last executing test programs: 5m33.547033214s ago: executing program 32 (id=4): syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000012c0), &(0x7f00000005c0)) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40004840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5m23.081536994s ago: executing program 1 (id=49): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x80000000, @private0}, 0xffffffba) 5m21.359629071s ago: executing program 1 (id=51): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x2}, 0x0) 5m20.417267755s ago: executing program 1 (id=53): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x68, 0x75, 0x40, 0xeb1, 0x7007, 0x210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x55, 0x15, 0xe}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000000)='./file1\x00', 0x0, 0x28, 0x0) 5m16.98559033s ago: executing program 33 (id=36): fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x900, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c9301ffffffff0000000006000000000000000000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aae000000200000000"], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x300}}], 0x4, 0xc080) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001b00)={0x2, {0x2, 0x13d, 0x0, 0x8, 0x1001}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000005c0)={0x3, 0x2, 0x2, "0d159fe28bdca5a7951c5861adf99c93ee60aa816c78b6ef1a82e45b0ec1eb6e", 0x3147504d}) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) fchdir(r2) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000220206010006000006000000000000000b860a9d73f114f6db24000e0003016269746d61703a6970000999c1c9f38b7345bea0172a86c0ff253f629644374f898d4c521ceb7badc115c70340964b3a79ab5ce0daba2d60ce85c2bd63bdf1d75ca06719549ba67858682ad475df1f924d1e3cb058025811863bbc573b14572af31ca74f1000c7cef2f8d89a16204d2ebd506d39f8276c70d03cdf2492be68d740821d7cd36fc666da71a86ddf48239f26ad6a85868240a65a5d5c92501fd6c9d3be7183824f2fa71fc0bb053815ef10c7bbc8f96e5a357c8a065e7a82b6744209199c17dff6a7361e330000000000000000"], 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001801800"], 0x34}}, 0x84) dup(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04070620"], 0x7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 5m16.841003666s ago: executing program 1 (id=60): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34565348, 0x0, @discrete={0xfffffffa}}) 5m15.990822795s ago: executing program 1 (id=61): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5m11.865036107s ago: executing program 1 (id=63): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffd0c, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) socket$inet6(0xa, 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 4m55.105116973s ago: executing program 34 (id=63): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffd0c, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) socket$inet6(0xa, 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 4m13.661013327s ago: executing program 6 (id=130): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00003ee000/0x4000)=nil, &(0x7f0000064000/0x1000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x66}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 4m12.037205096s ago: executing program 6 (id=135): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 4m11.005281035s ago: executing program 6 (id=137): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) 4m10.111694655s ago: executing program 6 (id=140): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) 4m9.231495354s ago: executing program 6 (id=142): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 4m8.220995638s ago: executing program 6 (id=147): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x88101) rmdir(0x0) 3m52.704942751s ago: executing program 35 (id=147): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x88101) rmdir(0x0) 3m10.902972021s ago: executing program 5 (id=291): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d04b1082a6d0000000409021200"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x14, 0xc2}, &(0x7f00000007c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m8.029609816s ago: executing program 5 (id=300): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x1c) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) 3m7.319676686s ago: executing program 5 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 3m6.394972615s ago: executing program 5 (id=304): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) 3m5.337737349s ago: executing program 5 (id=308): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='subflow_check_data_avail\x00', r0}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) 3m4.264992574s ago: executing program 5 (id=313): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x13, 0x1, 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x1}, 0x2) 3m4.066735813s ago: executing program 0 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 3m3.194468482s ago: executing program 0 (id=317): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x448200, 0x8, 0x27}, 0x18) mkdirat(r1, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4048000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3m2.305173653s ago: executing program 0 (id=318): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x68, 0x75, 0x40, 0xeb1, 0x7007, 0x210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x55, 0x15, 0xe}}]}}]}}, 0x0) 2m59.915390166s ago: executing program 7 (id=320): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 2m59.29926478s ago: executing program 7 (id=323): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='subflow_check_data_avail\x00', r1}, 0x18) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) 2m58.758292566s ago: executing program 0 (id=324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="0bc3", 0x2}, {&(0x7f0000000280)="d336bd75243cb9a6418ee0", 0xb}], 0x2) 2m58.741073516s ago: executing program 7 (id=325): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000100)='./bus\x00', 0x8) r0 = open(0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m57.987348148s ago: executing program 0 (id=327): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 2m57.987170838s ago: executing program 7 (id=328): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x448200, 0x8, 0x27}, 0x18) mkdirat(r1, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4048000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m57.177321485s ago: executing program 0 (id=331): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000884}, 0x40810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xffff}}}, 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @local}}]}, {0xb074739e4276a0a0}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2m56.79335284s ago: executing program 7 (id=332): r0 = epoll_create1(0x80000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m56.25715932s ago: executing program 7 (id=333): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x6d) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, 0x0, r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000900)}, 0x20) writev(r1, 0x0, 0x0) 2m48.80531299s ago: executing program 36 (id=313): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x13, 0x1, 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x1}, 0x2) 2m41.38923184s ago: executing program 37 (id=331): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000884}, 0x40810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xffff}}}, 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @local}}]}, {0xb074739e4276a0a0}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2m40.355936913s ago: executing program 38 (id=333): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x6d) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, 0x0, r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000900)}, 0x20) writev(r1, 0x0, 0x0) 46.84387024s ago: executing program 9 (id=576): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200"/12, @ANYBLOB="cd"], 0x20) 35.791285993s ago: executing program 8 (id=581): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 34.836304216s ago: executing program 8 (id=582): unshare(0x28000600) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) 33.947069823s ago: executing program 8 (id=583): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df2944f6c2ef07c022", 0x1f, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 31.836335335s ago: executing program 8 (id=584): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="09005d000400fff5fd0900008400000000000000ebc3bba0d61c715775e50e23c4f4d86769af9fd6cdd9318e01999a8defd9f7897cbd21c81f60e8e3d95339", @ANYBLOB="30599411cf592e7bc4aa308daffd14823d473a773cc54421009acc246ea1369fb053b389879bb869e4311d3536655026c231b11cfb5cb4312bacbc59639c068176a604c7239445f871d11bedbcae7bfaf54a2bdf81c3034ecac2f17ad3bdbbe657967ddd80fb2e71e2dc27f9e3bc576c78b599cdd14feaabb5b37611"], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 30.829435988s ago: executing program 8 (id=585): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x24, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)={0x20, 0x15, 0x3, "bc0da6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 29.550986995s ago: executing program 8 (id=586): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r0, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r0, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r0, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r0, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r0, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r0, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r0, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r0, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r0, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) 17.989031307s ago: executing program 2 (id=588): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)='\r\x00\x00\x00Y~V\x00\x00\x00\x00\x00\x00', 0xd) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) listen(r4, 0x0) r5 = socket(0x5, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) acct(&(0x7f0000000240)='./file0\x00') r6 = dup(r1) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xff, 0x2, 0x9, 0x8000}, {0x6, 0x5, 0x6, 0x1}, {0x4, 0x0, 0x3, 0x1}, {0x89, 0x1, 0x2, 0x6}]}) 16.414916206s ago: executing program 2 (id=589): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x101080, 0x10) fcntl$notify(r0, 0x402, 0x3) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 15.246426163s ago: executing program 2 (id=590): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) sched_setaffinity(0x0, 0x0, 0x0) 13.887037261s ago: executing program 2 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file1\x00') 12.544829494s ago: executing program 3 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca#\'\x12xY!\xa4\xde\x1b+\xb2\x1aE\x10x\xce@i}\x03\x00a\x0e\xe6\x995b\r\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) 12.495922956s ago: executing program 2 (id=594): request_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) 10.423093924s ago: executing program 2 (id=596): write$sysctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000e80)={{}, {0x80000000, 0x0, 0x0, [0x3, 0x80]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="10", 0x1, 0x4c8c5, 0x0, 0x0) close(r1) 8.76377789s ago: executing program 4 (id=598): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 7.479989378s ago: executing program 4 (id=599): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)='\r\x00\x00\x00Y~V\x00\x00\x00\x00\x00\x00', 0xd) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) listen(r4, 0x0) r5 = socket(0x5, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) acct(&(0x7f0000000240)='./file0\x00') r6 = dup(r1) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xff, 0x2, 0x9, 0x8000}, {0x6, 0x5, 0x6, 0x1}, {0x4, 0x0, 0x3, 0x1}, {0x89, 0x1, 0x2, 0x6}]}) 7.479610752s ago: executing program 3 (id=600): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df2944f6c2ef07c022", 0x1f, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.363131478s ago: executing program 4 (id=601): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) 5.116563544s ago: executing program 9 (id=576): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200"/12, @ANYBLOB="cd"], 0x20) 4.955005451s ago: executing program 3 (id=602): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x99, 0x4200, 0x0, 0x0}], 0x1}) 4.220833075s ago: executing program 9 (id=603): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0xc0046686, &(0x7f00000003c0)) 3.375634434s ago: executing program 4 (id=604): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) unlink(0x0) 2.882264102s ago: executing program 9 (id=605): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xa8) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) 2.414597031s ago: executing program 3 (id=606): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r3], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.724057401s ago: executing program 9 (id=607): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.440872333s ago: executing program 4 (id=608): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7001000000000200000008000300", @ANYRES32=r1, @ANYBLOB="080026006c0900000800a1000100000008009f"], 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x4) 1.106899605s ago: executing program 3 (id=609): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 503.582859ms ago: executing program 9 (id=610): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0240, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 154.082254ms ago: executing program 4 (id=611): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 0s ago: executing program 3 (id=612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) kernel console output (not intermixed with test programs): r -71 [ 367.878192][ T5893] usb 8-1: USB disconnect, device number 2 [ 369.388477][ T6579] overlayfs: missing 'lowerdir' [ 369.787787][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 374.275940][ T6623] overlayfs: missing 'lowerdir' [ 378.201848][ T6657] overlayfs: missing 'lowerdir' [ 381.610636][ T6686] misc userio: Can't change port type on an already running userio instance [ 382.745636][ T6699] overlayfs: failed to resolve './file1': -2 [ 383.464158][ T6706] overlayfs: missing 'lowerdir' [ 384.895731][ T5893] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 385.137235][ T5893] usb 8-1: Using ep0 maxpacket: 16 [ 385.268343][ T5893] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 385.277838][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.286267][ T5893] usb 8-1: Product: syz [ 385.290571][ T5893] usb 8-1: Manufacturer: syz [ 385.299101][ T5893] usb 8-1: SerialNumber: syz [ 385.427704][ T5893] usb 8-1: config 0 descriptor?? [ 385.471544][ T5893] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 385.984145][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.000416][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.010981][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.054489][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.076152][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.733728][ T5893] ssu100 8-1:0.0: probe with driver ssu100 failed with error -32 [ 386.764081][ T5893] usb 8-1: USB disconnect, device number 3 [ 387.939475][ T6726] chnl_net:caif_netlink_parms(): no params data