last executing test programs: 15.608059716s ago: executing program 3 (id=371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 14.821039479s ago: executing program 3 (id=375): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESOCT]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022abd7001000000250f0000002a000e0068"], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) 13.941027568s ago: executing program 3 (id=379): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r0, 0x0, 0xdb33019, 0x2, 0x0, 0x2e) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)="11212e", 0x3}, 0x1, 0x0, 0x0, 0x24008011}, 0x6000040) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x0, 0x0) 13.231832844s ago: executing program 3 (id=383): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 11.718322018s ago: executing program 3 (id=387): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x8, 0x6ec901) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 8.473383783s ago: executing program 3 (id=403): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x7f}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x94}}, 0x0) 6.985862753s ago: executing program 32 (id=403): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x7f}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x94}}, 0x0) 6.957724971s ago: executing program 0 (id=406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.909298916s ago: executing program 1 (id=407): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @local, @dev={0xac, 0x14, 0x14, 0xa}}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/9, 0x9}], 0x1, 0x2f, 0x0) 6.909127134s ago: executing program 2 (id=408): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a5907", 0xa) sendfile(r0, r1, 0x0, 0xe065) 6.431671314s ago: executing program 1 (id=411): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 6.156870118s ago: executing program 2 (id=412): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080005"], 0x44}}, 0x0) 5.587251792s ago: executing program 0 (id=413): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x8, 0x6ec901) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 5.402026978s ago: executing program 4 (id=414): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40601000061ac00", "90be8b1c55f96400", [0x800]}}) 5.332639959s ago: executing program 1 (id=415): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000480)="ff57a21153298e2a79b69f8af79af3060e173bf2567cb893908439ffca12031125282ea4375a2a338e4d10f57acf35e9d0440f3e6227b4bd5854fdc5f4b2ab63626b14c12d9cdfc5e60bc286b96f2643c47ee2b87ea2a047c77e63ffa8742c3301c8ad1d71bff5002f6e10f634d3a3e0ce20f1388485080014a100000000b26138", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, 0x0, &(0x7f0000000080)) 5.100616125s ago: executing program 2 (id=416): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.787010882s ago: executing program 0 (id=417): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0x3) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3ff, @empty, 0xfffffff7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 4.393671849s ago: executing program 4 (id=418): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xfffd}}, 0x26) syz_emit_ethernet(0x38, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x16, 0x0, @gue={{0x2, 0x0, 0x3, 0x4, 0x100}, "3d8971389f7b"}}}}}}, 0x0) 4.328868053s ago: executing program 1 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x3ad8}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/4112, 0x1010}, {&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000001c00)=""/4080, 0xff0}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000240)=""/177, 0xb1}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x8042, 0x0) 3.906180991s ago: executing program 0 (id=420): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) 3.670526931s ago: executing program 4 (id=421): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f0000000040)=r2, 0x4) 3.356549233s ago: executing program 0 (id=422): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x128, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xec, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0xc4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x90, 0x1b, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x1}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.216404938s ago: executing program 2 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x40}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) 3.192210248s ago: executing program 1 (id=424): syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902a200030195b5b12504000000010100000a24010000000201020c240703000000ed129e8410eb23080000000009240300000003020009040100000102000009040101010102000008240201000000000905010900000003100725018001010109040200000103"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x401}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x10, 0xfffe, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) 2.720635044s ago: executing program 4 (id=425): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'pimreg1\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'dvmrp1\x00', 0x600}) 2.500171739s ago: executing program 0 (id=426): write(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x20, 0x0, 0xf, {0xf, 0x3, "a7ea3163fd3bc518194b120c1e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.32574599s ago: executing program 2 (id=427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 1.720658856s ago: executing program 4 (id=428): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002480)=@bridge_getneigh={0x190, 0x1e, 0x100, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x20c00, 0x412}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7fff}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'macvlan0\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1f, 0x0, 0x0, 0xf}, {0x8, 0x21, 0x0, 0x0, 0x7fffffff}, {0x8, 0xd}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0xcd0}, {0x8, 0x1d, 0x0, 0x0, 0x8}]}}]}, @IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfbff}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_OKEY={0x8, 0x5, 0xff}]}}}]}, 0x190}, 