7121] binder: 7119:7121 ioctl c0306201 200003c0 returned -14 [ 217.952950][ T7131] overlayfs: failed to resolve './file0': -2 [ 218.246474][ T5146] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 218.255543][ T5146] Bluetooth: hci0: Injecting HCI hardware error event [ 218.264033][ T5146] Bluetooth: hci0: hardware error 0x00 [ 218.316395][ T7149] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 218.326883][ T7149] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 218.445930][ T7153] binder: BINDER_SET_CONTEXT_MGR already set [ 218.455058][ T7153] binder: 7150:7153 ioctl 4018620d 20004a80 returned -16 [ 218.479231][ T7153] binder: 7150:7153 ioctl c0306201 200003c0 returned -14 [ 218.762827][ T7164] overlayfs: failed to resolve './file0': -2 [ 219.355436][ T7189] binder: BINDER_SET_CONTEXT_MGR already set [ 219.362981][ T7193] overlayfs: failed to resolve './file0': -2 [ 219.368817][ T7189] binder: 7188:7189 ioctl 4018620d 20004a80 returned -16 [ 219.389285][ T7189] binder: 7188:7189 ioctl c0306201 200003c0 returned -14 [ 219.731058][ T7199] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 219.997719][ T7220] binder: BINDER_SET_CONTEXT_MGR already set [ 220.003890][ T7220] binder: 7219:7220 ioctl 4018620d 20004a80 returned -16 [ 220.012162][ T7220] binder: 7219:7220 ioctl c0306201 200003c0 returned -14 [ 220.248261][ T7222] overlayfs: failed to resolve './file0': -2 [ 220.325286][ T5146] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 220.629461][ T7244] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 220.653546][ T7249] binder: BINDER_SET_CONTEXT_MGR already set [ 220.659772][ T7249] binder: 7248:7249 ioctl 4018620d 20004a80 returned -16 [ 220.668338][ T7249] binder: 7248:7249 ioctl c0306201 200003c0 returned -14 [ 220.918172][ T7258] overlayfs: failed to resolve './file0': -2 [ 221.308728][ T7274] binder: BINDER_SET_CONTEXT_MGR already set [ 221.333769][ T7274] binder: 7273:7274 ioctl 4018620d 20004a80 returned -16 [ 221.379713][ T7274] binder: 7273:7274 ioctl c0306201 200003c0 returned -14 [ 221.587559][ T7287] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 221.633380][ T7288] overlayfs: failed to resolve './file0': -2 [ 221.731284][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.130294][ T7315] binder: BINDER_SET_CONTEXT_MGR already set [ 222.137166][ T7315] binder: 7314:7315 ioctl 4018620d 20004a80 returned -16 [ 222.146163][ T7315] binder: 7314:7315 ioctl c0306201 200003c0 returned -14 [ 222.427317][ T7323] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 222.690801][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.762953][ T7340] binder: BINDER_SET_CONTEXT_MGR already set [ 222.797392][ T7340] binder: 7339:7340 ioctl 4018620d 20004a80 returned -16 [ 222.847935][ T7340] binder: 7339:7340 ioctl c0306201 200003c0 returned -14 [ 223.039304][ T7353] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 223.563575][ T7372] binder: BINDER_SET_CONTEXT_MGR already set [ 223.589974][ T7372] binder: 7371:7372 ioctl 4018620d 20004a80 returned -16 [ 223.600792][ T7372] binder: 7371:7372 ioctl c0306201 200003c0 returned -14 [ 223.817423][ T7384] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 224.340394][ T7412] binder: BINDER_SET_CONTEXT_MGR already set [ 224.346806][ T7412] binder: 7411:7412 ioctl 4018620d 20004a80 returned -16 [ 224.354848][ T7412] binder: 7411:7412 ioctl c0306201 200003c0 returned -14 [ 224.455069][ T5887] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 224.586224][ T7420] overlayfs: failed to resolve './file1': -2 [ 224.608753][ T7422] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 224.623069][ T5887] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 224.643558][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.662066][ T5887] usb 3-1: Product: syz [ 224.666418][ T5887] usb 3-1: Manufacturer: syz [ 224.671065][ T5887] usb 3-1: SerialNumber: syz [ 224.698251][ T5887] usb 3-1: config 0 descriptor?? [ 224.931996][ T5887] usb 3-1: USB disconnect, device number 3 [ 225.194426][ T7438] binder: 7437:7438 ioctl c0306201 200003c0 returned -14 [ 225.348370][ T7442] overlayfs: failed to resolve './file1': -2 [ 225.387635][ T7445] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 225.950131][ T7470] process 'syz.4.577' launched './file0' with NULL argv: empty string added [ 226.093492][ T7475] binder: 7474:7475 ioctl c0306201 200003c0 returned -14 [ 226.288712][ T7478] overlayfs: failed to resolve './file1': -2 [ 226.450311][ T7487] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 226.579074][ T7482] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 227.027565][ T7505] binder: 7503:7505 ioctl c0306201 200003c0 returned -14 [ 227.404152][ T7524] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 227.634987][ T3701] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 227.781380][ T7542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.795470][ T3701] usb 5-1: Using ep0 maxpacket: 32 [ 227.819160][ T3701] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 227.842521][ T3701] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 227.871101][ T3701] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 227.891709][ T3701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.902330][ T3701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 227.912706][ T3701] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 227.935182][ T3701] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 227.947791][ T3701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.968988][ T3701] usb 5-1: config 0 descriptor?? [ 228.047911][ T7548] 9pnet_virtio: no channels available for device syz [ 228.134706][ T7554] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 228.205982][ T3701] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 228.230415][ T3701] usb 5-1: USB disconnect, device number 2 [ 228.259491][ T3701] usblp0: removed [ 228.705033][ T3701] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 228.864989][ T3701] usb 5-1: Using ep0 maxpacket: 32 [ 228.890039][ T3701] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 228.918479][ T3701] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 228.934193][ T3701] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 228.961613][ T7579] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 228.969253][ T3701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.986337][ T3701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.002613][ T3701] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 229.033902][ T3701] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 229.067322][ T3701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.092753][ T3701] usb 5-1: config 0 descriptor?? [ 229.307417][ T3701] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 229.811159][ T7611] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 229.873245][ T5889] usb 5-1: USB disconnect, device number 3 [ 229.884796][ T5889] usblp0: removed [ 230.362161][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 230.687105][ T7638] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 231.205468][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 231.259676][ T7660] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 231.303827][ T7660] bond1: entered promiscuous mode [ 231.332140][ T7660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.381460][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 231.441872][ T7662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.466105][ T7662] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 231.478376][ T7662] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 231.493368][ T7662] bond1: (slave ip6gre1): making interface the new active one [ 231.501838][ T7662] ip6gre1: entered promiscuous mode [ 231.521247][ T7662] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 231.734545][ T7663] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 231.743252][ T7663] ip6gre1: left promiscuous mode [ 231.761765][ T7663] bond1 (unregistering): Released all slaves [ 231.792382][ T7677] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 231.990216][ T7684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.168428][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 232.591781][ T7709] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 232.615167][ T7713] binder: 7712:7713 ioctl 4018620d 0 returned -22 [ 232.710841][ T7713] binder: 7712:7713 ioctl c0306201 200003c0 returned -14 [ 232.762867][ T7718] usb usb4: usbfs: process 7718 (syz.1.693) did not claim interface 0 before use [ 232.959274][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 233.308511][ T7740] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 233.496980][ T7747] binder: 7745:7747 ioctl 4018620d 0 returned -22 [ 233.537241][ T7747] binder: 7745:7747 ioctl c0306201 200003c0 returned -14 [ 233.559904][ T7749] overlayfs: missing 'lowerdir' [ 233.847546][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 234.061101][ T7765] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 234.076954][ T7771] overlayfs: missing 'lowerdir' [ 234.354068][ T7780] binder: 7779:7780 ioctl 4018620d 0 returned -22 [ 234.396417][ T7780] binder: 7779:7780 ioctl c0306201 200003c0 returned -14 [ 234.716561][ T7797] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 234.727549][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 234.748716][ T7801] overlayfs: missing 'lowerdir' [ 234.866036][ T7807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.733'. [ 234.896709][ T7807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.733'. [ 235.210276][ T7821] binder: BINDER_SET_CONTEXT_MGR already set [ 235.238813][ T7821] binder: 7820:7821 ioctl 4018620d 20004a80 returned -16 [ 235.253589][ T7821] binder: 7820:7821 ioctl c0306201 200003c0 returned -14 [ 235.447177][ T7832] overlayfs: missing 'lowerdir' [ 235.616461][ T7835] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 235.999143][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 236.034102][ T7855] binder: BINDER_SET_CONTEXT_MGR already set [ 