found [ 388.269926][ T53] Bluetooth: hci1: command tx timeout [ 388.569498][ T6746] overlayfs: failed to resolve './file1': -2 [ 389.144811][ T6754] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 389.159257][ T6754] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 389.794390][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.802026][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.810297][ T6726] bridge_slave_0: entered allmulticast mode [ 389.821235][ T6726] bridge_slave_0: entered promiscuous mode [ 389.841008][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.850849][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.858921][ T6726] bridge_slave_1: entered allmulticast mode [ 389.869054][ T6726] bridge_slave_1: entered promiscuous mode [ 390.209557][ T6726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.351913][ T6726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.411901][ T53] Bluetooth: hci1: command tx timeout [ 390.688744][ T6726] team0: Port device team_slave_0 added [ 390.802473][ T6726] team0: Port device team_slave_1 added [ 390.888077][ T5893] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 391.184031][ T5893] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 391.193414][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.201779][ T5893] usb 3-1: Product: syz [ 391.206176][ T5893] usb 3-1: Manufacturer: syz [ 391.211002][ T5893] usb 3-1: SerialNumber: syz [ 391.275925][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.283186][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.309485][ T6726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.384021][ T5893] usb 3-1: config 0 descriptor?? [ 391.415905][ T5893] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 391.524322][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.532002][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.562013][ T6726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.665285][ T5893] usb 3-1: USB disconnect, device number 4 [ 392.342561][ T6726] hsr_slave_0: entered promiscuous mode [ 392.352463][ T6726] hsr_slave_1: entered promiscuous mode [ 392.492341][ T53] Bluetooth: hci1: command tx timeout [ 393.237070][ T6787] overlayfs: failed to resolve './file1': -2 [ 394.087595][ T6726] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 394.123924][ T6794] overlayfs: missing 'lowerdir' [ 394.294649][ T6726] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 394.338959][ T6797] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 394.351698][ T6797] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 394.407907][ T6726] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 394.500170][ T6726] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 394.597750][ T53] Bluetooth: hci1: command tx timeout [ 396.239375][ T6726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.559950][ T6726] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.718437][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.726118][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.746868][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.754604][ T4440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.248451][ T6726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.376901][ T5849] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 397.652225][ T5849] usb 8-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 397.664992][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.674382][ T5849] usb 8-1: Product: syz [ 397.678948][ T5849] usb 8-1: Manufacturer: syz [ 397.683801][ T5849] usb 8-1: SerialNumber: syz [ 397.807364][ T5849] usb 8-1: config 0 descriptor?? [ 397.894465][ T5849] go7007 8-1:0.0: probe with driver go7007 failed with error -12 [ 398.067858][ T5849] usb 8-1: USB disconnect, device number 4 [ 399.591070][ T6726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.863259][ T6840] overlayfs: missing 'lowerdir' [ 400.021134][ T6843] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 400.031604][ T6843] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 400.408299][ T6729] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 400.634530][ T6729] usb 1-1: Using ep0 maxpacket: 16 [ 400.764499][ T6729] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 400.774324][ T6729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.783880][ T6729] usb 1-1: Product: syz [ 400.788436][ T6729] usb 1-1: Manufacturer: syz [ 400.793278][ T6729] usb 1-1: SerialNumber: syz [ 401.000620][ T6729] usb 1-1: config 0 descriptor?? [ 401.069440][ T6729] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 402.137315][ T6729] ssu100 1-1:0.0: probe with driver ssu100 failed with error -32 [ 402.208353][ T6729] usb 1-1: USB disconnect, device number 3 [ 403.461941][ T6726] veth0_vlan: entered promiscuous mode [ 403.683485][ T6726] veth1_vlan: entered promiscuous mode [ 404.027474][ T11] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 404.044749][ T11] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 404.236404][ T11] usb 6-1: USB disconnect, device number 2 [ 404.348064][ T6726] veth0_macvtap: entered promiscuous mode [ 404.489314][ T6726] veth1_macvtap: entered promiscuous mode [ 404.825633][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.836882][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.847430][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.858413][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.868874][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.885134][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.896932][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.907871][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.918087][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.929008][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.945111][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.366397][ T11] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 405.437557][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 405.472101][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.486788][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.501830][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.513707][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.523936][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.534719][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.544965][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.555888][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.566008][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.577603][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.592557][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.661253][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 405.690530][ T6726] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.700455][ T6726] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.714217][ T6726] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.724957][ T6726] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.784948][ T11] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 405.794612][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.840696][ T5893] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 405.850071][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.858238][ T5893] usb 6-1: Product: syz [ 405.862777][ T5893] usb 6-1: Manufacturer: syz [ 405.867523][ T5893] usb 6-1: SerialNumber: syz [ 405.924906][ T11] usb 3-1: config 0 descriptor?? [ 406.004167][ T6888] overlayfs: missing 'workdir' [ 406.072866][ T5893] usb 6-1: config 0 descriptor?? [ 406.131865][ T5893] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 406.222869][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 406.234992][ T11] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 406.244879][ T11] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 406.337451][ T5893] usb 6-1: USB disconnect, device number 3 [ 406.655537][ T6894] overlayfs: missing 'lowerdir' [ 407.074811][ T4440] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.459834][ T4440] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.729306][ T4440] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.956333][ T4440] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.141046][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 408.428276][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 408.469100][ T24] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 408.478681][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.490211][ T24] usb 8-1: Product: syz [ 408.495754][ T24] usb 8-1: Manufacturer: syz [ 408.500631][ T24] usb 8-1: SerialNumber: syz [ 408.659569][ T24] usb 8-1: config 0 descriptor?? [ 408.718122][ T24] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 409.021952][ T4440] bridge_slave_1: left allmulticast mode [ 409.028269][ T4440] bridge_slave_1: left promiscuous mode [ 409.035764][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.101512][ T6919] misc userio: Begin command sent, but we're already running [ 409.224167][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.231306][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.267038][ T4440] bridge_slave_0: left allmulticast mode [ 409.273002][ T4440] bridge_slave_0: left promiscuous mode [ 409.280040][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.527719][ T6921] netfs: Couldn't get user pages (rc=-14) [ 409.974237][ T24] ssu100 8-1:0.0: probe with driver ssu100 failed with error -32 [ 410.301406][ T24] usb 8-1: USB disconnect, device number 5 [ 410.569844][ T4440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.685398][ T4440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.722705][ T4440] bond0 (unregistering): Released all slaves [ 410.785295][ T6932] overlayfs: missing 'workdir' [ 411.276058][ T5801] Bluetooth: hci5: command 0x0406 tx timeout [ 411.345104][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 411.562364][ T6942] overlayfs: missing 'lowerdir' [ 411.615776][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 411.683730][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 411.693424][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.779828][ T24] usb 1-1: config 0 descriptor?? [ 411.810472][ T5893] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 412.022172][ T4440] hsr_slave_0: left promiscuous mode [ 412.050396][ T4440] hsr_slave_1: left promiscuous mode [ 412.060694][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.069400][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.107873][ T5893] usb 8-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 412.118266][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.126578][ T5893] usb 8-1: Product: syz [ 412.131472][ T5893] usb 8-1: Manufacturer: syz [ 412.133586][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 412.136259][ T5893] usb 8-1: SerialNumber: syz [ 412.223520][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.231799][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.244766][ T5893] usb 8-1: config 0 descriptor?? [ 412.332475][ T5893] go7007 8-1:0.0: probe with driver go7007 failed with error -12 [ 412.398283][ T4440] veth1_macvtap: left promiscuous mode [ 412.404148][ T4440] veth0_macvtap: left promiscuous mode [ 412.410484][ T4440] veth1_vlan: left promiscuous mode [ 412.416376][ T4440] veth0_vlan: left promiscuous mode [ 412.487197][ T5893] usb 8-1: USB disconnect, device number 6 [ 413.556800][ T6960] netlink: 72 bytes leftover after parsing attributes in process `syz.2.252'. [ 413.735931][ T6961] 9pnet_fd: Insufficient options for proto=fd [ 414.060218][ T4440] team0 (unregistering): Port device team_slave_1 removed [ 414.096854][ T4440] team0 (unregistering): Port device team_slave_0 removed [ 415.540350][ T5849] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 415.660412][ T6981] overlayfs: failed to resolve './file0': -2 [ 415.799782][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 415.842698][ T6985] overlayfs: missing 'workdir' [ 415.911917][ T5849] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 415.921649][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.931061][ T5849] usb 6-1: Product: syz [ 415.935502][ T5849] usb 6-1: Manufacturer: syz [ 415.940974][ T5849] usb 6-1: SerialNumber: syz [ 416.082412][ T5849] usb 6-1: config 0 descriptor?? [ 416.142771][ T5849] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 416.163149][ T6988] overlayfs: missing 'lowerdir' [ 417.187033][ T5849] ssu100 6-1:0.0: probe with driver ssu100 failed with error -32 [ 417.235514][ T5849] usb 6-1: USB disconnect, device number 4 [ 417.674164][ T5850] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 417.913982][ T5850] usb 8-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 417.923704][ T5850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.932180][ T5850] usb 8-1: Product: syz [ 417.939619][ T5850] usb 8-1: Manufacturer: syz [ 417.944470][ T5850] usb 8-1: SerialNumber: syz [ 418.043752][ T5850] usb 8-1: config 0 descriptor?? [ 418.119343][ T5850] go7007 8-1:0.0: probe with driver go7007 failed with error -12 [ 418.264039][ T7011] 9pnet_fd: Insufficient options for proto=fd [ 418.382770][ T5850] usb 8-1: USB disconnect, device number 7 [ 418.509311][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.518127][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.645093][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.657459][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.403741][ T7031] overlayfs: failed to resolve './file0': -2 [ 420.812680][ T7035] overlay: filesystem on ./bus not supported as upperdir [ 420.909144][ T7039] overlayfs: missing 'workdir' [ 423.285186][ T7061] 9pnet_fd: Insufficient options for proto=fd [ 424.234824][ T5893] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 424.419235][ T5893] usb 8-1: Using ep0 maxpacket: 32 [ 424.467899][ T7072] overlayfs: failed to resolve './file0': -2 [ 424.474693][ T5893] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 424.474850][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.522305][ T5893] usb 8-1: config 0 descriptor?? [ 424.782527][ T5893] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 424.884907][ T7077] overlay: filesystem on ./bus not supported as upperdir [ 425.539372][ T7083] overlayfs: missing 'workdir' [ 426.893190][ T5849] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 427.103633][ T5849] usb 6-1: Using ep0 maxpacket: 8 [ 427.176398][ T5849] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.187229][ T5849] usb 6-1: config 0 has no interfaces? [ 427.276176][ T5849] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.288463][ T5849] usb 6-1: config 0 has no interfaces? [ 427.326406][ T5849] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.337155][ T5849] usb 6-1: config 0 has no interfaces? [ 427.392710][ T5849] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.403831][ T5849] usb 6-1: config 0 has no interfaces? [ 427.409650][ T5849] usb 6-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 427.419462][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.436855][ T7109] overlayfs: failed to resolve './file0': -2 [ 427.638560][ T5849] usb 6-1: config 0 descriptor?? [ 428.017351][ T5846] usb 6-1: USB disconnect, device number 5 [ 428.537697][ T7120] overlay: filesystem on ./bus not supported as upperdir [ 429.429341][ T5846] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 