0x1, 0x0, 0x0, 0x8004}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x890, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x838, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x464, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3193}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xc, 0x6, 0x4, 0x6, 0x2076, 0x5, 0x3, 0x7f, 0x7, 0x1, 0x7, 0x2, 0x6, 0x9, 0x6, 0x3, 0xdc20, 0x8ab, 0x1ff, 0x8, 0xfffffffb, 0x9, 0x8, 0x6, 0x0, 0x9, 0xf, 0x0, 0x1, 0x200, 0x2, 0x5, 0xc00, 0x0, 0xc4e, 0x7, 0x1, 0xb, 0x7, 0x8, 0xfffffff7, 0x63c4, 0x7, 0xb, 0x4, 0x1, 0x9b, 0x7ae8fce3, 0x9, 0x0, 0x7e4c, 0x8, 0x0, 0x80000000, 0x2, 0x7fff, 0xffff, 0x6, 0x1, 0x8, 0x6, 0x8, 0x8, 0x9, 0x0, 0x6, 0x9, 0x3, 0x0, 0xc4, 0x1, 0x3, 0x2, 0x63, 0xfffffb0f, 0x7, 0xfffffff2, 0x8001, 0x1, 0x3, 0x0, 0xca, 0xfffffffc, 0x2, 0xfffffffe, 0x6, 0x6, 0xbe6b, 0x3, 0x7, 0x5, 0x10000, 0x1, 0x8, 0x6, 0x4, 0xf822, 0x10, 0x10000, 0xe9e, 0x7, 0x6, 0x88, 0x4, 0x8000, 0x5, 0x0, 0x7, 0x40, 0x7, 0x2, 0x5, 0x2, 0xfffffffd, 0x5, 0x7, 0x2387, 0x80, 0x4, 0x5, 0x1, 0x2, 0x6, 0x0, 0x6, 0x3ff, 0x5, 0x3ff, 0x1, 0x7, 0x0, 0x2, 0x1, 0xf79e, 0xd, 0x8a, 0x8, 0x7, 0x100, 0x2e8aa9d8, 0x815, 0xd, 0x1, 0x6, 0x1, 0x2, 0x60000000, 0x4, 0x8, 0x6, 0x80, 0x8, 0x7, 0x8000, 0x2, 0x200, 0x4, 0x7, 0x1ff, 0x3, 0xfc, 0xb, 0x4, 0x6, 0x1, 0x8, 0x3, 0x5, 0x0, 0x2, 0x6, 0x7, 0x8, 0x5b11, 0x7f, 0x5, 0x7, 0xffff, 0xfff, 0x3, 0x9, 0xcaef, 0x7, 0x2, 0xabb, 0x6c1b, 0x3, 0x62b4e8fc, 0x1000, 0x9, 0x9, 0xfffffff7, 0x5, 0x5, 0x4, 0x10, 0xc, 0x80000000, 0x9, 0x7, 0x400, 0xd, 0xd9, 0xbfd, 0x54597472, 0x8, 0x8, 0x1, 0x79b0, 0x4, 0x1758, 0xb, 0x9, 0x4, 0x101, 0x80000000, 0x2, 0x5c45, 0x90, 0x9, 0x2, 0x9, 0x1, 0x566, 0xf0, 0x401, 0x6, 0xfffff000, 0x35, 0x4, 0x7, 0xa, 0xfffffffc, 0xfffffffa, 0x8, 0x4, 0x1, 0x22, 0x80000000, 0x3, 0x400, 0x0, 0x8, 0x1480000, 0x8000, 0x7ff, 0x7, 0x2, 0x6, 0x101, 0x10, 0x37d2cec, 0x7fffffff, 0x2000000, 0x1]}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x88, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x3, 0x6, 0x4, 0x5, {0x0, 0x2, 0xfffa, 0xc, 0x4, 0xb}, {0xf7, 0x1, 0xd9, 0x0, 0x80c, 0x8}, 0x1c000, 0x1fe, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0xd, 0xc5, 0x1, {0x5, 0x2, 0x7fff, 0x98ca, 0x38e, 0x80000000}, {0x9, 0x2, 0x5, 0x3, 0x4, 0x8}, 0x6, 0x5, 0x8}}]}, @TCA_ROUTE4_ACT={0x338, 0x6, [@m_tunnel_key={0x120, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0xed, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795"}, {0xc}, {0xc}}}, @m_ife={0xc0, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @empty, @local}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xd8, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffd}}}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x51, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80"}, {0xc}, {0xc}}}]}]}}]}, 0x890}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 812.41933ms ago: executing program 2 (id=429): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0xf365, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80}]}]}]}}]}, 0x9c}}, 0x0) 614.944932ms ago: executing program 1 (id=430): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)="e4971a1e5bd147b293f90ee89b84b1c3c1c0a28034781c3041139c0127485d32a097875340df5d4c9c53ddc6fa7ecbfeaaf0da9a1977f1214182683b7832bbd6552a5512b6536c4c9c20e0ffb0e229c953fb6f51b9927227357e43cbda1119a8ad7e3e4e49eb8d1fc65e9511b7954845f8f7f82e18f5fa5d636136130beb975093183a196375a5e2", 0x88}, {&(0x7f00000000c0)="03effa5e44754015b87135d7f2114db2aab1c57d3c9d41bf4025f5fd02266a25d5531dcba90b471228020fe25f466461d6f28ad9051988d4a2a7c39748c349ead4634dc74c57eb4fb72e808304306bafb8edb21c20699dc477cd1e3ed31e34ad5d1bedd1f6231abef56322abe914958548c90e33ce5c45c512413a", 0x7b}, {&(0x7f0000000200)="e3385d31e8d79392a9be98241718c073f23344c3e2d69b60ec80fa0b3bcd2ecb61da2ec2358e1a70f547865ebbba9bad7ec130141244cf8ec80149f0a08bca51b54934de9bd315cee8963275d39ef07d6e92683693fe989dca97dc565c1b6382b21fd4fafd84b897afce709c23dd1d3590809bcba523272e9330a7c15d4209dc4f1a5c9f20ac122b43e04644566251b9f921882c92d6d47c1133b28e021b5acfa3b36014ef61bfd056bd3167f1ff7dc391c6467ce792ab8479089f728d5ca2f9d6e4102fb18db5230a78201b6c0681188040a419c7af905b48dd858a8040a6e353ba5dd06715f62de455768ca29954952a", 0xf1}, {0x0}, {&(0x7f0000000400)="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", 0x929}], 0x5}}], 0x1, 0x4048884) 0s ago: executing program 4 (id=431): unshare(0x66000080) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa080019"], 0x58}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 199.173381][ T5776] cgroup: Unknown subsys name 'net' [ 199.383284][ T5776] cgroup: Unknown subsys name 'cpuset' [ 199.406925][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.690823][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.697770][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.518747][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 256.761526][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.773123][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.793305][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.804864][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.817261][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.835779][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.846218][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.854968][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.865809][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.874842][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.884253][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.886118][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.896786][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.909268][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.911424][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.925653][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.946436][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.956012][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.958097][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.967776][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.063395][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.087619][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.103251][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.137099][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.246577][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.380271][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 