236.060728][ T7855] binder: 7854:7855 ioctl 4018620d 20004a80 returned -16 [ 236.082653][ T7858] binder: 7854:7858 ioctl c0306201 200003c0 returned -14 [ 236.358879][ T7869] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 236.366424][ T7870] overlayfs: missing 'lowerdir' [ 236.722458][ T7883] xt_hashlimit: size too large, truncated to 1048576 [ 236.802708][ T7888] binder: BINDER_SET_CONTEXT_MGR already set [ 236.809344][ T7888] binder: 7887:7888 ioctl 4018620d 20004a80 returned -16 [ 236.819004][ T7888] binder: 7887:7888 ioctl c0306201 200003c0 returned -14 [ 237.217435][ T7899] overlayfs: missing 'lowerdir' [ 237.440773][ T7905] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 237.726441][ T7915] binder: 7914:7915 ioctl c0306201 0 returned -14 [ 237.754020][ T7915] binder: 7914:7915 ioctl c0306201 200003c0 returned -14 [ 238.300925][ T7926] overlayfs: missing 'lowerdir' [ 238.797032][ T7935] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 238.940765][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 239.301795][ T7945] binder: 7944:7945 ioctl c0306201 0 returned -14 [ 239.321059][ T7945] binder: 7944:7945 ioctl c0306201 200003c0 returned -14 [ 239.592428][ T7958] overlayfs: missing 'lowerdir' [ 240.097114][ T7971] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 240.455910][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 240.752317][ T7986] binder: 7982:7986 ioctl c0306201 0 returned -14 [ 240.765420][ T7985] overlayfs: missing 'lowerdir' [ 240.783972][ T7986] binder: 7982:7986 ioctl c0306201 200003c0 returned -14 [ 241.053041][ T7996] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 241.274825][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 241.527176][ T8016] overlayfs: missing 'workdir' [ 241.597491][ T8020] binder: 8019:8020 ioctl c0306201 200003c0 returned -14 [ 241.761581][ T8028] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 242.693786][ T8050] overlayfs: missing 'workdir' [ 242.757600][ T8056] binder: BINDER_SET_CONTEXT_MGR already set [ 242.764122][ T8056] binder: 8055:8056 ioctl 4018620d 20004a80 returned -16 [ 242.772714][ T8056] binder: 8055:8056 ioctl c0306201 200003c0 returned -14 [ 242.849661][ T8058] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 243.436445][ T8075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.854'. [ 243.536830][ T3701] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 243.708399][ T3701] usb 4-1: Using ep0 maxpacket: 8 [ 243.721907][ T3701] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 243.754037][ T3701] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 243.800727][ T3701] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.823421][ T3701] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.855010][ T3701] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 243.880085][ T3701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.176012][ T3701] usb 4-1: GET_CAPABILITIES returned 0 [ 244.181585][ T3701] usbtmc 4-1:16.0: can't read capabilities [ 244.233200][ T8084] binder: 8082:8084 ioctl c0306201 200003c0 returned -14 [ 244.383241][ T8086] overlayfs: missing 'workdir' [ 244.403464][ T3701] usb 4-1: USB disconnect, device number 3 [ 244.689673][ T8092] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 245.130030][ T8100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.865'. [ 245.653253][ T8112] binder: 8110:8112 ioctl c0306201 200003c0 returned -14 [ 245.750842][ T8116] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.759874][ T8116] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.865327][ T8122] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 245.961831][ T8126] veth0: entered promiscuous mode [ 246.156628][ T8134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.880'. [ 246.229375][ T8125] veth0: left promiscuous mode [ 246.352594][ T8140] 9pnet_virtio: no channels available for device syz [ 246.433386][ T8146] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 246.455920][ T8146] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 246.523679][ T8151] binder: 8150:8151 ioctl c0306201 200003c0 returned -14 [ 246.659629][ T8155] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 246.872255][ T8165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.893'. [ 247.059504][ T3701] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 247.087516][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 247.174119][ T8176] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 247.184530][ T8176] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 247.228972][ T3701] usb 4-1: config 0 has no interfaces? [ 247.234528][ T3701] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 247.253825][ T3701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.265466][ T3701] usb 4-1: config 0 descriptor?? [ 247.394017][ T8182] binder: 8181:8182 ioctl c0306201 200003c0 returned -14 [ 247.399754][ T8185] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 247.593428][ T8193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.905'. [ 247.595851][ T5848] usb 4-1: USB disconnect, device number 4 [ 248.032681][ T8212] binder: 8210:8212 ioctl c0306201 200003c0 returned -14 [ 248.111748][ T8215] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 248.185575][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.918'. [ 248.292130][ T8221] netlink: 'syz.1.919': attribute type 29 has an invalid length. [ 248.312161][ T8223] netlink: 32 bytes leftover after parsing attributes in process `syz.0.920'. [ 248.343979][ T8221] netlink: 'syz.1.919': attribute type 29 has an invalid length. [ 248.365184][ T8221] netlink: 'syz.1.919': attribute type 29 has an invalid length. [ 248.415276][ T8221] netlink: 'syz.1.919': attribute type 29 has an invalid length. [ 248.440251][ T8221] netlink: 'syz.1.919': attribute type 29 has an invalid length. [ 248.482478][ T8230] netlink: 'syz.1.919': attribute type 29 has an invalid length. [ 248.676595][ T8241] binder: 8239:8241 ioctl c0306201 200003c0 returned -14 [ 248.877690][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.931'. [ 249.490309][ T8270] binder: 8269:8270 ioctl c0306201 200003c0 returned -14 [ 249.615034][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 249.765168][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 249.787542][ T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 249.798205][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.816850][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.845039][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.875275][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.875657][ T8278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'. [ 249.915068][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.935547][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.166129][ T25] usb 3-1: usb_control_msg returned -32 [ 250.171801][ T25] usbtmc 3-1:16.0: can't read capabilities [ 250.498233][ T8294] binder: 8293:8294 ioctl 4018620d 0 returned -22 [ 250.506970][ T8294] binder: 8293:8294 ioctl c0306201 200003c0 returned -14 [ 250.870603][ T8305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.958'. [ 251.365056][ T8309] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 251.502162][ T5848] usb 3-1: USB disconnect, device number 4 [ 251.694568][ T8323] binder: 8322:8323 ioctl 4018620d 0 returned -22 [ 251.703456][ T8323] binder: 8322:8323 ioctl c0306201 200003c0 returned -14 [ 251.931759][ T8333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.970'. [ 252.015023][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 252.166482][ T8341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.974'. [ 252.195383][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 252.202560][ T5889] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.214817][ T5889] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.224715][ T5889] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 252.239312][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 252.255711][ T5889] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 252.265272][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.281258][ T5889] usb 2-1: config 0 descriptor?? [ 252.540247][ T8349] binder: 8348:8349 ioctl 4018620d 0 returned -22 [ 252.549059][ T8349] binder: 8348:8349 ioctl c0306201 200003c0 returned -14 [ 252.780002][ T5889] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5010.0004/input/input5 [ 252.853053][ T8359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.982'. [ 252.909778][ T5889] kye 0003:0458:5010.0004: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 252.952932][ T5889] usb 2-1: USB disconnect, device number 2 [ 253.071354][ T8365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.986'. [ 253.272847][ T8374] warning: `syz.2.990' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 253.349110][ T8376] binder: 8375:8376 ioctl c0306201 0 returned -14 [ 253.377650][ T8376] binder: 8375:8376 ioctl c0306201 200003c0 returned -14 [ 253.723730][ T8388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.997'. [ 253.818659][ T8392] netlink: 32 bytes leftover after parsing attributes in process `syz.2.999'. [ 254.092606][ T8400] binder: BINDER_SET_CONTEXT_MGR already set [ 254.099069][ T8400] binder: 8399:8400 ioctl 4018620d 20004a80 returned -16 [ 254.113637][ T8400] binder: 8399:8400 ioctl c0306201 0 returned -14 [ 254.120783][ T8400] binder: 8399:8400 ioctl c0306201 200003c0 returned -14 [ 254.142765][ T8404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.150442][ T8404] IPv6: NLM_F_CREATE should be set when creating new route [ 254.217306][ T8396] syz.2.1001 (8396) used greatest stack depth: 19296 bytes left [ 254.332669][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1009'. [ 254.342058][ T5890] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 254.499252][ T5890] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 254.518527][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 254.542975][ T5890] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.585434][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 