429.707431][ T7133] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.748456][ T5846] usb 9-1: Using ep0 maxpacket: 32 [ 429.769826][ T5846] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 429.779494][ T5846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.815728][ T5846] usb 9-1: config 0 descriptor?? [ 430.116383][ T5846] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 432.030653][ T7157] overlayfs: failed to resolve './file0': -2 [ 438.026226][ T7211] overlayfs: failed to resolve './file0': -2 [ 440.254583][ T7238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 440.264147][ T7238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 441.968001][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 446.540111][ T5852] kernel read not supported for file /dsp (pid: 5852 comm: kworker/0:4) [ 447.090187][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 449.868158][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 449.877246][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 449.888254][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 449.904172][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 449.915490][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.195773][ T7311] chnl_net:caif_netlink_parms(): no params data found [ 451.971552][ T53] Bluetooth: hci4: command tx timeout [ 452.677248][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.692783][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.702060][ T7311] bridge_slave_0: entered allmulticast mode [ 452.712392][ T7311] bridge_slave_0: entered promiscuous mode [ 452.908817][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.916913][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.924989][ T7311] bridge_slave_1: entered allmulticast mode [ 452.935747][ T7311] bridge_slave_1: entered promiscuous mode [ 453.836969][ T7311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.051289][ T53] Bluetooth: hci4: command tx timeout [ 454.055586][ T7311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.766722][ T7311] team0: Port device team_slave_0 added [ 454.925737][ T7311] team0: Port device team_slave_1 added [ 455.621517][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.629092][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.659593][ T7311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.873129][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.880338][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.907067][ T7311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.137981][ T53] Bluetooth: hci4: command tx timeout [ 456.676296][ T7311] hsr_slave_0: entered promiscuous mode [ 456.689871][ T7311] hsr_slave_1: entered promiscuous mode [ 456.698010][ T7311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.705894][ T7311] Cannot create hsr debugfs directory [ 457.379481][ T5801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 457.408656][ T5801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 457.421956][ T5801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 457.442160][ T5801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 457.478369][ T5801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 458.219578][ T53] Bluetooth: hci4: command tx timeout [ 458.677998][ T7311] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 458.982493][ T7311] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 459.269480][ T7311] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 459.373919][ T7311] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 459.633476][ T53] Bluetooth: hci6: command tx timeout [ 460.208047][ T5801] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 460.251719][ T5801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 460.308070][ T5801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 460.340250][ T5801] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 460.381657][ T5801] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 461.543558][ T7359] chnl_net:caif_netlink_parms(): no params data found [ 461.629658][ T7311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.680316][ T53] Bluetooth: hci6: command tx timeout [ 461.859368][ T7311] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.041110][ T4928] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.048822][ T4928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.065852][ T4928] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.073586][ T4928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.534401][ T5801] Bluetooth: hci7: command tx timeout [ 462.885700][ T7376] chnl_net:caif_netlink_parms(): no params data found [ 463.751496][ T5801] Bluetooth: hci6: command tx timeout [ 464.268954][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.277656][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.286219][ T7359] bridge_slave_0: entered allmulticast mode [ 464.296577][ T7359] bridge_slave_0: entered promiscuous mode [ 464.506074][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.514069][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.521862][ T7359] bridge_slave_1: entered allmulticast mode [ 464.530824][ T7359] bridge_slave_1: entered promiscuous mode [ 464.624622][ T5801] Bluetooth: hci7: command tx timeout [ 464.928371][ T7359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.100156][ T7359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.584851][ T7311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.831076][ T5801] Bluetooth: hci6: command tx timeout [ 466.141644][ T7359] team0: Port device team_slave_0 added [ 466.178027][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.185823][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.193905][ T7376] bridge_slave_0: entered allmulticast mode [ 466.210269][ T7376] bridge_slave_0: entered promiscuous mode [ 466.429296][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.437169][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.445268][ T7376] bridge_slave_1: entered allmulticast mode [ 466.455908][ T7376] bridge_slave_1: entered promiscuous mode [ 466.601439][ T7359] team0: Port device team_slave_1 added [ 466.700876][ T4928] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.703755][ T5801] Bluetooth: hci7: command tx timeout [ 467.520450][ T4928] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.776325][ T7376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.808474][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.816421][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.847163][ T7359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.929273][ T4928] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.060661][ T7376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.086247][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.093860][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.120485][ T7359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.299370][ T4928] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.527787][ T7376] team0: Port device team_slave_0 added [ 468.599229][ T7376] team0: Port device team_slave_1 added [ 468.774416][ T5801] Bluetooth: hci7: command tx timeout [ 469.100984][ T7359] hsr_slave_0: entered promiscuous mode [ 469.111693][ T7359] hsr_slave_1: entered promiscuous mode [ 469.120189][ T7359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.128066][ T7359] Cannot create hsr debugfs directory [ 469.260035][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.269088][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.297845][ T7376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.682795][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.694863][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.722556][ T7376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.380803][ T4928] bridge_slave_1: left allmulticast mode [ 470.387368][ T4928] bridge_slave_1: left promiscuous mode [ 470.394319][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.534261][ T4928] bridge_slave_0: left allmulticast mode [ 470.540367][ T4928] bridge_slave_0: left promiscuous mode [ 470.548299][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.644410][ T11] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 470.660441][ T11] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 470.678677][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.680106][ T5893] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 470.686374][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.717228][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 470.720877][ T5893] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 470.736232][ T24] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 470.766016][ T5846] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 470.782229][ T5846] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 471.180804][ T5846] usb 9-1: USB disconnect, device number 2 [ 471.206597][ T11] usb 3-1: USB disconnect, device number 5 [ 471.274832][ T5975] udevd[5975]: setting mode of /dev/bus/usb/003/005 to 020664 failed: No such file or directory [ 471.346682][ T5975] udevd[5975]: setting owner of /dev/bus/usb/003/005 to uid=0, gid=0 failed: No such file or directory [ 471.694343][ T5846] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 471.711122][ T24] usb 1-1: USB disconnect, device number 4 [ 471.931355][ T7445] overlayfs: failed to resolve './file1': -2 [ 471.954224][ T5846] usb 9-1: Using ep0 maxpacket: 8 [ 472.036740][ T5846] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.050054][ T5846] usb 9-1: config 0 has no interfaces? [ 472.103978][ T4928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.132368][ T5846] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.145920][ T5846] usb 9-1: config 0 has no interfaces? [ 472.158179][ T5893] usb 8-1: USB disconnect, device number 8 [ 472.207926][ T4928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.231705][ T5846] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.243383][ T5846] usb 9-1: config 0 has no interfaces? [ 472.263406][ T4928] bond0 (unregistering): Released all slaves [ 472.294090][ T5846] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.304630][ T5846] usb 9-1: config 0 has no interfaces? [ 472.310420][ T5846] usb 9-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 472.320025][ T5846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.446971][ T5846] usb 9-1: config 0 descriptor?? [ 472.954852][ T7376] hsr_slave_0: entered promiscuous mode [ 472.970984][ T7376] hsr_slave_1: entered promiscuous mode [ 472.980494][ T7376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.988569][ T7376] Cannot create hsr debugfs directory [ 473.122531][ T5843] usb 9-1: USB disconnect, device number 3 [ 473.203777][ T7311] veth0_vlan: entered promiscuous mode [ 474.114660][ T7311] veth1_vlan: entered promiscuous mode [ 474.215372][ T4928] hsr_slave_0: left promiscuous mode [ 474.264751][ T4928] hsr_slave_1: left promiscuous mode [ 474.272853][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.281130][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.367602][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.375985][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.455996][ T4928] veth1_macvtap: left promiscuous mode [ 474.461840][ T4928] veth0_macvtap: left promiscuous mode [ 474.469762][ T4928] veth1_vlan: left promiscuous mode [ 474.475556][ T4928] veth0_vlan: left promiscuous mode [ 475.651927][ T4928] team0 (unregistering): Port device team_slave_1 removed [ 475.689943][ T4928] team0 (unregistering): Port device team_slave_0 removed [ 477.416007][ T11] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 477.666873][ T7311] veth0_macvtap: entered promiscuous mode [ 477.716670][ T11] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 477.726772][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.735370][ T11] usb 3-1: Product: syz [ 477.739811][ T11] usb 3-1: Manufacturer: syz [ 477.744987][ T11] usb 3-1: SerialNumber: syz [ 477.803138][ T11] usb 3-1: config 0 descriptor?? [ 477.893663][ T11] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 478.076340][ T7311] veth1_macvtap: entered promiscuous mode [ 478.079978][ T5893] usb 3-1: USB disconnect, device number 6 [ 478.139257][ T4928] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.227516][ T7359] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 478.462844][ T7480] overlayfs: failed to resolve './file1': -2 [ 478.495530][ T7359] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 478.619640][ T4928] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.972701][ T7359] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.112482][ T4928] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.330391][ T7359] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 479.438291][ T4928] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.640867][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.651906][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.662317][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.673185][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.674795][ T5843] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 479.683867][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.701685][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.712226][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.726507][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.743551][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.913092][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 479.978022][ T5843] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 479.985876][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.986615][ T5843] usb 3-1: config 0 has no interface number 0 [ 479.997179][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.014038][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.025073][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.038538][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.050369][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.060680][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.071622][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.087362][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.091013][ T5843] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 480.106588][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.114997][ T5843] usb 3-1: Product: syz [ 480.119418][ T5843] usb 3-1: Manufacturer: syz [ 480.124528][ T5843] usb 3-1: SerialNumber: syz [ 480.329571][ T5843] usb 3-1: config 0 descriptor?? [ 480.472948][ T5843] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 480.562604][ T5843] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 480.570796][ T5843] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 480.609140][ T7376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 480.770872][ T4928] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.810745][ T5843] usb 3-1: USB disconnect, device number 7 [ 480.920393][ T7376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 480.978571][ T7311] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.988052][ T7311] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.997424][ T7311] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.006990][ T7311] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.092832][ T4928] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.164766][ T7376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 481.262582][ T4928] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.444078][ T4928] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.493916][ T7376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 482.167268][ T4928] bridge_slave_1: left allmulticast mode [ 482.173332][ T4928] bridge_slave_1: left promiscuous mode [ 482.184091][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.262373][ T4928] bridge_slave_0: left allmulticast mode [ 482.268614][ T4928] bridge_slave_0: left promiscuous mode [ 482.276126][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.321709][ T4928] bridge_slave_1: left allmulticast mode [ 482.327954][ T4928] bridge_slave_1: left promiscuous mode [ 482.334820][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.429025][ T4928] bridge_slave_0: left allmulticast mode [ 482.435585][ T4928] bridge_slave_0: left promiscuous mode [ 482.442192][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.457779][ T4928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.493988][ T4928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.529549][ T4928] bond0 (unregistering): Released all slaves [ 483.592846][ T4928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.624519][ T4928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.668785][ T4928] bond0 (unregistering): Released all slaves [ 483.692718][ T4928] bond1 (unregistering): Released all slaves [ 483.959816][ T7359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.264629][ T7359] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.588315][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.596055][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.726873][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.734539][ T4440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.671798][ T4928] hsr_slave_0: left promiscuous mode [ 485.700788][ T4928] hsr_slave_1: left promiscuous mode [ 485.711703][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.719700][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.757578][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.770450][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.871723][ T4928] hsr_slave_0: left promiscuous mode [ 485.904967][ T4928] hsr_slave_1: left promiscuous mode [ 485.913016][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.921104][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.952095][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.960958][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.015199][ T4928] veth1_macvtap: left promiscuous mode [ 486.021019][ T4928] veth0_macvtap: left promiscuous mode [ 486.027175][ T4928] veth1_vlan: left promiscuous mode [ 486.032791][ T4928] veth0_vlan: left promiscuous mode [ 486.043122][ T4928] veth1_macvtap: left promiscuous mode [ 486.049113][ T4928] veth0_macvtap: left promiscuous mode [ 486.059126][ T4928] veth1_vlan: left promiscuous mode [ 486.065183][ T4928] veth0_vlan: left promiscuous mode [ 486.381600][ T7523] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 486.388467][ T7523] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 486.466722][ T7527] overlayfs: failed to resolve './file1': -2 [ 486.547695][ T7523] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 486.554119][ T7523] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 486.648606][ T7523] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 486.766456][ T7523] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 486.772883][ T7523] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 486.843680][ T7523] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 486.871141][ T7523] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 486.878006][ T7523] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 487.000937][ T7523] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 487.260499][ T7523] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 487.267495][ T7523] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 487.391908][ T4928] team0 (unregistering): Port device team_slave_1 removed [ 487.429101][ T7523] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 487.450866][ T4928] team0 (unregistering): Port device team_slave_0 removed [ 488.136045][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 488.209929][ T4928] team0 (unregistering): Port device team_slave_1 removed [ 488.295638][ T4928] team0 (unregistering): Port device team_slave_0 removed [ 488.622076][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout [ 488.636795][ T11] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 488.788055][ T7376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.859037][ T5801] Bluetooth: hci4: command 0x0c1a tx timeout [ 488.965999][ T5801] Bluetooth: hci6: command 0x0c1a tx timeout [ 489.064095][ T11] usb 9-1: Using ep0 maxpacket: 32 [ 489.148543][ T7376] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.197213][ T11] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 489.206619][ T11] usb 9-1: config 0 has no interface number 0 [ 489.282957][ T3789] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.290678][ T3789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.320482][ T11] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 489.330350][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.339258][ T5801] Bluetooth: hci7: command 0x0c1a tx timeout [ 489.347058][ T11] usb 9-1: Product: syz [ 489.351519][ T11] usb 9-1: Manufacturer: syz [ 489.356724][ T11] usb 9-1: SerialNumber: syz [ 489.419211][ T3789] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.426953][ T3789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.523212][ T11] usb 9-1: config 0 descriptor?? [ 489.613021][ T11] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 489.829809][ T11] usb 9-1: qt2_setup_urbs - submit read urb failed -8 [ 489.839744][ T11] quatech2 9-1:0.51: probe with driver quatech2 failed with error -8 [ 490.041308][ T5843] usb 9-1: USB disconnect, device number 4 [ 490.271040][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 490.697865][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout [ 490.935531][ T5801] Bluetooth: hci4: command 0x0c1a tx timeout [ 491.017110][ T5801] Bluetooth: hci6: command 0x0c1a tx timeout [ 491.280440][ T7359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.415920][ T5801] Bluetooth: hci7: command 0x0c1a tx timeout [ 492.109820][ T7359] veth0_vlan: entered promiscuous mode [ 492.171785][ T7376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.308019][ T7359] veth1_vlan: entered promiscuous mode [ 492.693899][ T7359] veth0_macvtap: entered promiscuous mode [ 492.777300][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout [ 492.819096][ T7359] veth1_macvtap: entered promiscuous mode [ 493.022069][ T5801] Bluetooth: hci4: command 0x0c1a tx timeout [ 493.041635][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.052630][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.070604][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.081829][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.092244][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.103883][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.122924][ T7359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.177616][ T5801] Bluetooth: hci6: command 0x0c1a tx timeout [ 493.281952][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.294081][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.304352][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.315238][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.325478][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.336748][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.357557][ T7359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.495336][ T5801] Bluetooth: hci7: command 0x0c1a tx timeout [ 493.519590][ T7359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.528947][ T7359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.538206][ T7359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.552169][ T7359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.855617][ T4123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.863894][ T4123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.163167][ T4088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.171744][ T4088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.118144][ T7376] veth0_vlan: entered promiscuous mode [ 495.319204][ T7376] veth1_vlan: entered promiscuous mode [ 495.673593][ T7376] veth0_macvtap: entered promiscuous mode [ 495.805688][ T7376] veth1_macvtap: entered promiscuous mode [ 496.031786][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.042739][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.053601][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.064430][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.074730][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.085613][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.095841][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.110770][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.127473][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.521014][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.532688][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.543723][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.554785][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.565293][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.576123][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.586429][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.597386][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.612747][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.828322][ T11] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 496.886823][ T7376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.896097][ T7376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.905477][ T7376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.914516][ T7376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.006441][ T5893] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 497.026179][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 497.068697][ T11] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 497.078341][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.086988][ T11] usb 3-1: Product: syz [ 497.091405][ T11] usb 3-1: Manufacturer: syz [ 497.096560][ T11] usb 3-1: SerialNumber: syz [ 497.167225][ T11] usb 3-1: config 0 descriptor?? [ 497.195493][ T5893] usb 10-1: Using ep0 maxpacket: 32 [ 497.211593][ T11] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 497.266429][ T5893] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 497.275568][ T5893] usb 10-1: config 0 has no interface number 0 [ 497.313489][ T5893] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 497.323466][ T5893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.333554][ T5893] usb 10-1: Product: syz [ 497.340751][ T5893] usb 10-1: Manufacturer: syz [ 497.346579][ T5893] usb 10-1: SerialNumber: syz [ 497.446680][ T11] ssu100 3-1:0.0: probe with driver ssu100 failed with error -32 [ 497.488652][ T5893] usb 10-1: config 0 descriptor?? [ 497.593771][ T5893] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 497.765565][ T5893] usb 10-1: qt2_setup_urbs - submit read urb failed -8 [ 497.773690][ T5893] quatech2 10-1:0.51: probe with driver quatech2 failed with error -8 [ 497.981897][ T5893] usb 10-1: USB disconnect, device number 2 [ 499.498748][ T30] audit: type=1326 audit(1745659618.813:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 499.614461][ T30] audit: type=1326 audit(1745659618.863:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 499.637765][ T30] audit: type=1326 audit(1745659618.873:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 499.660058][ T30] audit: type=1326 audit(1745659618.893:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 499.682556][ T30] audit: type=1326 audit(1745659618.893:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=250 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 499.708175][ T30] audit: type=1326 audit(1745659618.893:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 499.731684][ T30] audit: type=1326 audit(1745659618.893:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.8.398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 499.951512][ T5893] usb 3-1: USB disconnect, device number 8 [ 500.794528][ T4928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.803620][ T4928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.874927][ T5893] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 501.085559][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 501.129039][ T5893] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.141009][ T5893] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.189626][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.198028][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.268486][ T5893] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 501.279869][ T5893] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 501.288875][ T5893] usb 3-1: Product: syz [ 501.293311][ T5893] usb 3-1: Manufacturer: syz [ 501.425221][ T5893] hub 3-1:4.0: USB hub found [ 501.665139][ T5893] hub 3-1:4.0: 2 ports detected [ 502.909455][ T5893] hub 3-1:4.0: activate --> -90 [ 503.356117][ T7197] usb 3-1: USB disconnect, device number 9 [ 503.502980][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 503.609053][ T5893] usb 3-1-port1: config error [ 503.965117][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 504.213042][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 504.255386][ T24] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 504.264007][ T24] usb 9-1: config 0 has no interface number 0 [ 504.363897][ T24] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 504.373493][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.382352][ T24] usb 9-1: Product: syz [ 504.386874][ T24] usb 9-1: Manufacturer: syz [ 504.391714][ T24] usb 9-1: SerialNumber: syz [ 504.497615][ T24] usb 9-1: config 0 descriptor?? [ 504.592274][ T24] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 504.730774][ T4123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.739256][ T4123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.850066][ T24] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 504.931888][ T24] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 505.000648][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 505.006910][ T7197] usb 9-1: USB disconnect, device number 5 [ 505.063801][ T7197] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 505.151853][ T7197] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 505.168274][ T7197] quatech2 9-1:0.51: device disconnected [ 505.212081][ T3789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.224958][ T3789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.252698][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 506.612179][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 506.703922][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 506.713502][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.722647][ T24] usb 3-1: Product: syz [ 506.727187][ T24] usb 3-1: Manufacturer: syz [ 506.732035][ T24] usb 3-1: SerialNumber: syz [ 506.847806][ T24] usb 3-1: config 0 descriptor?? [ 506.932033][ T24] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 507.125831][ T24] ssu100 3-1:0.0: probe with driver ssu100 failed with error -32 [ 508.100510][ T7197] kernel write not supported for file /dsp (pid: 7197 comm: kworker/0:7) [ 509.276928][ T7197] usb 3-1: USB disconnect, device number 10 [ 509.374999][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 509.606643][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 509.684341][ T24] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 509.693398][ T24] usb 9-1: config 0 has no interface number 0 [ 509.781708][ T24] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 509.791673][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.800224][ T24] usb 9-1: Product: syz [ 509.804645][ T24] usb 9-1: Manufacturer: syz [ 509.809638][ T24] usb 9-1: SerialNumber: syz [ 509.968239][ T24] usb 9-1: config 0 descriptor?? [ 510.048411][ T24] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 510.266619][ T24] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 510.410260][ T24] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 510.474035][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 510.519361][ T24] usb 9-1: USB disconnect, device number 6 [ 510.582218][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 510.688305][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 510.703349][ T24] quatech2 9-1:0.51: device disconnected [ 512.220610][ T24] kernel write not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 513.079625][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 513.339367][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 513.702360][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 514.025473][ T24] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 514.042781][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.054185][ T24] usb 10-1: Product: syz [ 514.059450][ T24] usb 10-1: Manufacturer: syz [ 514.064394][ T24] usb 10-1: SerialNumber: syz [ 514.719415][ T24] usb 10-1: config 0 descriptor?? [ 514.812278][ T24] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 515.045906][ T24] ssu100 10-1:0.0: probe with driver ssu100 failed with error -32 [ 516.195266][ T7197] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 516.383218][ T5893] usb 10-1: USB disconnect, device number 3 [ 516.417295][ T7197] usb 5-1: Using ep0 maxpacket: 32 [ 516.466008][ T7197] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 516.474437][ T7197] usb 5-1: config 0 has no interface number 0 [ 516.532341][ T7197] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 516.542321][ T7197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.551105][ T7197] usb 5-1: Product: syz [ 516.555687][ T7197] usb 5-1: Manufacturer: syz [ 516.560541][ T7197] usb 5-1: SerialNumber: syz [ 516.674250][ T7197] usb 5-1: config 0 descriptor?? [ 516.723272][ T7197] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 516.875323][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 517.026601][ T7197] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 517.091011][ T11] usb 4-1: device descriptor read/64, error -71 [ 517.197018][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 517.255540][ T5893] kernel write not supported for file /dsp (pid: 5893 comm: kworker/0:5) [ 517.266870][ T7197] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 517.331270][ T7197] usb 5-1: USB disconnect, device number 2 [ 517.410738][ T7197] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 517.466977][ T11] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 517.483663][ T7197] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 517.509150][ T7197] quatech2 5-1:0.51: device disconnected [ 517.685087][ T11] usb 4-1: device descriptor read/64, error -71 [ 517.812399][ T11] usb usb4-port1: attempt power cycle [ 518.248343][ T11] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 518.306095][ T11] usb 4-1: device descriptor read/8, error -71 [ 518.576368][ T11] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 518.628538][ T11] usb 4-1: device descriptor read/8, error -71 [ 518.656342][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 518.752441][ T11] usb usb4-port1: unable to enumerate USB device [ 518.855128][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 518.882872][ T24] usb 3-1: config 0 has no interfaces? [ 518.928931][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 518.938423][ T24] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 518.952806][ T24] usb 3-1: Product: syz [ 518.959363][ T24] usb 3-1: Manufacturer: syz [ 518.964222][ T24] usb 3-1: SerialNumber: syz [ 519.068364][ T24] usb 3-1: config 0 descriptor?? [ 519.227135][ T11] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 519.415955][ T11] usb 9-1: Using ep0 maxpacket: 32 [ 519.478109][ T11] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 519.488222][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.549258][ T11] usb 9-1: config 0 descriptor?? [ 519.573789][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.583693][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.715448][ T24] usb 3-1: USB disconnect, device number 11 [ 519.816321][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 519.856602][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 519.928313][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 519.936066][ T11] usb 9-1: media controller created [ 520.089339][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.458789][ T11] az6027: usb out operation failed. (-71) [ 520.471752][ T11] az6027: usb out operation failed. (-71) [ 520.489420][ T11] stb0899_attach: Driver disabled by Kconfig [ 520.497084][ T11] az6027: no front-end attached [ 520.497084][ T11] [ 520.505403][ T11] az6027: usb out operation failed. (-71) [ 520.511515][ T11] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 520.522408][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input11 [ 520.556952][ T11] dvb-usb: schedule remote query interval to 400 msecs. [ 520.564226][ T11] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 520.606259][ T11] usb 9-1: USB disconnect, device number 7 [ 521.055901][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 521.269857][ T11] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 521.275917][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 521.389152][ T24] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 521.404656][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.415338][ T24] usb 10-1: Product: syz [ 521.419915][ T24] usb 10-1: Manufacturer: syz [ 521.425044][ T24] usb 10-1: SerialNumber: syz [ 521.540051][ T24] usb 10-1: config 0 descriptor?? [ 521.596483][ T24] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 521.920882][ T24] ssu100 10-1:0.0: probe with driver ssu100 failed with error -32 [ 522.155996][ T11] kernel write not supported for file /dsp (pid: 11 comm: kworker/0:1) [ 522.540880][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 522.765509][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 522.781124][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 522.789895][ T24] usb 3-1: config 0 has no interface number 0 [ 522.893830][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 522.903500][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.915569][ T24] usb 3-1: Product: syz [ 522.920009][ T24] usb 3-1: Manufacturer: syz [ 522.925052][ T24] usb 3-1: SerialNumber: syz [ 523.054653][ T24] usb 3-1: config 0 descriptor?? [ 523.082891][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 523.367178][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 523.437508][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 523.761688][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 523.766675][ T11] usb 3-1: USB disconnect, device number 12 [ 523.942648][ T7919] Process accounting resumed [ 523.957275][ T11] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 524.077774][ T11] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 524.094706][ T11] quatech2 3-1:0.51: device disconnected [ 524.325264][ T7197] usb 10-1: USB disconnect, device number 4 [ 524.757628][ T7939] overlayfs: missing 'lowerdir' [ 525.205156][ T7197] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 525.247202][ T7943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.469'. [ 525.417285][ T7197] usb 10-1: Using ep0 maxpacket: 32 [ 525.459002][ T7197] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 525.469119][ T7197] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.559025][ T7197] usb 10-1: config 0 descriptor?? [ 525.797420][ T7197] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 525.880612][ T7197] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 525.938037][ T7197] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 525.945910][ T7197] usb 10-1: media controller created [ 526.080221][ T7197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.565460][ T7197] az6027: usb out operation failed. (-71) [ 526.605540][ T7197] az6027: usb out operation failed. (-71) [ 526.611557][ T7197] stb0899_attach: Driver disabled by Kconfig [ 526.618342][ T7197] az6027: no front-end attached [ 526.618342][ T7197] [ 526.696444][ T7197] az6027: usb out operation failed. (-71) [ 526.702575][ T7197] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 526.713784][ T7197] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input12 [ 526.833872][ T7197] dvb-usb: schedule remote query interval to 400 msecs. [ 526.841575][ T7197] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 527.005044][ T24] kernel write not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 527.081036][ T7197] usb 10-1: USB disconnect, device number 5 [ 527.448778][ T7197] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 528.802938][ T7969] Process accounting resumed [ 528.845170][ T7197] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 529.015486][ T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 529.088366][ T7197] usb 3-1: Using ep0 maxpacket: 16 [ 529.154577][ T7197] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 529.164621][ T7197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.173373][ T7197] usb 3-1: Product: syz [ 529.178062][ T7197] usb 3-1: Manufacturer: syz [ 529.185704][ T7197] usb 3-1: SerialNumber: syz [ 529.287677][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 529.303934][ T11] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 529.312779][ T11] usb 4-1: config 0 has no interface number 0 [ 529.356523][ T7197] usb 3-1: config 0 descriptor?? [ 529.426305][ T7197] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 529.437143][ T11] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 529.446958][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.455675][ T11] usb 4-1: Product: syz [ 529.460301][ T11] usb 4-1: Manufacturer: syz [ 529.465516][ T11] usb 4-1: SerialNumber: syz [ 529.518119][ T11] usb 4-1: config 0 descriptor?? [ 529.555951][ T11] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 529.649711][ T7197] ssu100 3-1:0.0: probe with driver ssu100 failed with error -32 [ 529.817336][ T11] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 529.926140][ T11] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 530.059819][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.8.482'. [ 530.215100][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 530.224229][ T2160] usb 4-1: USB disconnect, device number 6 [ 530.301642][ T2160] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 530.419664][ T2160] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 530.437379][ T2160] quatech2 4-1:0.51: device disconnected [ 531.596788][ T11] usb 3-1: USB disconnect, device number 13 [ 531.880303][ T24] kernel write not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 531.955828][ T2160] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 532.089023][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.096112][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.225118][ T2160] usb 4-1: Using ep0 maxpacket: 32 [ 532.290470][ T2160] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 532.300403][ T2160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.408340][ T2160] usb 4-1: config 0 descriptor?? [ 532.696558][ T2160] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 532.759590][ T2160] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 532.797074][ T2160] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 532.804559][ T2160] usb 4-1: media controller created [ 532.890727][ T2160] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.447212][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 533.497725][ T2160] az6027: usb out operation failed. (-71) [ 533.534545][ T2160] az6027: usb out operation failed. (-71) [ 533.540841][ T2160] stb0899_attach: Driver disabled by Kconfig [ 533.551623][ T2160] az6027: no front-end attached [ 533.551623][ T2160] [ 533.598225][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 533.662731][ T2160] az6027: usb out operation failed. (-71) [ 533.669730][ T2160] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 533.681336][ T2160] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 533.739212][ T8027] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 534.002023][ T2160] dvb-usb: schedule remote query interval to 400 msecs. [ 534.010682][ T2160] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 534.155617][ T8025] Process accounting resumed [ 534.167830][ T2160] usb 4-1: USB disconnect, device number 7 [ 534.589087][ T8032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.495'. [ 534.682663][ T2160] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 535.664216][ T2160] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 535.880407][ T2160] usb 5-1: Using ep0 maxpacket: 16 [ 535.957517][ T2160] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 535.967065][ T2160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.975720][ T2160] usb 5-1: Product: syz [ 535.980190][ T2160] usb 5-1: Manufacturer: syz [ 535.985351][ T2160] usb 5-1: SerialNumber: syz [ 536.177405][ T2160] usb 5-1: config 0 descriptor?? [ 536.213760][ T2160] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 536.411938][ T2160] ssu100 5-1:0.0: probe with driver ssu100 failed with error -32 [ 536.899366][ T7197] kernel read not supported for file /dsp (pid: 7197 comm: kworker/0:7) [ 537.069675][ T11] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 537.297066][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 537.348650][ T11] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 537.358545][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.463097][ T11] usb 3-1: config 0 descriptor?? [ 537.754029][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 537.795143][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 537.838990][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 537.847601][ T11] usb 3-1: media controller created [ 537.934231][ T8070] Process accounting resumed [ 538.056382][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.448327][ T7197] usb 5-1: USB disconnect, device number 3 [ 538.568123][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.8.510'. [ 538.615937][ T11] az6027: usb out operation failed. (-71) [ 538.647894][ T11] az6027: usb out operation failed. (-71) [ 538.653992][ T11] stb0899_attach: Driver disabled by Kconfig [ 538.660808][ T11] az6027: no front-end attached [ 538.660808][ T11] [ 538.743843][ T11] az6027: usb out operation failed. (-71) [ 538.750456][ T11] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 538.761718][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 538.957978][ T11] dvb-usb: schedule remote query interval to 400 msecs. [ 538.965373][ T11] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 539.098423][ T11] usb 3-1: USB disconnect, device number 14 [ 539.779057][ T11] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 541.359909][ T2160] kernel read not supported for file /dsp (pid: 2160 comm: kworker/1:2) [ 541.659533][ T11] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 541.855624][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 541.908439][ T11] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 541.918632][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.927242][ T11] usb 3-1: Product: syz [ 541.931670][ T11] usb 3-1: Manufacturer: syz [ 541.936688][ T11] usb 3-1: SerialNumber: syz [ 542.112620][ T11] usb 3-1: config 0 descriptor?? [ 542.172619][ T11] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 542.277817][ T8115] Process accounting resumed [ 542.343100][ T11] ssu100 3-1:0.0: probe with driver ssu100 failed with error -5 [ 542.665538][ T7197] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 542.898208][ T7197] usb 9-1: Using ep0 maxpacket: 32 [ 542.927651][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.9.524'. [ 542.956713][ T7197] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 542.966815][ T7197] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.058012][ T7197] usb 9-1: config 0 descriptor?? [ 543.328156][ T7197] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 543.370739][ T7197] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 543.408831][ T7197] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 543.421721][ T7197] usb 9-1: media controller created [ 543.513626][ T7197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.955986][ T7197] az6027: usb out operation failed. (-71) [ 544.012139][ T7197] az6027: usb out operation failed. (-71) [ 544.018471][ T7197] stb0899_attach: Driver disabled by Kconfig [ 544.025125][ T7197] az6027: no front-end attached [ 544.025125][ T7197] [ 544.136635][ T7197] az6027: usb out operation failed. (-71) [ 544.142756][ T7197] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 544.154199][ T7197] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input15 [ 544.320804][ T7197] dvb-usb: schedule remote query interval to 400 msecs. [ 544.329474][ T7197] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 544.437624][ T7197] usb 9-1: USB disconnect, device number 8 [ 544.875096][ T11] usb 3-1: USB disconnect, device number 15 [ 545.169829][ T7197] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 546.191619][ T8153] netlink: 'syz.4.532': attribute type 1 has an invalid length. [ 546.199848][ T8153] netlink: 'syz.4.532': attribute type 2 has an invalid length. [ 546.208067][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 546.840344][ T7197] kernel read not supported for file /dsp (pid: 7197 comm: kworker/0:7) [ 547.020527][ T8161] Process accounting resumed [ 547.461659][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.706727][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.000521][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.197907][ T5850] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 548.210113][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.339490][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 548.443146][ T5850] usb 10-1: Using ep0 maxpacket: 32 [ 548.469218][ T5850] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 548.478958][ T5850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.555233][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 548.580551][ T5850] usb 10-1: config 0 descriptor?? [ 548.620461][ T24] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 548.630512][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.647080][ T24] usb 9-1: Product: syz [ 548.651526][ T24] usb 9-1: Manufacturer: syz [ 548.656529][ T24] usb 9-1: SerialNumber: syz [ 548.755729][ T24] usb 9-1: config 0 descriptor?? [ 548.769872][ T14] bridge_slave_1: left allmulticast mode [ 548.776522][ T14] bridge_slave_1: left promiscuous mode [ 548.783776][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.820863][ T24] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 548.831704][ T5850] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 548.867759][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 548.880362][ T14] bridge_slave_0: left allmulticast mode [ 548.886843][ T14] bridge_slave_0: left promiscuous mode [ 548.894164][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.911676][ T5850] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 548.920031][ T5850] usb 10-1: media controller created [ 549.000301][ T24] ssu100 9-1:0.0: probe with driver ssu100 failed with error -5 [ 549.076165][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.733692][ T5850] az6027: usb out operation failed. (-71) [ 549.741042][ T5850] az6027: usb out operation failed. (-71) [ 549.748848][ T5850] stb0899_attach: Driver disabled by Kconfig [ 549.757056][ T5850] az6027: no front-end attached [ 549.757056][ T5850] [ 549.805843][ T5850] az6027: usb out operation failed. (-71) [ 549.811850][ T5850] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 549.823196][ T5850] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input16 [ 549.897519][ T5850] dvb-usb: schedule remote query interval to 400 msecs. [ 549.904989][ T5850] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 549.995923][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.022038][ T5850] usb 10-1: USB disconnect, device number 6 [ 550.100204][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.195266][ T14] bond0 (unregistering): Released all slaves [ 550.581573][ T5850] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 551.224101][ T14] hsr_slave_0: left promiscuous mode [ 551.254373][ T14] hsr_slave_1: left promiscuous mode [ 551.274291][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.282551][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.369032][ T5850] usb 9-1: USB disconnect, device number 9 [ 551.412423][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.420538][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.571963][ T14] veth1_macvtap: left promiscuous mode [ 551.578180][ T14] veth0_macvtap: left promiscuous mode [ 551.584141][ T14] veth1_vlan: left promiscuous mode [ 551.590463][ T14] veth0_vlan: left promiscuous mode [ 553.185177][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 553.195048][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 553.204444][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 553.220127][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 553.231809][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 553.364020][ T14] team0 (unregistering): Port device team_slave_1 removed [ 553.427237][ T14] team0 (unregistering): Port device team_slave_0 removed [ 553.978760][ T7359] cgroup: fork rejected by pids controller in /syz3 [ 555.040078][ T8227] 9pnet_fd: Insufficient options for proto=fd [ 555.154635][ T8223] Process accounting resumed [ 555.341260][ T5801] Bluetooth: hci0: command tx timeout [ 555.956151][ T4440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.250648][ T4440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.305202][ T5850] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 556.396788][ T8209] chnl_net:caif_netlink_parms(): no params data found [ 556.502084][ T4440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.518506][ T5850] usb 10-1: Using ep0 maxpacket: 16 [ 556.596729][ T5850] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 556.606376][ T5850] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.615131][ T5850] usb 10-1: Product: syz [ 556.619657][ T5850] usb 10-1: Manufacturer: syz [ 556.629370][ T5850] usb 10-1: SerialNumber: syz [ 556.703484][ T4440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.735245][ T5850] usb 10-1: config 0 descriptor?? [ 556.758226][ T5850] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 556.986359][ T5850] ssu100 10-1:0.0: probe with driver ssu100 failed with error -5 [ 557.335818][ T4440] bridge_slave_1: left allmulticast mode [ 557.347856][ T4440] bridge_slave_1: left promiscuous mode [ 557.354494][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.426880][ T5801] Bluetooth: hci0: command tx timeout [ 557.456118][ T4440] bridge_slave_0: left allmulticast mode [ 557.462130][ T4440] bridge_slave_0: left promiscuous mode [ 557.469040][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.113988][ T4440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.137480][ T4440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.167235][ T4440] bond0 (unregistering): Released all slaves [ 558.653652][ T8209] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.663542][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.675548][ T8209] bridge_slave_0: entered allmulticast mode [ 558.685989][ T8209] bridge_slave_0: entered promiscuous mode [ 558.811418][ T8209] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.819502][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.828438][ T8209] bridge_slave_1: entered allmulticast mode [ 558.838401][ T8209] bridge_slave_1: entered promiscuous mode [ 558.976789][ T4440] hsr_slave_0: left promiscuous mode [ 558.998859][ T4440] hsr_slave_1: left promiscuous mode [ 559.007403][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.015389][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.045157][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.052943][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.119906][ T4440] veth1_macvtap: left promiscuous mode [ 559.127783][ T4440] veth0_macvtap: left promiscuous mode [ 559.133768][ T4440] veth1_vlan: left promiscuous mode [ 559.139688][ T4440] veth0_vlan: left promiscuous mode [ 559.287631][ T7197] usb 10-1: USB disconnect, device number 7 [ 559.517508][ T5801] Bluetooth: hci0: command tx timeout [ 560.278743][ T4440] team0 (unregistering): Port device team_slave_1 removed [ 560.374228][ T4440] team0 (unregistering): Port device team_slave_0 removed [ 560.612297][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 560.671830][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 560.683849][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 560.715894][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 560.744244][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 561.396067][ T7376] cgroup: fork rejected by pids controller in /syz4 [ 561.483311][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.8.560'. [ 561.550688][ T8209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.576762][ T53] Bluetooth: hci0: command tx timeout [ 562.063724][ T8209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.531190][ T8209] team0: Port device team_slave_0 added [ 562.627222][ T4440] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.720294][ T8209] team0: Port device team_slave_1 added [ 562.781787][ T53] Bluetooth: hci2: command tx timeout [ 562.825889][ T4440] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.056787][ T8285] Process accounting resumed [ 563.118133][ T4440] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.311701][ T4440] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.380676][ T8209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.392135][ T8209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.420218][ T8209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.516432][ T8209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.524301][ T8209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.550793][ T8209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.027176][ T4440] bridge_slave_1: left allmulticast mode [ 564.033110][ T4440] bridge_slave_1: left promiscuous mode [ 564.041613][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.086108][ T4440] bridge_slave_0: left allmulticast mode [ 564.092056][ T4440] bridge_slave_0: left promiscuous mode [ 564.102924][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.594708][ T4440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.640563][ T4440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.685717][ T4440] bond0 (unregistering): Released all slaves [ 564.889169][ T8271] chnl_net:caif_netlink_parms(): no params data found [ 564.906046][ T53] Bluetooth: hci2: command tx timeout [ 564.946124][ T8209] hsr_slave_0: entered promiscuous mode [ 564.956861][ T8209] hsr_slave_1: entered promiscuous mode [ 564.966055][ T8209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.973890][ T8209] Cannot create hsr debugfs directory [ 566.025553][ T4440] hsr_slave_0: left promiscuous mode [ 566.105358][ T4440] hsr_slave_1: left promiscuous mode [ 566.113483][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.121552][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.211231][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 566.229010][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 566.239931][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 566.247870][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.258175][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.283868][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 566.296118][ T7197] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 566.314528][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 566.349369][ T4440] veth1_macvtap: left promiscuous mode [ 566.357474][ T4440] veth0_macvtap: left promiscuous mode [ 566.363467][ T4440] veth1_vlan: left promiscuous mode [ 566.369645][ T4440] veth0_vlan: left promiscuous mode [ 566.785204][ T7197] usb 9-1: Using ep0 maxpacket: 16 [ 566.810893][ T7197] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 566.821234][ T7197] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.830069][ T7197] usb 9-1: Product: syz [ 566.834502][ T7197] usb 9-1: Manufacturer: syz [ 566.839448][ T7197] usb 9-1: SerialNumber: syz [ 566.897949][ T7197] usb 9-1: config 0 descriptor?? [ 566.954186][ T5801] Bluetooth: hci2: command tx timeout [ 566.971829][ T7197] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 567.345567][ T7197] ssu100 9-1:0.0: probe with driver ssu100 failed with error -5 [ 567.389536][ T4440] team0 (unregistering): Port device team_slave_1 removed [ 567.417723][ T4440] team0 (unregistering): Port device team_slave_0 removed [ 568.432795][ T5801] Bluetooth: hci3: command tx timeout [ 568.875428][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.883054][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.891011][ T8271] bridge_slave_0: entered allmulticast mode [ 568.900920][ T8271] bridge_slave_0: entered promiscuous mode [ 569.023446][ T5801] Bluetooth: hci2: command tx timeout [ 569.038954][ T7311] cgroup: fork rejected by pids controller in /syz9 [ 569.196546][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.204239][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.212301][ T8271] bridge_slave_1: entered allmulticast mode [ 569.225683][ T8271] bridge_slave_1: entered promiscuous mode [ 569.286138][ T5850] usb 9-1: USB disconnect, device number 10 [ 569.902856][ T8271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.913833][ T8317] chnl_net:caif_netlink_parms(): no params data found [ 570.007596][ T8271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.164102][ T4156] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.279226][ T8354] afs: Unknown parameter 'dy ™' [ 570.461461][ T5801] Bluetooth: hci3: command tx timeout [ 570.621831][ T4156] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.705403][ T8271] team0: Port device team_slave_0 added [ 570.913228][ T8271] team0: Port device team_slave_1 added [ 571.026550][ T4156] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.302309][ T4156] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.482176][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.489563][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.516104][ T8271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.554048][ T8209] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 571.634291][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.641838][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.668773][ T8271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.692554][ T8209] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 571.902950][ T8209] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 572.201769][ T8209] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 572.341518][ T4156] bridge_slave_1: left allmulticast mode [ 572.347934][ T4156] bridge_slave_1: left promiscuous mode [ 572.354502][ T4156] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.415838][ T4156] bridge_slave_0: left allmulticast mode [ 572.421917][ T4156] bridge_slave_0: left promiscuous mode [ 572.430263][ T4156] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.543092][ T5801] Bluetooth: hci3: command tx timeout [ 573.047360][ T4156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.097327][ T4156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.126665][ T4156] bond0 (unregistering): Released all slaves [ 573.368146][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.377743][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.385741][ T8317] bridge_slave_0: entered allmulticast mode [ 573.395515][ T8317] bridge_slave_0: entered promiscuous mode [ 573.577702][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.585586][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.593403][ T8317] bridge_slave_1: entered allmulticast mode [ 573.605810][ T8317] bridge_slave_1: entered promiscuous mode [ 573.800939][ T8271] hsr_slave_0: entered promiscuous mode [ 573.811529][ T8271] hsr_slave_1: entered promiscuous mode [ 573.820820][ T8271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.831340][ T8271] Cannot create hsr debugfs directory [ 574.191286][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 574.201673][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 574.204963][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.211384][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 574.231958][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 574.377102][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 574.501971][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.615449][ T53] Bluetooth: hci3: command tx timeout [ 574.722496][ T4156] hsr_slave_0: left promiscuous mode [ 574.751104][ T4156] hsr_slave_1: left promiscuous mode [ 574.759828][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.767868][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.786965][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.795004][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.840123][ T4156] veth1_macvtap: left promiscuous mode [ 574.847530][ T4156] veth0_macvtap: left promiscuous mode [ 574.855922][ T4156] veth1_vlan: left promiscuous mode [ 574.861630][ T4156] veth0_vlan: left promiscuous mode [ 575.688230][ T4156] team0 (unregistering): Port device team_slave_1 removed [ 575.736208][ T4156] team0 (unregistering): Port device team_slave_0 removed [ 576.477496][ T53] Bluetooth: hci4: command tx timeout [ 576.574372][ T8317] team0: Port device team_slave_0 added [ 576.668256][ T8317] team0: Port device team_slave_1 added [ 576.921127][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.928711][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.955242][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.111807][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.119218][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.145686][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.131511][ T8209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.142736][ T8375] chnl_net:caif_netlink_parms(): no params data found [ 578.200852][ T8317] hsr_slave_0: entered promiscuous mode [ 578.211940][ T8317] hsr_slave_1: entered promiscuous mode [ 578.221317][ T8317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.229331][ T8317] Cannot create hsr debugfs directory [ 578.387826][ T8209] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.576478][ T53] Bluetooth: hci4: command tx timeout [ 578.841277][ T8271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 578.900397][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.908161][ T7800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.956359][ T8271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 579.025516][ T8271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 579.094440][ T8404] Process accounting resumed [ 579.105902][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.113547][ T7800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.123723][ T8271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 580.041218][ T8375] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.051158][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.059270][ T8375] bridge_slave_0: entered allmulticast mode [ 580.069131][ T8375] bridge_slave_0: entered promiscuous mode [ 580.193377][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.201402][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.209547][ T8375] bridge_slave_1: entered allmulticast mode [ 580.219489][ T8375] bridge_slave_1: entered promiscuous mode [ 580.615618][ T53] Bluetooth: hci4: command tx timeout [ 580.738327][ T8375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.880561][ T8375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.165362][ T8375] team0: Port device team_slave_0 added [ 581.202378][ T8375] team0: Port device team_slave_1 added [ 581.501275][ T8317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 581.543060][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.551188][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.577891][ T8375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.635412][ T8317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 581.676005][ T8317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 581.757056][ T8317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 581.788857][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.797263][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.825098][ T8375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.857522][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.095941][ T8271] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.281690][ T8209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.406850][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.414459][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.518717][ T4156] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.526430][ T4156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.559714][ T8375] hsr_slave_0: entered promiscuous mode [ 582.570487][ T8375] hsr_slave_1: entered promiscuous mode [ 582.579762][ T8375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.587704][ T8375] Cannot create hsr debugfs directory [ 582.695493][ T53] Bluetooth: hci4: command tx timeout [ 583.532530][ T8209] veth0_vlan: entered promiscuous mode [ 583.677515][ T8209] veth1_vlan: entered promiscuous mode [ 584.013859][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.220647][ T8209] veth0_macvtap: entered promiscuous mode [ 584.355157][ T8317] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.430855][ T8209] veth1_macvtap: entered promiscuous mode [ 584.597616][ T4156] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.605456][ T4156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.775794][ T4156] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.783444][ T4156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.907487][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.920626][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.937162][ T8209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.259502][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.270958][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.286974][ T8209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.440997][ T8375] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 585.530967][ T8375] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 585.606323][ T8209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.615633][ T8209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.624650][ T8209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.633847][ T8209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.652358][ T8375] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 585.830324][ T8375] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 585.903044][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.394332][ T6726] cgroup: fork rejected by pids controller in /syz8 [ 586.668805][ T8271] veth0_vlan: entered promiscuous mode [ 586.842920][ T8271] veth1_vlan: entered promiscuous mode [ 587.391704][ T14] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.515541][ T8271] veth0_macvtap: entered promiscuous mode [ 587.590249][ T14] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.841440][ T14] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.916874][ T8271] veth1_macvtap: entered promiscuous mode [ 587.986344][ T14] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.110010][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.244558][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.256216][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.268729][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.280226][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.296199][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.341886][ T8375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.537278][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.548354][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.558673][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.569595][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.588315][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.873410][ T14] bridge_slave_1: left allmulticast mode [ 588.883297][ T14] bridge_slave_1: left promiscuous mode [ 588.890313][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.969828][ T14] bridge_slave_0: left allmulticast mode [ 588.976145][ T14] bridge_slave_0: left promiscuous mode [ 588.986442][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.515668][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.544724][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.572077][ T14] bond0 (unregistering): Released all slaves [ 589.663198][ T8375] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.693022][ T8271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.705611][ T8271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.714707][ T8271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.724444][ T8271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.829431][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.837182][ T7802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.086585][ T4156] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.094292][ T4156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.435128][ T14] hsr_slave_0: left promiscuous mode [ 590.476530][ T14] hsr_slave_1: left promiscuous mode [ 590.484492][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.492877][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.539019][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.547842][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.647760][ T14] veth1_macvtap: left promiscuous mode [ 590.653590][ T14] veth0_macvtap: left promiscuous mode [ 590.659900][ T14] veth0_vlan: left promiscuous mode [ 591.486196][ T14] team0 (unregistering): Port device team_slave_1 removed [ 591.523866][ T14] team0 (unregistering): Port device team_slave_0 removed [ 591.595261][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 591.609138][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 591.618823][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 591.632744][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 591.644504][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 593.402115][ T8317] veth0_vlan: entered promiscuous mode [ 593.540389][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.547477][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.615075][ T8317] veth1_vlan: entered promiscuous mode [ 593.678033][ T8494] chnl_net:caif_netlink_parms(): no params data found [ 593.742880][ T53] Bluetooth: hci1: command tx timeout [ 594.259046][ T8317] veth0_macvtap: entered promiscuous mode [ 594.382408][ T8317] veth1_macvtap: entered promiscuous mode [ 594.528700][ T8375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.639464][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.650400][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.660730][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.671661][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.687269][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.893841][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.908597][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.919091][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.929951][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.945735][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.174096][ T8317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.184998][ T8317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.194074][ T8317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.203407][ T8317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.422639][ T7807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.430997][ T7807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.629295][ T8494] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.637803][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.645772][ T8494] bridge_slave_0: entered allmulticast mode [ 595.655623][ T8494] bridge_slave_0: entered promiscuous mode [ 595.783186][ T4440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.792360][ T4440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.828710][ T53] Bluetooth: hci1: command tx timeout [ 595.828868][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.848108][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.856102][ T8494] bridge_slave_1: entered allmulticast mode [ 595.866343][ T8494] bridge_slave_1: entered promiscuous mode [ 596.392844][ T8494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.500632][ T8494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.920715][ T8494] team0: Port device team_slave_0 added [ 596.953226][ T8494] team0: Port device team_slave_1 added [ 597.404397][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.411861][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.438463][ T8494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.599889][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.608530][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.636532][ T8494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.898649][ T53] Bluetooth: hci1: command tx timeout [ 597.920290][ T8375] veth0_vlan: entered promiscuous mode [ 598.062387][ T8494] hsr_slave_0: entered promiscuous mode [ 598.071705][ T8494] hsr_slave_1: entered promiscuous mode [ 598.386037][ T8563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.587'. [ 598.462582][ T8375] veth1_vlan: entered promiscuous mode [ 599.127800][ T7802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.136162][ T7802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.401741][ T8375] veth0_macvtap: entered promiscuous mode [ 599.559304][ T8375] veth1_macvtap: entered promiscuous mode [ 599.622660][ T4440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.631090][ T4440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.977014][ T53] Bluetooth: hci1: command tx timeout [ 600.135560][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.149704][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.161112][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.172004][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.182294][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.193145][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.209916][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.433733][ T8576] Process accounting resumed [ 600.569790][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.581125][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.591466][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.602388][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.612629][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.624725][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.640591][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.932521][ T8375] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.943626][ T8375] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.952827][ T8375] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.961983][ T8375] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.262351][ T8494] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 601.305265][ T5846] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 601.387297][ T8494] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 601.482253][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 601.498889][ T8494] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 601.527332][ T5846] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 601.536947][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.629752][ T5846] usb 4-1: config 0 descriptor?? [ 601.631790][ T8494] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 601.886115][ T5846] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 601.919726][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.030171][ T5846] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 602.039306][ T5846] usb 4-1: media controller created [ 602.175378][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.690057][ T5846] az6027: usb out operation failed. (-71) [ 602.705949][ T5846] az6027: usb out operation failed. (-71) [ 602.712079][ T5846] stb0899_attach: Driver disabled by Kconfig [ 602.718395][ T5846] az6027: no front-end attached [ 602.718395][ T5846] [ 602.819401][ T5846] az6027: usb out operation failed. (-71) [ 602.825879][ T5846] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 602.837664][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 602.884511][ T7817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.892902][ T7817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.058234][ T5846] dvb-usb: schedule remote query interval to 400 msecs. [ 603.066168][ T5846] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 603.226503][ T5846] usb 4-1: USB disconnect, device number 8 [ 603.340631][ T7810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.350203][ T7810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.714694][ T8494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.886150][ T5846] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 603.958232][ T8620] fuse: Unknown parameter '0x0000000000000003' [ 604.014075][ T8494] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.126879][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.134477][ T7817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.238503][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.246218][ T7817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.090684][ T8494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.102797][ T7810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.111965][ T7810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.214379][ T8494] veth0_vlan: entered promiscuous mode [ 610.287764][ T8494] veth1_vlan: entered promiscuous mode [ 610.413304][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.421659][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.685933][ T8494] veth0_macvtap: entered promiscuous mode [ 610.853085][ T8494] veth1_macvtap: entered promiscuous mode [ 611.166022][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.176927][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.187237][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.199572][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.212789][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.224527][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.235005][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.245748][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.261535][ T8494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.507905][ T8687] Process accounting resumed [ 611.632775][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.643830][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.654345][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.666881][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.677508][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.688859][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.699638][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.710821][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.733377][ T8494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.163566][ T8494] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.173524][ T8494] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.182693][ T8494] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.192008][ T8494] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.716230][ T11] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 612.948541][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 613.022181][ T11] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 613.032717][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.105432][ T11] usb 4-1: config 0 descriptor?? [ 613.326600][ T8703] fuse: Unknown parameter '0x0000000000000003' [ 613.398352][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 613.437385][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 613.521945][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 613.530675][ T11] usb 4-1: media controller created [ 613.670620][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 614.018852][ T11] az6027: usb out operation failed. (-71) [ 614.076185][ T11] az6027: usb out operation failed. (-71) [ 614.082180][ T11] stb0899_attach: Driver disabled by Kconfig [ 614.089059][ T11] az6027: no front-end attached [ 614.089059][ T11] [ 614.179313][ T11] az6027: usb out operation failed. (-71) [ 614.187065][ T11] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 614.199207][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 614.387794][ T11] dvb-usb: schedule remote query interval to 400 msecs. [ 614.395213][ T11] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 614.597374][ T11] usb 4-1: USB disconnect, device number 9 [ 615.437149][ T11] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 617.028965][ T8735] ===================================================== [ 617.036405][ T8735] BUG: KMSAN: uninit-value in pptp_xmit+0xc34/0x2720 [ 617.043358][ T8735] pptp_xmit+0xc34/0x2720 [ 617.048168][ T8735] ppp_input+0x1d6/0xe60 [ 617.052664][ T8735] pppoe_rcv_core+0x1e8/0x760 [ 617.057693][ T8735] sk_backlog_rcv+0x13f/0x420 [ 617.062612][ T8735] __release_sock+0x1d3/0x330 [ 617.067673][ T8735] release_sock+0x6b/0x270 [ 617.072332][ T8735] pppoe_sendmsg+0x15d/0xcb0 [ 617.077300][ T8735] __sock_sendmsg+0x330/0x3d0 [ 617.082218][ T8735] ____sys_sendmsg+0x893/0xd80 [ 617.087314][ T8735] ___sys_sendmsg+0x271/0x3b0 [ 617.092198][ T8735] __sys_sendmmsg+0x3c2/0x7d0 [ 617.097210][ T8735] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 617.103229][ T8735] ia32_sys_call+0x3a66/0x42c0 [ 617.108331][ T8735] __do_fast_syscall_32+0xb0/0x110 [ 617.113687][ T8735] do_fast_syscall_32+0x38/0x80 [ 617.118900][ T8735] do_SYSENTER_32+0x1f/0x30 [ 617.123653][ T8735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.130383][ T8735] [ 617.132829][ T8735] Uninit was created at: [ 617.137489][ T8735] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 617.144269][ T8735] kmalloc_reserve+0x22f/0x4b0 [ 617.149417][ T8735] pskb_expand_head+0x207/0x1c90 [ 617.154567][ T8735] skb_realloc_headroom+0x152/0x2d0 [ 617.160097][ T8735] pptp_xmit+0x9d4/0x2720 [ 617.164641][ T8735] ppp_input+0x1d6/0xe60 [ 617.169247][ T8735] pppoe_rcv_core+0x1e8/0x760 [ 617.174142][ T8735] sk_backlog_rcv+0x13f/0x420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 617.179185][ T8735] __release_sock+0x1d3/0x330 [ 617.184076][ T8735] release_sock+0x6b/0x270 [ 617.188866][ T8735] pppoe_sendmsg+0x15d/0xcb0 [ 617.193681][ T8735] __sock_sendmsg+0x330/0x3d0 [ 617.198730][ T8735] ____sys_sendmsg+0x893/0xd80 [ 617.203693][ T8735] ___sys_sendmsg+0x271/0x3b0 [ 617.208689][ T8735] __sys_sendmmsg+0x3c2/0x7d0 [ 617.213567][ T8735] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 617.219632][ T8735] ia32_sys_call+0x3a66/0x42c0 [ 617.224611][ T8735] __do_fast_syscall_32+0xb0/0x110 [ 617.230124][ T8735] do_fast_syscall_32+0x38/0x80 [ 617.235335][ T8735] do_SYSENTER_32+0x1f/0x30 [ 617.240102][ T8735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.246937][ T8735] [ 617.249445][ T8735] CPU: 1 UID: 0 PID: 8735 Comm: syz.9.610 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 617.261809][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 617.272222][ T8735] ===================================================== [ 617.279436][ T8735] Disabling lock debugging due to kernel taint [ 617.285873][ T8735] Kernel panic - not syncing: kmsan.panic set ... [ 617.292480][ T8735] CPU: 1 UID: 0 PID: 8735 Comm: syz.9.610 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 617.306298][ T8735] Tainted: [B]=BAD_PAGE [ 617.310603][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 617.320856][ T8735] Call Trace: [ 617.324301][ T8735] [ 617.327385][ T8735] __dump_stack+0x26/0x30 [ 617.331968][ T8735] dump_stack_lvl+0x53/0x270 [ 617.336822][ T8735] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 617.342912][ T8735] dump_stack+0x1e/0x25 [ 617.347322][ T8735] panic+0x4bd/0xd50 [ 617.351507][ T8735] kmsan_report+0x29d/0x2a0 [ 617.356272][ T8735] ? filter_irq_stacks+0x49/0x190 [ 617.361546][ T8735] ? __msan_warning+0x96/0x120 [ 617.366552][ T8735] ? pptp_xmit+0xc34/0x2720 [ 617.371283][ T8735] ? ppp_input+0x1d6/0xe60 [ 617.375908][ T8735] ? pppoe_rcv_core+0x1e8/0x760 [ 617.380975][ T8735] ? sk_backlog_rcv+0x13f/0x420 [ 617.386080][ T8735] ? __release_sock+0x1d3/0x330 [ 617.391148][ T8735] ? release_sock+0x6b/0x270 [ 617.395986][ T8735] ? pppoe_sendmsg+0x15d/0xcb0 [ 617.400950][ T8735] ? __sock_sendmsg+0x330/0x3d0 [ 617.406002][ T8735] ? ____sys_sendmsg+0x893/0xd80 [ 617.411121][ T8735] ? ___sys_sendmsg+0x271/0x3b0 [ 617.416140][ T8735] ? __sys_sendmmsg+0x3c2/0x7d0 [ 617.421151][ T8735] ? __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 617.427196][ T8735] ? ia32_sys_call+0x3a66/0x42c0 [ 617.432313][ T8735] ? __do_fast_syscall_32+0xb0/0x110 [ 617.437813][ T8735] ? do_fast_syscall_32+0x38/0x80 [ 617.443046][ T8735] ? do_SYSENTER_32+0x1f/0x30 [ 617.447929][ T8735] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.454671][ T8735] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 617.461239][ T8735] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 617.467520][ T8735] ? kmem_cache_free+0x3de/0xf00 [ 617.472687][ T8735] ? __kfree_skb+0x20b/0x260 [ 617.477531][ T8735] ? kmsan_get_metadata+0x105/0x1b0 [ 617.482949][ T8735] __msan_warning+0x96/0x120 [ 617.487737][ T8735] pptp_xmit+0xc34/0x2720 [ 617.492311][ T8735] ? __pfx_pptp_xmit+0x10/0x10 [ 617.497260][ T8735] ppp_input+0x1d6/0xe60 [ 617.501673][ T8735] ? kmsan_get_metadata+0x105/0x1b0 [ 617.507095][ T8735] pppoe_rcv_core+0x1e8/0x760 [ 617.511954][ T8735] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 617.517342][ T8735] sk_backlog_rcv+0x13f/0x420 [ 617.522235][ T8735] __release_sock+0x1d3/0x330 [ 617.527125][ T8735] release_sock+0x6b/0x270 [ 617.531746][ T8735] pppoe_sendmsg+0x15d/0xcb0 [ 617.536543][ T8735] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 617.541830][ T8735] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 617.547141][ T8735] __sock_sendmsg+0x330/0x3d0 [ 617.552038][ T8735] ____sys_sendmsg+0x893/0xd80 [ 617.557036][ T8735] ___sys_sendmsg+0x271/0x3b0 [ 617.561941][ T8735] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 617.567988][ T8735] ? __rcu_read_unlock+0x6d/0xd0 [ 617.573174][ T8735] ? __fget_files+0x3b4/0x4a0 [ 617.578042][ T8735] ? __fget_files+0x3b9/0x4a0 [ 617.582925][ T8735] ? kmsan_get_metadata+0x105/0x1b0 [ 617.588351][ T8735] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 617.594388][ T8735] __sys_sendmmsg+0x3c2/0x7d0 [ 617.599240][ T8735] ? schedule+0x17d/0x3c0 [ 617.603838][ T8735] ? kmsan_get_metadata+0x105/0x1b0 [ 617.609251][ T8735] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 617.615330][ T8735] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 617.621333][ T8735] ia32_sys_call+0x3a66/0x42c0 [ 617.626278][ T8735] __do_fast_syscall_32+0xb0/0x110 [ 617.631607][ T8735] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 617.637546][ T8735] do_fast_syscall_32+0x38/0x80 [ 617.642608][ T8735] do_SYSENTER_32+0x1f/0x30 [ 617.647326][ T8735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.653891][ T8735] RIP: 0023:0xf708e539 [ 617.658141][ T8735] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 617.677969][ T8735] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 617.686583][ T8735] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001640 [ 617.694703][ T8735] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000000000000 [ 617.702836][ T8735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 617.710953][ T8735] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 617.719085][ T8735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 617.727232][ T8735] [ 617.730731][ T8735] Kernel Offset: disabled [ 617.735152][ T8735] Rebooting in 86400 seconds..