258.712436][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 258.889677][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 258.955861][ T5807] Bluetooth: hci3: command tx timeout [ 259.032404][ T5807] Bluetooth: hci2: command tx timeout [ 259.038118][ T5807] Bluetooth: hci0: command tx timeout [ 259.046895][ T5802] Bluetooth: hci1: command tx timeout [ 259.374161][ T5807] Bluetooth: hci4: command tx timeout [ 259.538262][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 259.863170][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 259.985078][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.993060][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.000770][ T5810] bridge_slave_0: entered allmulticast mode [ 260.012385][ T5810] bridge_slave_0: entered promiscuous mode [ 260.087728][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.095633][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.103497][ T5803] bridge_slave_0: entered allmulticast mode [ 260.113208][ T5803] bridge_slave_0: entered promiscuous mode [ 260.125730][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.135631][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.143550][ T5810] bridge_slave_1: entered allmulticast mode [ 260.153106][ T5810] bridge_slave_1: entered promiscuous mode [ 260.250114][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.258340][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.266266][ T5803] bridge_slave_1: entered allmulticast mode [ 260.276037][ T5803] bridge_slave_1: entered promiscuous mode [ 260.515829][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.526407][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.534272][ T5798] bridge_slave_0: entered allmulticast mode [ 260.543504][ T5798] bridge_slave_0: entered promiscuous mode [ 260.568051][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.592055][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.697490][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.708310][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.719229][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.727046][ T5798] bridge_slave_1: entered allmulticast mode [ 260.736165][ T5798] bridge_slave_1: entered promiscuous mode [ 260.848405][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.856219][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.864136][ T5799] bridge_slave_0: entered allmulticast mode [ 260.874043][ T5799] bridge_slave_0: entered promiscuous mode [ 260.896968][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.061381][ T5807] Bluetooth: hci3: command tx timeout [ 261.073805][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.081438][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.090117][ T5799] bridge_slave_1: entered allmulticast mode [ 261.099889][ T5799] bridge_slave_1: entered promiscuous mode [ 261.146412][ T5807] Bluetooth: hci0: command tx timeout [ 261.152516][ T5806] Bluetooth: hci1: command tx timeout [ 261.153034][ T5807] Bluetooth: hci2: command tx timeout [ 261.251480][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.306208][ T5810] team0: Port device team_slave_0 added [ 261.321234][ T5803] team0: Port device team_slave_0 added [ 261.375970][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.386058][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.393828][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.401568][ T5814] bridge_slave_0: entered allmulticast mode [ 261.411531][ T5814] bridge_slave_0: entered promiscuous mode [ 261.432194][ T5807] Bluetooth: hci4: command tx timeout [ 261.476076][ T5810] team0: Port device team_slave_1 added [ 261.492582][ T5803] team0: Port device team_slave_1 added [ 261.541929][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.549552][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.557463][ T5814] bridge_slave_1: entered allmulticast mode [ 261.567186][ T5814] bridge_slave_1: entered promiscuous mode [ 261.624972][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.726883][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.734272][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.760783][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.855573][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.872168][ T5798] team0: Port device team_slave_0 added [ 261.959989][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.968274][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.995389][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.051192][ T5798] team0: Port device team_slave_1 added [ 262.070104][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.117547][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.124869][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.152190][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.226744][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.245162][ T5799] team0: Port device team_slave_0 added [ 262.294965][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.302300][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.332912][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.408735][ T5799] team0: Port device team_slave_1 added [ 262.418760][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.426072][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.452494][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.585663][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.592986][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.620271][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.641089][ T5814] team0: Port device team_slave_0 added [ 262.719354][ T5810] hsr_slave_0: entered promiscuous mode [ 262.729826][ T5810] hsr_slave_1: entered promiscuous mode [ 262.784212][ T5814] team0: Port device team_slave_1 added [ 