254.601644][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 254.621289][ T5890] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 254.631165][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 254.654447][ T5890] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.704083][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 254.723168][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 254.739776][ T5890] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 254.760112][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 254.771400][ T8428] binder: 8427:8428 ioctl 40046205 0 returned -22 [ 254.776408][ T5890] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.794926][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 254.806772][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 254.821159][ T5890] usb 4-1: string descriptor 0 read error: -22 [ 254.827654][ T5890] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 254.836903][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.854655][ T5890] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 255.131368][ T8435] binder: 8434:8435 ioctl c0306201 0 returned -14 [ 255.139719][ T8435] binder: 8434:8435 ioctl c0306201 200003c0 returned -14 [ 255.587378][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'. [ 255.816016][ T8458] binder: 8457:8458 ioctl c0306201 200003c0 returned -14 [ 255.928939][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.935561][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.540507][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 256.627848][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 256.922679][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.937118][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.949452][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.969655][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.979652][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 256.990575][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.027936][ T8486] binder: 8485:8486 ioctl c0306201 200003c0 returned -14 [ 257.163371][ T5889] usb 4-1: USB disconnect, device number 5 [ 257.391274][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 257.519429][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'. [ 257.713693][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.732785][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.745472][ T8481] bridge_slave_0: entered allmulticast mode [ 257.755051][ T8481] bridge_slave_0: entered promiscuous mode [ 257.764556][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.773615][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.781103][ T8481] bridge_slave_1: entered allmulticast mode [ 257.789281][ T8481] bridge_slave_1: entered promiscuous mode [ 257.810343][ T8520] binder: 8519:8520 ioctl c0306201 200003c0 returned -14 [ 257.881149][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.913838][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.988463][ T8481] team0: Port device team_slave_0 added [ 257.999345][ T8481] team0: Port device team_slave_1 added [ 258.072676][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.098406][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.125262][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 258.135283][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.148747][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.156335][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.207885][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.285270][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 258.296019][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.306437][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.319321][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.331510][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.353409][ T8481] hsr_slave_0: entered promiscuous mode [ 258.361342][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.378592][ T8481] hsr_slave_1: entered promiscuous mode [ 258.395784][ T8481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.403439][ T8481] Cannot create hsr debugfs directory [ 258.414935][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.638045][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 258.655933][ T25] usbtmc 1-1:16.0: can't read capabilities [ 258.662724][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 258.756579][ T8544] binder: 8543:8544 ioctl c0306201 200003c0 returned -14 [ 258.838024][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 258.853622][ T8481] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.866299][ T5890] usb 1-1: USB disconnect, device number 3 [ 258.912154][ T8481] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.941059][ T8548] syz.2.1068 uses obsolete (PF_INET,SOCK_PACKET) [ 258.967035][ T8481] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 259.045086][ T5843] Bluetooth: hci5: command tx timeout [ 259.061599][ T8481] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 259.072804][ T8552] netlink: 'syz.3.1070': attribute type 10 has an invalid length. [ 259.117455][ T8552] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.146628][ T8552] bond0: (slave team0): Enslaving as an active interface with an up link [ 259.208489][ T8553] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:20bf:88ff:fe08:6f97 error=-28 [ 259.313253][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.347816][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.371950][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.380106][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.420058][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.427280][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.483507][ T8553] infiniband syz1: set active [ 259.511859][ T8553] infiniband syz1: added team_slave_0 [ 259.661864][ T8553] RDS/IB: syz1: added [ 259.672539][ T8553] smc: adding ib device syz1 with port count 1 [ 259.691945][ T8553] smc: ib device syz1 port 1 has pnetid [ 259.801921][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.328706][ T8581] binder: 8580:8581 ioctl c0306201 200003c0 returned -14 [ 260.435033][ T8553] syz.3.1070 (8553) used greatest stack depth: 19096 bytes left [ 260.459174][ T8481] veth0_vlan: entered promiscuous mode [ 260.471054][ T8481] veth1_vlan: entered promiscuous mode [ 260.512116][ T8481] veth0_macvtap: entered promiscuous mode [ 260.521812][ T8481] veth1_macvtap: entered promiscuous mode [ 260.540892][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.551556][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.561800][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.572543][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.582758][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.593780][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.604306][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.615510][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.625733][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.637120][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.649371][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.659600][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.670130][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.680075][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.690672][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.700657][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.711263][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.721314][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.732129][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.742756][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.753827][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.764758][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.829373][ T8481] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.849137][ T8481] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.858411][ T8481] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.867660][ T8481] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.982714][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 261.075092][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.083400][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.131288][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.151646][ T5843] Bluetooth: hci5: command tx timeout [ 261.159434][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.245751][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 261.416902][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 261.499288][ T5889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.510235][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.520179][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.530544][ T5889] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.544148][ T5889] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.553522][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.577100][ T8606] wg2: entered promiscuous mode [ 261.587706][ T8606] wg2: entered allmulticast mode [ 261.782448][ T5889] usb 2-1: GET_CAPABILITIES returned 0 [ 261.788195][ T5889] usbtmc 2-1:16.0: can't read capabilities [ 261.815970][ T8612] xt_hashlimit: size too large, truncated to 1048576 [ 261.928384][ T8614] input: syz1 as /devices/virtual/input/input6 [ 262.003349][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 262.039675][ T5848] usb 2-1: USB disconnect, device number 3 [ 262.776174][ T5146] Bluetooth: hci6: sending frame failed (-49) [ 262.792871][ T5843] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 263.205337][ T5843] Bluetooth: hci5: command tx timeout [ 264.266904][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801dec4400: rx timeout, send abort [ 264.277513][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801dec4400: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 264.355071][ T8653] binder: 8651:8653 ioctl c0306201 200003c0 returned -14 [ 265.285625][ T5843] Bluetooth: hci5: command tx timeout [ 266.005978][ T8684] input: syz1 as /devices/virtual/input/input7 [ 266.083719][ T5889] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 266.125613][ T8688] binder: 8685:8688 ioctl c0306201 0 returned -14 [ 266.135586][ T8688] binder: 8685:8688 ioctl c0306201 200003c0 returned -14 [ 266.265735][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 266.280026][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.291825][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.313341][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.352233][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.374756][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.384601][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.401146][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 266.641383][ T5889] usb 4-1: GET_CAPABILITIES returned 0 [ 266.652140][ T5889] usbtmc 4-1:16.0: can't read capabilities [ 266.874782][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 266.888687][ T5890] usb 4-1: USB disconnect, device number 6 [ 267.618501][ T8721] binder: 8720:8721 ioctl c0306201 0 returned -14 [ 267.640255][ T8721] binder: 8720:8721 ioctl c0306201 200003c0 returned -14 [ 267.673377][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807fa51800: rx timeout, send abort [ 267.682017][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807fa51800: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 268.201252][ T8740] input: syz1 as /devices/virtual/input/input8 [ 268.888212][ T8756] binder: 8755:8756 ioctl c0306201 0 returned -14 [ 268.905547][ T8756] binder: 8755:8756 ioctl c0306201 200003c0 returned -14 [ 269.525581][ T8788] 9pnet_virtio: no channels available for device syz [ 270.053404][ T8806] binder: 8805:8806 ioctl c0306201 200003c0 returned -14 [ 270.062877][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c8d6800: rx timeout, send abort [ 270.071533][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c8d6800: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 270.195309][ T8810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1165'. [ 270.755906][ T8828] binder: 8827:8828 ioctl c0306201 200003c0 returned -14 [ 270.872434][ T8835] input: syz1 as /devices/virtual/input/input9 [ 271.023188][ T8837] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 271.684267][ T8863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1179'. [ 272.681628][ T8880] binder: 8879:8880 ioctl c0306201 200003c0 returned -14 [ 272.965417][ T5890] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 273.135078][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 273.159249][ T5890] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.190513][ T5890] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.281804][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802feab000: rx timeout, send abort [ 273.290297][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011aa7000: rx timeout, send abort [ 273.299197][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802feab000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 273.313671][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888011aa7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 273.414007][ T8892] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 273.980642][ T8893] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 274.135471][ T5890] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.148003][ T5890] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.161344][ T5890] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.171711][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.388310][ T5890] usb 6-1: GET_CAPABILITIES returned 0 [ 274.393872][ T5890] usbtmc 6-1:16.0: can't read capabilities [ 274.396618][ T8905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1192'. [ 274.664569][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.673746][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.682880][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.692015][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.695558][ T8915] binder: 8914:8915 ioctl c0306201 200003c0 returned -14 [ 274.701149][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.725347][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.734594][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.743854][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.753013][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.762553][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.773431][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.782557][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.791648][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.800730][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.809799][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.818862][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.832702][ T5890] usb 6-1: USB disconnect, device number 2 [ 275.471499][ T8928] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 275.612208][ T8930] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 276.044764][ T8936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1204'. [ 276.631044][ T8946] binder: 8945:8946 ioctl c0306201 200003c0 returned -14 [ 277.334378][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a504400: rx timeout, send abort [ 277.343876][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aea9400: rx timeout, send abort [ 277.352402][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804a504400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 277.367800][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805aea9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 277.695082][ T5887] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 277.875069][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 277.904181][ T5887] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.924415][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.948416][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.967783][ T5887] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.010125][ T8976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1218'. [ 278.012121][ T5887] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.050175][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.206432][ T8982] binder: 8980:8982 ioctl c0306201 200003c0 returned -14 [ 278.512212][ T5887] usb 6-1: GET_CAPABILITIES returned 0 [ 278.517841][ T5887] usbtmc 6-1:16.0: can't read capabilities [ 278.664157][ T8991] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 278.681042][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.720201][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.729376][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.738517][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.747632][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.759329][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.768553][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.777662][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.786771][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.796069][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.826623][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.835786][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.844904][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.854022][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.863142][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.884166][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 278.900905][ T5887] usb 6-1: USB disconnect, device number 3 [ 280.302655][ T9016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1232'. [ 280.461985][ T9024] binder: 9023:9024 ioctl c0306201 200003c0 returned -14 [ 280.896159][ T5843] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 280.905834][ T5843] Bluetooth: hci5: Injecting HCI hardware error event [ 280.917010][ T5843] Bluetooth: hci5: hardware error 0x00 [ 280.920310][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fa2c000: rx timeout, send abort [ 280.927070][ T3701] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 280.931078][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fa2fc00: rx timeout, send abort [ 280.947432][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fa2c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 280.961865][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fa2fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 281.095226][ T3701] usb 1-1: Using ep0 maxpacket: 8 [ 281.108903][ T3701] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.121735][ T3701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.375553][ T3701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.386194][ T3701] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.399481][ T3701] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.409455][ T3701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.543612][ T9052] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 282.137303][ T3701] usb 1-1: GET_CAPABILITIES returned 0 [ 282.143903][ T3701] usbtmc 1-1:16.0: can't read capabilities [ 282.348986][ T9057] binder: BINDER_SET_CONTEXT_MGR already set [ 282.356693][ T9058] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 282.400206][ T9057] binder: 9056:9057 ioctl 4018620d 20004a80 returned -16 [ 282.417729][ T3701] usb 1-1: USB disconnect, device number 4 [ 282.442701][ T9057] binder: 9056:9057 ioctl c0306201 200003c0 returned -14 [ 283.047752][ T5843] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 283.489329][ T9087] kernel profiling enabled (shift: 9) [ 283.741351][ T9089] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.885611][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028319000: rx timeout, send abort [ 283.894004][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888028319000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 284.444959][ T9099] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 284.719638][ T9108] binder: 9107:9108 ioctl c0306201 200003c0 returned -14 [ 285.331444][ T9141] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 285.667732][ T9151] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 286.228797][ T3701] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 286.384977][ T3701] usb 4-1: Using ep0 maxpacket: 8 [ 286.391673][ T3701] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.401944][ T3701] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.407123][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029519400: rx timeout, send abort [ 286.414216][ T3701] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.420880][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029519400: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 286.544959][ T3701] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.558142][ T3701] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 286.568224][ T3701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.753574][ T9175] loop5: detected capacity change from 0 to 16 [ 286.870704][ T9172] binder: BINDER_SET_CONTEXT_MGR already set [ 286.887504][ T3701] usb 4-1: GET_CAPABILITIES returned 0 [ 286.924499][ T9175] erofs (device loop5): mounted with root inode @ nid 36. [ 287.127690][ T3701] usbtmc 4-1:16.0: can't read capabilities [ 287.169901][ T9172] binder: 9171:9172 ioctl 4018620d 20004a80 returned -16 [ 287.645521][ T9177] binder: 9171:9177 ioctl c0306201 200003c0 returned -14 [ 287.668505][ T3701] usb 4-1: USB disconnect, device number 7 [ 288.406246][ T9189] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 289.366710][ T9210] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 290.028463][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020f0d000: rx timeout, send abort [ 290.036940][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888020f0d000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 290.087947][ T9215] binder: 9214:9215 ioctl c0306201 200003c0 returned -14 [ 290.425198][ T5890] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 290.459430][ T9227] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 291.365499][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 291.381715][ T5890] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.405514][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.445665][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.457603][ T5890] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.473676][ T5890] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.503573][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.690452][ T9263] binder: 9262:9263 ioctl c0306201 200003c0 returned -14 [ 291.762129][ T9265] loop5: detected capacity change from 0 to 16 [ 291.788791][ T9265] erofs (device loop5): mounted with root inode @ nid 36. [ 292.818672][ T5890] usb 4-1: GET_CAPABILITIES returned 0 [ 292.824230][ T5890] usbtmc 4-1:16.0: can't read capabilities [ 292.843227][ T5890] usb 4-1: USB disconnect, device number 8 [ 292.856213][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c7b6000: rx timeout, send abort [ 292.864573][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c7b6000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 293.462157][ T9271] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 293.556997][ T9276] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 295.970103][ T9313] binder: 9311:9313 ioctl c0306201 0 returned -14 [ 295.995179][ T3701] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 296.086412][ T9319] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 296.344942][ T3701] usb 6-1: Using ep0 maxpacket: 8 [ 296.356564][ T3701] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.366609][ T3701] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.405440][ T3701] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.514356][ T9327] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 296.830158][ T3701] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.035023][ T3701] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.077194][ T3701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.327597][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027c81800: rx timeout, send abort [ 297.345290][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027c81800: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 297.369355][ T9346] loop0: detected capacity change from 0 to 16 [ 297.435363][ T9346] erofs (device loop0): mounted with root inode @ nid 36. [ 298.350831][ T3701] usb 6-1: GET_CAPABILITIES returned 0 [ 298.360949][ T3701] usbtmc 6-1:16.0: can't read capabilities [ 300.466552][ T5925] usb 6-1: USB disconnect, device number 4 [ 300.494398][ T9353] binder: 9351:9353 ioctl c0306201 0 returned -14 [ 300.728213][ T9359] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 301.558531][ T9395] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 301.728427][ T3701] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 302.155077][ T3701] usb 1-1: Using ep0 maxpacket: 8 [ 302.172638][ T3701] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.200127][ T3701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.241918][ T3701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.289741][ T3701] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.331568][ T3701] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.363002][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b64cc00: rx timeout, send abort [ 302.374966][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b64cc00: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 302.389306][ T9401] binder: 9398:9401 ioctl c0306201 0 returned -14 [ 302.397848][ T9400] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 302.589833][ T3701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.408614][ T9410] loop5: detected capacity change from 0 to 16 [ 303.639914][ T3701] usb 1-1: usb_control_msg returned -71 [ 303.646573][ T3701] usbtmc 1-1:16.0: can't read capabilities [ 303.658454][ T9410] erofs (device loop5): mounted with root inode @ nid 36. [ 303.910715][ T3701] usb 1-1: USB disconnect, device number 5 [ 304.315400][ T9417] overlayfs: failed to resolve './file1': -2 [ 306.603406][ T9439] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 307.140457][ T9446] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 307.525154][ T5887] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 307.685165][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 307.692458][ T5887] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.702666][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.713019][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.723156][ T5887] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.736316][ T5887] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.746837][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.965726][ T5887] usb 6-1: usb_control_msg returned -71 [ 307.974910][ T5887] usbtmc 6-1:16.0: can't read capabilities [ 307.981390][ T9448] binder: 9447:9448 ioctl c0306201 200003c0 returned -14 [ 307.998752][ T5887] usb 6-1: USB disconnect, device number 5 [ 308.371119][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b0c7c00: rx timeout, send abort [ 308.384996][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b0c7c00: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 308.590573][ T9481] loop2: detected capacity change from 0 to 16 [ 308.611571][ T9481] erofs (device loop2): mounted with root inode @ nid 36. [ 309.721901][ T9486] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 310.275045][ T9492] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 311.844118][ T9512] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 312.796393][ T9528] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 313.744995][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b7f4400: rx timeout, send abort [ 313.753425][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b7f4400: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 313.784952][ T5848] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 313.975300][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 313.982368][ T5848] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.008361][ T5848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.043030][ T5848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.064033][ T5848] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.081823][ T5848] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.171596][ T9553] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 314.528786][ T9540] binder: 9539:9540 ioctl c0306201 200003c0 returned -14 [ 314.785273][ T9558] loop1: detected capacity change from 0 to 16 [ 314.795261][ T9558] erofs (device loop1): mounted with root inode @ nid 36. [ 314.868177][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.089051][ T5848] usb 4-1: usb_control_msg returned -71 [ 315.095872][ T5848] usbtmc 4-1:16.0: can't read capabilities [ 315.166020][ T5848] usb 4-1: USB disconnect, device number 9 [ 315.410800][ T9571] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 316.845944][ T9567] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 317.145265][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805deca000: rx timeout, send abort [ 317.153714][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805deca000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 317.369932][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.377681][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.640023][ T9596] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 318.242735][ T9606] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 319.779370][ T9622] binder: 9621:9622 ioctl c0306201 200003c0 returned -14 [ 320.226757][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a4f0000: rx timeout, send abort [ 320.235436][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804a4f0000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 320.416355][ T9645] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 