262.894725][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.903486][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.930396][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.062074][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.069269][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.096585][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.116328][ T5807] Bluetooth: hci3: command tx timeout [ 263.166539][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.174094][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.202019][ T5807] Bluetooth: hci2: command tx timeout [ 263.202367][ T5807] Bluetooth: hci1: command tx timeout [ 263.207596][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.213086][ T5807] Bluetooth: hci0: command tx timeout [ 263.246049][ T5803] hsr_slave_0: entered promiscuous mode [ 263.255351][ T5803] hsr_slave_1: entered promiscuous mode [ 263.264046][ T5803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.271968][ T5803] Cannot create hsr debugfs directory [ 263.377154][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.385849][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.413399][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.472218][ T5798] hsr_slave_0: entered promiscuous mode [ 263.482616][ T5798] hsr_slave_1: entered promiscuous mode [ 263.491512][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.499745][ T5798] Cannot create hsr debugfs directory [ 263.523985][ T5802] Bluetooth: hci4: command tx timeout [ 263.838527][ T5814] hsr_slave_0: entered promiscuous mode [ 263.848824][ T5814] hsr_slave_1: entered promiscuous mode [ 263.857908][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.865850][ T5814] Cannot create hsr debugfs directory [ 263.952288][ T5799] hsr_slave_0: entered promiscuous mode [ 263.962303][ T5799] hsr_slave_1: entered promiscuous mode [ 263.970323][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.978306][ T5799] Cannot create hsr debugfs directory [ 265.208909][ T5802] Bluetooth: hci3: command tx timeout [ 265.310933][ T5802] Bluetooth: hci0: command tx timeout [ 265.316956][ T5807] Bluetooth: hci1: command tx timeout [ 265.322839][ T5806] Bluetooth: hci2: command tx timeout [ 265.441200][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.481894][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.505708][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.528687][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.573896][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.596025][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.596190][ T5807] Bluetooth: hci4: command tx timeout [ 265.643544][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.665662][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.952102][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.034759][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.059818][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.096364][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.124591][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.147938][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.172058][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.213562][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.239733][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.270600][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.298258][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.397412][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.147823][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.260221][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.466261][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.508402][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.557232][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.564968][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.629754][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.637447][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.751779][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.759519][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.776305][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.783993][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.846604][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.039677][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.193997][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.316588][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.324342][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.368037][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.423239][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.470399][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.478144][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.496044][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.503784][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.685558][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.693315][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.787185][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.826771][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.948951][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.956882][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.102826][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.110453][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.370504][ T5798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.483338][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.554146][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.110879][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.180937][ T5803] veth0_vlan: entered promiscuous mode [ 271.205446][ T5810] veth0_vlan: entered promiscuous mode [ 271.260124][ T5803] veth1_vlan: entered promiscuous mode [ 271.363887][ T5810] veth1_vlan: entered promiscuous mode [ 271.583876][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.650766][ T5803] veth0_macvtap: entered promiscuous mode [ 271.774827][ T5803] veth1_macvtap: entered promiscuous mode [ 271.873433][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.910815][ T5810] veth0_macvtap: entered promiscuous mode [ 272.118901][ T5810] veth1_macvtap: entered promiscuous mode [ 272.138407][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.268641][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.371173][ T5803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.383266][ T5803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.394831][ T5803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.404078][ T5803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.435817][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.470519][ T5798] veth0_vlan: entered promiscuous mode [ 272.566618][ T5799] veth0_vlan: entered promiscuous mode [ 272.597106][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.627917][ T5798] veth1_vlan: entered promiscuous mode [ 272.703792][ T5810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.713620][ T5810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.722980][ T5810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.732172][ T5810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.777813][ T5799] veth1_vlan: entered promiscuous mode [ 273.029803][ T5798] veth0_macvtap: entered promiscuous mode [ 273.133534][ T5798] veth1_macvtap: entered promiscuous mode [ 273.259289][ T5799] veth0_macvtap: entered promiscuous mode [ 273.330008][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.390275][ T5799] veth1_macvtap: entered promiscuous mode [ 273.437394][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.558349][ T5798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.568876][ T5798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.578754][ T5798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.587953][ T5798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.708034][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.828446][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.976575][ T5799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.987291][ T5799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.998157][ T5799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.007340][ T5799] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.377162][ T5814] veth0_vlan: entered promiscuous mode [ 274.501254][ T5814] veth1_vlan: entered promiscuous mode [ 274.899369][ T5814] veth0_macvtap: entered promiscuous mode [ 274.994203][ T5814] veth1_macvtap: entered promiscuous mode [ 275.210426][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.336570][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.435756][ T5814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.445058][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.454307][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.463561][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.644126][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.653283][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.780479][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.789754][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.318177][ T5803] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 280.517341][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.525975][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.693391][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.701522][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.248947][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.257232][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.654964][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.663236][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.910385][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.919203][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.084190][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.093248][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.102624][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 282.338235][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.349084][ T5908] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 282.360390][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.444480][ T5908] usb 4-1: config 0 descriptor?? [ 282.572166][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 282.850812][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.862707][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.997570][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 283.039135][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 283.174756][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.183308][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.234593][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 283.270039][ T5908] pwc: recv_control_msg error -32 req 04 val 1000 [ 283.289693][ T5908] pwc: recv_control_msg error -32 req 04 val 1300 [ 283.351029][ T5908] pwc: recv_control_msg error -32 req 04 val 1400 [ 283.403822][ T5908] pwc: recv_control_msg error -32 req 02 val 2000 [ 283.450605][ T5908] pwc: recv_control_msg error -32 req 02 val 2100 [ 283.492390][ T5908] pwc: recv_control_msg error -32 req 04 val 1500 [ 283.545794][ T5908] pwc: recv_control_msg error -32 req 02 val 2500 [ 283.841870][ T5908] pwc: recv_control_msg error -71 req 02 val 2600 [ 283.850109][ T5908] pwc: recv_control_msg error -71 req 02 val 2900 [ 283.896369][ T5908] pwc: recv_control_msg error -71 req 02 val 2800 [ 283.941508][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 283.982126][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 284.035440][ T5908] pwc: Registered as video103. [ 284.044388][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 284.199188][ T5908] usb 4-1: USB disconnect, device number 2 [ 284.474488][ T5997] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.243314][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 285.325169][ T6005] loop1: detected capacity change from 0 to 1024 [ 285.436476][ T6005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.022106][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 286.212032][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 286.242280][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 