320.739597][ T9652] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 320.986083][ T9658] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 322.118780][ T9677] loop2: detected capacity change from 0 to 16 [ 322.136361][ T9677] erofs (device loop2): mounted with root inode @ nid 36. [ 323.225326][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020f0d000: rx timeout, send abort [ 323.233823][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888020f0d000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 324.426063][ T9688] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 326.369326][ T9713] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 327.151059][ T9728] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 328.119155][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033cc7000: rx timeout, send abort [ 328.134971][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033cc7000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 328.618936][ T9741] loop3: detected capacity change from 0 to 16 [ 328.658077][ T9741] erofs (device loop3): mounted with root inode @ nid 36. [ 331.403320][ T9762] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 332.539075][ T9767] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 332.905133][ T3701] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 333.126961][ T3701] usb 3-1: Using ep0 maxpacket: 8 [ 334.835407][ T3701] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.845346][ T3701] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.855182][ T3701] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.884878][ T3701] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.904942][ T3701] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.914072][ T3701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.980013][ T3701] usb 3-1: can't set config #16, error -71 [ 334.989661][ T3701] usb 3-1: USB disconnect, device number 5 [ 335.082666][ T9799] binder: BINDER_SET_CONTEXT_MGR already set [ 335.236605][ T9799] binder: 9797:9799 ioctl 4018620d 20004a80 returned -16 [ 335.352435][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027c81c00: rx timeout, send abort [ 335.360818][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d3c9800: rx timeout, send abort [ 335.374948][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027c81c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 335.389385][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d3c9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 336.176526][ T9813] loop1: detected capacity change from 0 to 16 [ 336.618971][ T9813] erofs (device loop1): mounted with root inode @ nid 36. [ 337.296925][ T9825] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 339.625048][ T5848] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 340.519812][ T9853] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 341.445554][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 341.453485][ T5848] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.464505][ T5848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.476067][ T5848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.524585][ T5848] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.569877][ T5848] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.676660][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.711917][ T5848] usb 6-1: can't set config #16, error -71 [ 341.719767][ T5848] usb 6-1: USB disconnect, device number 6 [ 342.047703][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011c4dc00: rx timeout, send abort [ 342.056096][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cc4fc00: rx timeout, send abort [ 342.064913][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888011c4dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 342.079351][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cc4fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 343.506629][ T9898] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 343.876803][ T9897] loop2: detected capacity change from 0 to 16 [ 344.366094][ T9897] erofs (device loop2): mounted with root inode @ nid 36. [ 345.704219][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 346.704954][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 346.715426][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.731941][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.742456][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.753236][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.805624][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 346.831878][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.084376][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 347.121628][ T25] usbtmc 2-1:16.0: can't read capabilities [ 347.289075][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 347.302993][ T25] usb 2-1: USB disconnect, device number 4 [ 348.224508][ T9939] binder: BINDER_SET_CONTEXT_MGR already set [ 348.230799][ T9939] binder: 9938:9939 ioctl 4018620d 20004a80 returned -16 [ 348.239222][ T9939] binder: 9938:9939 ioctl c0306201 200003c0 returned -14 [ 348.558095][ T9946] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 348.886446][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dcb2c00: rx timeout, send abort [ 348.894893][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079b3b000: rx timeout, send abort [ 348.905211][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807dcb2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 348.919773][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079b3b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 352.708769][ T9975] binder: 9974:9975 ioctl c0306201 200003c0 returned -14 [ 354.839811][T10006] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 355.577351][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022bbf800: rx timeout, send abort [ 355.585816][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c6afc00: rx timeout, send abort [ 355.594421][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888022bbf800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 355.608867][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c6afc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 358.034492][T10032] bridge1: entered promiscuous mode [ 358.957840][T10032] bridge1: entered allmulticast mode [ 359.096580][T10037] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 359.781715][T10059] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 361.810724][T10078] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 361.818359][T10078] overlayfs: failed to set xattr on upper [ 361.824552][T10078] overlayfs: ...falling back to redirect_dir=nofollow. [ 361.832434][T10078] overlayfs: ...falling back to index=off. [ 361.838392][T10078] overlayfs: ...falling back to uuid=null. [ 368.340405][T10116] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 369.998060][ T5838] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 370.563949][ T5838] usb 6-1: config 0 has no interfaces? [ 370.642605][ T5838] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 370.688888][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.695466][T10146] bridge1: entered promiscuous mode [ 370.702739][T10146] bridge1: entered allmulticast mode [ 370.893142][ T5838] usb 6-1: config 0 descriptor?? [ 370.973203][T10150] veth0: entered promiscuous mode [ 371.077901][T10147] veth0: left promiscuous mode [ 371.172733][ T5848] usb 6-1: USB disconnect, device number 7 [ 371.309368][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d1ddc00: rx timeout, send abort [ 371.317765][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d1dec00: rx timeout, send abort [ 371.326695][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d1ddc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 371.341148][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d1dec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 372.464980][ T5838] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 372.594973][ T5838] usb 2-1: device descriptor read/64, error -71 [ 373.005047][ T5838] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 373.155349][ T5838] usb 2-1: device descriptor read/64, error -71 [ 373.203295][T10192] netlink: 'syz.5.1613': attribute type 1 has an invalid length. [ 373.239425][T10192] bond1: entered promiscuous mode [ 373.250142][T10192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.272644][T10192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.285472][T10192] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 373.290562][ T5838] usb usb2-port1: attempt power cycle [ 373.311377][T10192] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 373.326011][T10192] bond1: (slave ip6gre1): making interface the new active one [ 373.334502][T10192] ip6gre1: entered promiscuous mode [ 373.343643][T10192] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 373.391283][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1613'. [ 373.630156][T10192] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 373.639060][T10192] ip6gre1: left promiscuous mode [ 373.653934][T10192] bond1 (unregistering): Released all slaves [ 373.674977][ T5838] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 373.696822][ T5838] usb 2-1: device descriptor read/8, error -71 [ 373.937325][ T5838] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 373.977342][ T5838] usb 2-1: device descriptor read/8, error -71 [ 373.997138][T10206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.098228][ T5838] usb usb2-port1: unable to enumerate USB device [ 375.567374][T10230] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 376.310883][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 377.647147][T10260] netlink: 'syz.1.1635': attribute type 1 has an invalid length. [ 377.735355][T10260] bond1: entered promiscuous mode [ 377.740796][T10260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.001391][T10265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.012013][T10265] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 378.245489][ T3701] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 378.833121][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.839879][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.857471][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'. [ 378.948504][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1639'. [ 378.955054][T10265] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 378.973764][T10265] bond1: (slave ip6gre1): making interface the new active one [ 378.982172][T10265] ip6gre1: entered promiscuous mode [ 378.989324][T10265] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 379.184985][ T3701] usb 1-1: Using ep0 maxpacket: 8 [ 379.195177][ T3701] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 379.203428][ T3701] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.225344][ T3701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.303733][T10276] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 380.097091][ T3701] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.122286][ T3701] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.181110][ T3701] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.207949][ T3701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.324187][T10260] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 380.332881][T10260] ip6gre1: left promiscuous mode [ 380.340989][T10260] bond1 (unregistering): Released all slaves [ 380.550749][T10285] sock: sock_timestamping_bind_phc: sock not bind to device [ 380.671339][ T3701] usb 1-1: usb_control_msg returned -32 [ 380.677893][ T3701] usbtmc 1-1:16.0: can't read capabilities [ 380.815390][T10289] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 380.822513][T10289] overlayfs: failed to set xattr on upper [ 380.828413][T10289] overlayfs: ...falling back to redirect_dir=nofollow. [ 380.835371][T10289] overlayfs: ...falling back to index=off. [ 380.841256][T10289] overlayfs: ...falling back to uuid=null. [ 381.651214][T10301] loop2: detected capacity change from 0 to 16 [ 381.670704][T10301] erofs (device loop2): mounted with root inode @ nid 36. [ 382.603211][ T5848] usb 1-1: USB disconnect, device number 6 [ 383.324707][T10315] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 383.933723][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'. [ 385.282831][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 385.291273][ T3701] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 385.425069][ T5838] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 385.465070][T10352] bridge0: port 3(hsr_slave_1) entered blocking state [ 385.472276][T10352] bridge0: port 3(hsr_slave_1) entered disabled state [ 385.480423][T10352] hsr_slave_1: entered allmulticast mode [ 385.494110][T10352] hsr_slave_1: left allmulticast mode [ 385.529803][ T25] usb 4-1: device descriptor read/64, error -71 [ 385.577977][ T3701] usb 6-1: Using ep0 maxpacket: 8 [ 385.609965][ T3701] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 385.620668][ T3701] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.775884][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 385.790190][ T5838] usb 2-1: config 0 has no interfaces? [ 385.813170][ T5838] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 385.830713][ T3701] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.209412][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.217943][ T3701] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.232386][ T3701] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.245803][ T3701] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 386.255326][ T3701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.267937][ T5838] usb 2-1: config 0 descriptor?? [ 386.335056][ T25] usb 4-1: device descriptor read/64, error -71 [ 386.445707][ T25] usb usb4-port1: attempt power cycle [ 386.572020][T10362] Cannot find set identified by id 0 to match [ 386.743753][ T5838] usb 2-1: USB disconnect, device number 9 [ 386.946866][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 387.082537][ T25] usb 4-1: device descriptor read/8, error -71 [ 387.118990][ T3701] usb 6-1: usb_control_msg returned -32 [ 387.184229][ T3701] usbtmc 6-1:16.0: can't read capabilities [ 387.485049][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 387.816437][T10370] loop0: detected capacity change from 0 to 16 [ 388.043775][T10370] erofs (device loop0): mounted with root inode @ nid 36. [ 389.278213][ T25] usb 4-1: device descriptor read/8, error -71 [ 389.699736][ T25] usb usb4-port1: unable to enumerate USB device [ 390.314016][ T5925] usb 6-1: USB disconnect, device number 8 [ 391.375615][ T5848] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 391.536642][ T5848] usb 2-1: config 0 has no interfaces? [ 391.542209][ T5848] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 391.577413][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.615486][ T5848] usb 2-1: config 0 descriptor?? [ 391.750409][T10403] Cannot find set identified by id 0 to match [ 392.330143][ T3701] usb 2-1: USB disconnect, device number 10 [ 392.695013][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 392.839090][ T25] usb 1-1: device descriptor read/64, error -71 [ 392.981904][T10414] loop5: detected capacity change from 0 to 16 [ 393.085283][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 393.114564][T10414] erofs (device loop5): mounted with root inode @ nid 36. [ 393.385556][ T25] usb 1-1: device descriptor read/64, error -71 [ 393.577112][ T25] usb usb1-port1: attempt power cycle [ 395.595940][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 395.652145][T10445] sock: sock_timestamping_bind_phc: sock not bind to device [ 395.852899][ T25] usb 1-1: device not accepting address 9, error -71 [ 396.489232][T10458] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 396.496341][T10458] overlayfs: failed to set xattr on upper [ 396.502105][T10458] overlayfs: ...falling back to redirect_dir=nofollow. [ 396.509123][T10458] overlayfs: ...falling back to index=off. [ 396.515043][T10458] overlayfs: ...falling back to uuid=null. [ 397.052522][T10467] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 398.053991][T10478] sock: sock_timestamping_bind_phc: sock not bind to device [ 399.286302][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 399.313126][ T30] Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 399.321894][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.330786][ T30] task:kworker/u8:0 state:D stack:21040 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 399.341164][ T30] Workqueue: events_unbound netfs_write_collection_worker [ 399.348828][ T30] Call Trace: [ 399.352150][ T30] [ 399.355219][ T30] __schedule+0x18f6/0x4cd0 [ 399.359810][ T30] ? __pfx___schedule+0x10/0x10 [ 399.364839][ T30] ? __pfx_lock_release+0x10/0x10 [ 399.370112][ T30] ? schedule+0x90/0x320 [ 399.374416][ T30] ? wq_worker_sleeping+0x66/0x240 [ 399.380010][ T30] ? schedule+0x90/0x320 [ 399.384586][ T30] schedule+0x14b/0x320 [ 399.388976][ T30] bit_wait+0x12/0xd0 [ 399.393110][ T30] __wait_on_bit+0xb0/0x2f0 [ 399.398032][ T30] ? __pfx_bit_wait+0x10/0x10 [ 399.402770][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 399.408663][ T30] ? __pfx_bit_wait+0x10/0x10 [ 399.413402][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 399.419521][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 399.425238][ T30] netfs_retry_writes+0x16e/0x19b0 [ 399.430423][ T30] ? __pfx_validate_chain+0x10/0x10 [ 399.436069][ T30] ? stack_trace_save+0x118/0x1d0 [ 399.441163][ T30] ? __pfx_netfs_retry_writes+0x10/0x10 [ 399.446841][ T30] ? lockdep_unlock+0x16a/0x300 [ 399.451765][ T30] netfs_write_collection_worker+0x2f90/0x3bb0 [ 399.458189][ T30] ? process_scheduled_works+0x976/0x1840 [ 399.463961][ T30] process_scheduled_works+0xa66/0x1840 [ 399.469903][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 399.476059][ T30] ? assign_work+0x364/0x3d0 [ 399.480704][ T30] worker_thread+0x870/0xd30 [ 399.485393][ T30] ? __kthread_parkme+0x169/0x1d0 [ 399.490466][ T30] ? __pfx_worker_thread+0x10/0x10 [ 399.496280][ T30] kthread+0x7a9/0x920 [ 399.500399][ T30] ? __pfx_kthread+0x10/0x10 [ 399.501952][ T5838] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 399.505317][ T30] ? __pfx_worker_thread+0x10/0x10 [ 399.517900][ T30] ? __pfx_kthread+0x10/0x10 [ 399.522545][ T30] ? __pfx_kthread+0x10/0x10 [ 399.527588][ T30] ? __pfx_kthread+0x10/0x10 [ 399.532224][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.537538][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 399.542782][ T30] ? __pfx_kthread+0x10/0x10 [ 399.547491][ T30] ret_from_fork+0x4b/0x80 [ 399.551969][ T30] ? __pfx_kthread+0x10/0x10 [ 399.556965][ T30] ret_from_fork_asm+0x1a/0x30 [ 399.561794][ T30] [ 399.565148][ T30] [ 399.565148][ T30] Showing all locks held in the system: [ 399.572907][ T30] 2 locks held by kworker/u8:0/11: [ 399.578374][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 399.590594][ T30] #1: ffffc90000107c60 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 399.602812][ T30] 1 lock held by khungtaskd/30: [ 399.607811][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 399.618134][ T30] 2 locks held by kworker/u8:8/3545: [ 399.623465][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 399.635352][ T30] #1: ffffc9000cb17c60 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 399.646841][ T30] 3 locks held by udevd/5207: [ 399.651564][ T30] 2 locks held by getty/5592: [ 399.656417][ T30] #0: ffff888030c0d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 399.666304][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 399.675006][ T5838] usb 3-1: device descriptor read/64, error -71 [ 399.676850][ T30] 10 locks held by kworker/1:3/5838: [ 399.688127][ T30] #0: ffff8881446b2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 399.699928][ T30] #1: ffffc90003fcfc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 399.712109][ T30] #2: ffff88802851a190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 399.721703][ T30] #3: ffff88802851d510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x25b9/0x5150 [ 399.731748][ T30] #4: ffff888028119f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x25f7/0x5150 [ 399.741541][ T30] #5: ffff8880b873e958 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 399.751945][ T30] #6: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 399.763540][ T30] #7: ffff88801d2fa828 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xc2/0x1470 [ 399.773075][ T30] #8: ffff8880b873e958 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 399.783486][ T30] #9: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0xed/0x270 [ 399.794974][ T30] 1 lock held by syz.4.824/8005: [ 399.800130][ T30] #0: ffff888077fb8500 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0xcf/0x9e0 [ 399.810092][ T30] 2 locks held by kworker/u8:11/9679: [ 399.815592][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 399.827397][ T30] #1: ffffc9001c3dfc60 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 399.838587][ T30] [ 399.840960][ T30] ============================================= [ 399.840960][ T30] [ 399.849685][ T30] NMI backtrace for cpu 0 [ 399.849710][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 399.849734][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.849746][ T30] Call Trace: [ 399.849753][ T30] [ 399.849762][ T30] dump_stack_lvl+0x241/0x360 [ 399.849792][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.849815][ T30] ? __pfx__printk+0x10/0x10 [ 399.849859][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 399.849898][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 399.849927][ T30] ? _printk+0xd5/0x120 [ 399.849957][ T30] ? __pfx__printk+0x10/0x10 [ 399.849988][ T30] ? __wake_up_klogd+0xcc/0x110 [ 399.850013][ T30] ? __pfx__printk+0x10/0x10 [ 399.850045][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 399.850073][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 399.850100][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 399.850135][ T30] watchdog+0xff6/0x1040 [ 399.850170][ T30] ? watchdog+0x1ea/0x1040 [ 399.850201][ T30] ? __pfx_watchdog+0x10/0x10 [ 399.850226][ T30] kthread+0x7a9/0x920 [ 399.850253][ T30] ? __pfx_kthread+0x10/0x10 [ 399.850283][ T30] ? __pfx_watchdog+0x10/0x10 [ 399.850309][ T30] ? __pfx_kthread+0x10/0x10 [ 399.850336][ T30] ? __pfx_kthread+0x10/0x10 [ 399.850367][ T30] ? __pfx_kthread+0x10/0x10 [ 399.850393][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.850425][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 399.850446][ T30] ? __pfx_kthread+0x10/0x10 [ 399.850475][ T30] ret_from_fork+0x4b/0x80 [ 399.850501][ T30] ? __pfx_kthread+0x10/0x10 [ 399.850529][ T30] ret_from_fork_asm+0x1a/0x30 [ 399.850568][ T30] [ 399.850576][ T30] Sending NMI from CPU 0 to CPUs 1: [ 399.915069][ T5838] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 399.916843][ C1] NMI backtrace for cpu 1 [ 399.916856][ C1] CPU: 1 UID: 0 PID: 5838 Comm: kworker/1:3 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 399.916876][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.916893][ C1] Workqueue: usb_hub_wq hub_event [ 399.916917][ C1] RIP: 0010:io_serial_out+0x7e/0xc0 [ 399.916940][ C1] Code: fc 89 e9 41 d3 e7 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 6c 86 af fc 44 03 3b 44 89 f0 44 89 fa ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c a7 [ 399.916955][ C1] RSP: 0018:ffffc90003fcedd0 EFLAGS: 00000002 [ 399.916969][ C1] RAX: 0000000000000039 RBX: ffffffff9a728080 RCX: 0000000000000000 [ 399.916980][ C1] RDX: 00000000000003f8 RSI: 000000000001a5bf RDI: 000000000001a5c0 [ 399.916991][ C1] RBP: 0000000000000000 R08: ffffffff8576029b R09: 1ffff11004974046 [ 399.917003][ C1] R10: dffffc0000000000 R11: ffffffff85760250 R12: dffffc0000000000 [ 399.917015][ C1] R13: ffffffff9a422f25 R14: 0000000000000039 R15: 00000000000003f8 [ 399.917027][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 399.917041][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.917053][ C1] CR2: 00007f6bd21452d8 CR3: 00000000325fe000 CR4: 00000000003526f0 [ 399.917067][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.917077][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.917088][ C1] Call Trace: [ 399.917094][ C1] [ 399.917102][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 399.917129][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 399.917154][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 399.917179][ C1] ? nmi_handle+0x2a/0x5a0 [ 399.917215][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 399.917237][ C1] ? nmi_handle+0x14f/0x5a0 [ 399.917261][ C1] ? nmi_handle+0x2a/0x5a0 [ 399.917287][ C1] ? io_serial_out+0x7e/0xc0 [ 399.917305][ C1] ? default_do_nmi+0x63/0x160 [ 399.917329][ C1] ? exc_nmi+0x123/0x1f0 [ 399.917351][ C1] ? end_repeat_nmi+0xf/0x53 [ 399.917377][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 399.917396][ C1] ? io_serial_out+0x4b/0xc0 [ 399.917417][ C1] ? io_serial_out+0x7e/0xc0 [ 399.917435][ C1] ? io_serial_out+0x7e/0xc0 [ 399.917454][ C1] ? io_serial_out+0x7e/0xc0 [ 399.917473][ C1] [ 399.917478][ C1] [ 399.917486][ C1] serial8250_console_write+0x14ed/0x1ed0 [ 399.917514][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 399.917534][ C1] ? __pfx_lock_release+0x10/0x10 [ 399.917555][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 399.917577][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 399.917597][ C1] ? console_flush_all+0x1a3/0xeb0 [ 399.917614][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 399.917639][ C1] console_flush_all+0x869/0xeb0 [ 399.917657][ C1] ? mark_lock+0x9a/0x360 [ 399.917681][ C1] ? console_flush_all+0x1a3/0xeb0 [ 399.917702][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 399.917728][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 399.917748][ C1] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 399.917767][ C1] console_unlock+0x14f/0x3b0 [ 399.917784][ C1] ? __pfx_console_unlock+0x10/0x10 [ 399.917798][ C1] ? vprintk_emit+0x4a0/0xa10 [ 399.917816][ C1] ? vprintk_emit+0x6f5/0xa10 [ 399.917838][ C1] ? vprintk_emit+0x530/0xa10 [ 399.917853][ C1] vprintk_emit+0x730/0xa10 [ 399.917869][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 399.917887][ C1] ? __pfx_snprintf+0x10/0x10 [ 399.917912][ C1] ? read_word_at_a_time+0xe/0x20 [ 399.917932][ C1] ? sized_strscpy+0x9a/0x2b0 [ 399.917953][ C1] dev_vprintk_emit+0x2ae/0x330 [ 399.917980][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 399.918012][ C1] dev_printk_emit+0xdd/0x120 [ 399.918040][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 399.918064][ C1] ? hub_port_reset+0x1933/0x1b30 [ 399.918085][ C1] ? __dev_printk+0x137/0x1a0 [ 399.918113][ C1] _dev_info+0x122/0x170 [ 399.918140][ C1] ? __pfx__dev_info+0x10/0x10 [ 399.918167][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 399.918192][ C1] ? __kmalloc_cache_noprof+0x243/0x390 [ 399.918209][ C1] ? hub_port_init+0x178/0x2670 [ 399.918228][ C1] hub_port_init+0x7bf/0x2670 [ 399.918253][ C1] hub_event+0x2962/0x5150 [ 399.918294][ C1] ? __pfx_hub_event+0x10/0x10 [ 399.918311][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 399.918333][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 399.918358][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 399.918386][ C1] ? process_scheduled_works+0x976/0x1840 [ 399.918405][ C1] process_scheduled_works+0xa66/0x1840 [ 399.918440][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 399.918463][ C1] ? assign_work+0x364/0x3d0 [ 399.918484][ C1] worker_thread+0x870/0xd30 [ 399.918508][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 399.918537][ C1] ? __kthread_parkme+0x169/0x1d0 [ 399.918559][ C1] ? __pfx_worker_thread+0x10/0x10 [ 399.918579][ C1] kthread+0x7a9/0x920 [ 399.918601][ C1] ? __pfx_kthread+0x10/0x10 [ 399.918624][ C1] ? __pfx_worker_thread+0x10/0x10 [ 399.918644][ C1] ? __pfx_kthread+0x10/0x10 [ 399.918666][ C1] ? __pfx_kthread+0x10/0x10 [ 399.918689][ C1] ? __pfx_kthread+0x10/0x10 [ 399.918725][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.918750][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 399.918767][ C1] ? __pfx_kthread+0x10/0x10 [ 399.918791][ C1] ret_from_fork+0x4b/0x80 [ 399.918812][ C1] ? __pfx_kthread+0x10/0x10 [ 399.918841][ C1] ret_from_fork_asm+0x1a/0x30 [ 399.918868][ C1] [ 399.919862][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 399.919882][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 399.919908][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.919923][ T30] Call Trace: [ 399.919932][ T30] [ 399.919942][ T30] dump_stack_lvl+0x241/0x360 [ 399.919969][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 399.919993][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.920017][ T30] ? __pfx__printk+0x10/0x10 [ 399.920048][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 399.920093][ T30] ? vscnprintf+0x5d/0x90 [ 399.920127][ T30] panic+0x349/0x880 [ 399.920163][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 399.920198][ T30] ? __pfx_panic+0x10/0x10 [ 399.920236][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 399.920268][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 399.920301][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 399.920337][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 399.920373][ T30] watchdog+0x1035/0x1040 [ 399.920405][ T30] ? watchdog+0x1ea/0x1040 [ 399.920438][ T30] ? __pfx_watchdog+0x10/0x10 [ 399.920466][ T30] kthread+0x7a9/0x920 [ 399.920495][ T30] ? __pfx_kthread+0x10/0x10 [ 399.920528][ T30] ? __pfx_watchdog+0x10/0x10 [ 399.920556][ T30] ? __pfx_kthread+0x10/0x10 [ 399.920584][ T30] ? __pfx_kthread+0x10/0x10 [ 399.920618][ T30] ? __pfx_kthread+0x10/0x10 [ 399.920658][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.920691][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 399.920714][ T30] ? __pfx_kthread+0x10/0x10 [ 399.920746][ T30] ret_from_fork+0x4b/0x80 [ 399.920774][ T30] ? __pfx_kthread+0x10/0x10 [ 399.920805][ T30] ret_from_fork_asm+0x1a/0x30 [ 399.920844][ T30] [ 399.923539][ T30] Kernel Offset: disabled