286.254766][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 286.289336][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.377272][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 286.393103][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.401418][ T24] usb 1-1: Product: syz [ 286.407853][ T24] usb 1-1: Manufacturer: syz [ 286.413094][ T24] usb 1-1: SerialNumber: syz [ 286.519350][ T6021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 286.559620][ T24] usb 1-1: config 0 descriptor?? [ 286.605065][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 286.614953][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 286.980998][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 287.164109][ T5858] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 287.174831][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.246161][ T5858] usb 5-1: config 0 descriptor?? [ 287.264736][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 287.293827][ T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 287.952506][ T5858] usb 5-1: Cannot set autoneg [ 287.958329][ T5858] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 287.986842][ T24] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 288.075393][ T5858] usb 5-1: USB disconnect, device number 2 [ 288.397307][ T5908] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 288.476369][ T3567] wlan1: Trigger new scan to find an IBSS to join [ 288.823196][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.834067][ T5908] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 288.845974][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.888152][ T5908] usb 3-1: config 0 descriptor?? [ 288.909910][ T6034] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 289.012081][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 289.090184][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 289.124195][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 289.167055][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 289.237830][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 289.325894][ T24] usb 1-1: USB disconnect, device number 2 [ 289.393089][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 289.442495][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 289.488335][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 289.522508][ T5908] pwc: recv_control_msg error -32 req 04 val 1000 [ 289.552763][ T5908] pwc: recv_control_msg error -32 req 04 val 1300 [ 289.612827][ T5908] pwc: recv_control_msg error -32 req 04 val 1400 [ 289.707656][ T5908] pwc: recv_control_msg error -32 req 02 val 2000 [ 289.752290][ T5908] pwc: recv_control_msg error -32 req 02 val 2100 [ 289.787974][ T5908] pwc: recv_control_msg error -32 req 04 val 1500 [ 289.809777][ T5908] pwc: recv_control_msg error -32 req 02 val 2500 [ 289.847199][ T5908] pwc: recv_control_msg error -32 req 02 val 2400 [ 289.875681][ T5908] pwc: recv_control_msg error -32 req 02 val 2600 [ 289.886804][ T5908] pwc: recv_control_msg error -32 req 02 val 2900 [ 289.916217][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18'. [ 290.113506][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 290.143104][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 290.184502][ T5908] pwc: Registered as video103. [ 290.225610][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 290.354143][ T5908] usb 3-1: USB disconnect, device number 2 [ 291.032059][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 291.078739][ T6052] syzkaller0: entered allmulticast mode [ 291.149601][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.156735][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.224942][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 291.265205][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 291.318382][ T24] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 291.327094][ T24] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 291.337800][ T24] usb 1-1: config 7 has no interface number 0 [ 291.346403][ T24] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 291.356932][ T24] usb 1-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.370449][ T24] usb 1-1: config 7 interface 187 has no altsetting 0 [ 291.535583][ T24] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 291.545167][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.553676][ T24] usb 1-1: Product: syz [ 291.558122][ T24] usb 1-1: Manufacturer: syz [ 291.563094][ T24] usb 1-1: SerialNumber: syz [ 291.598554][ T6047] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.862245][ T24] usb 1-1: Cannot retrieve CPort count: -32 [ 291.868605][ T24] usb 1-1: Cannot retrieve CPort count: -32 [ 291.875123][ T24] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -32 [ 292.212616][ T6056] tipc: Started in network mode [ 292.224431][ T6056] tipc: Node identity 4, cluster identity 4711 [ 292.230863][ T6056] tipc: Node number set to 4 [ 292.412263][ T5908] usb 1-1: USB disconnect, device number 3 [ 292.747643][ T6064] tipc: Started in network mode [ 292.753089][ T6064] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 292.763282][ T6064] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 292.776311][ T6064] tipc: Enabled bearer , priority 10 [ 292.877346][ T6067] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 292.884202][ T6067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 292.893071][ T6067] vhci_hcd vhci_hcd.0: Device attached [ 292.964432][ T6067] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 292.971412][ T6067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 292.980186][ T6067] vhci_hcd vhci_hcd.0: Device attached [ 293.099436][ T6067] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 293.106409][ T6067] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 293.115056][ T6067] vhci_hcd vhci_hcd.0: Device attached [ 293.182741][ T5908] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 293.219704][ T6067] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.319992][ T6075] batman_adv: batadv0: Adding interface: vxlan0 [ 293.327500][ T6075] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.361472][ T6075] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 293.397432][ T6076] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(22) [ 293.404363][ T6076] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 293.412960][ T6076] vhci_hcd vhci_hcd.0: Device attached [ 293.419643][ T6067] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 293.426562][ T6067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 293.435444][ T6067] vhci_hcd vhci_hcd.0: Device attached [ 293.454942][ T3567] wlan1: Trigger new scan to find an IBSS to join [ 293.593973][ T6081] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.647562][ T6067] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.709418][ T6067] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.826991][ T6067] vhci_hcd vhci_hcd.0: port 0 already used [ 293.892350][ T11] tipc: Node number set to 1 [ 293.995042][ T6078] vhci_hcd: connection closed [ 294.005843][ T6077] vhci_hcd: connection closed [ 294.011289][ T12] vhci_hcd: stop threads [ 294.022590][ T12] vhci_hcd: release socket [ 294.027269][ T12] vhci_hcd: disconnect device [ 294.049508][ T6072] vhci_hcd: connection closed [ 294.050092][ T6068] vhci_hcd: connection reset by peer [ 294.065137][ T6070] vhci_hcd: connection closed [ 294.121922][ T12] vhci_hcd: stop threads [ 294.131475][ T12] vhci_hcd: release socket [ 294.136504][ T12] vhci_hcd: disconnect device [ 294.144090][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 294.222696][ T12] vhci_hcd: stop threads [ 294.227233][ T12] vhci_hcd: release socket [ 294.232987][ T12] vhci_hcd: disconnect device [ 294.263629][ T12] vhci_hcd: stop threads [ 294.270988][ T12] vhci_hcd: release socket [ 294.276001][ T12] vhci_hcd: disconnect device [ 294.301274][ T12] vhci_hcd: stop threads [ 294.306284][ T12] vhci_hcd: release socket [ 294.311299][ T12] vhci_hcd: disconnect device [ 294.373969][ T5858] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 294.408685][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.419702][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 294.429429][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.450991][ T24] usb 4-1: config 0 descriptor?? [ 294.479382][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 294.513603][ T3481] wlan1: Creating new IBSS network, BSSID 72:70:8a:26:f9:11 [ 294.592342][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 294.593069][ T5858] usb 5-1: Using ep0 maxpacket: 16 [ 294.824313][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 294.885771][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.897457][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.907796][ T11] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 294.917343][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.970130][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 295.003874][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 295.014232][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 295.094318][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 295.118091][ T11] usb 3-1: config 0 descriptor?? [ 295.162762][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 295.182424][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 295.222349][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 295.242478][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 295.266025][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 295.319676][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 295.364315][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 295.412920][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 295.435885][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 295.467082][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 295.666985][ T11] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 295.692033][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 295.756076][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 295.853876][ T24] pwc: Registered as video103. [ 295.863390][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 295.902151][ T41] usb 3-1: USB disconnect, device number 3 [ 296.092318][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 296.162963][ T24] usb 4-1: USB disconnect, device number 3 [ 296.345019][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 296.474266][ T5858] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.483552][ T11] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 296.493416][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.501882][ T11] usb 2-1: Product: syz [ 296.506314][ T11] usb 2-1: Manufacturer: syz [ 296.511164][ T11] usb 2-1: SerialNumber: syz [ 296.552992][ T5858] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 296.560994][ T5858] usb 5-1: can't read configurations, error -71 [ 296.685047][ T11] usb 2-1: config 0 descriptor?? [ 296.793788][ T11] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 297.905695][ T6101] fido_id[6101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 298.044084][ T6109] hub 9-0:1.0: USB hub found [ 298.049878][ T6109] hub 9-0:1.0: 1 port detected [ 298.321481][ T5908] vhci_hcd: vhci_device speed not set [ 299.520327][ T5860] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 299.730621][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.742705][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.753340][ T5860] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 299.763111][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.779286][ T5380] usb usb36-port1: attempt power cycle [ 299.827993][ T11] gspca_sonixj: i2c_w8 err -71 [ 299.930909][ T11] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 299.946493][ T5860] usb 4-1: config 0 descriptor?? [ 299.954962][ T11] usb 2-1: USB disconnect, device number 2 [ 299.996532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 300.013400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 300.022879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 300.302901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 300.316480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 300.452673][ T5380] usb usb36-port1: unable to enumerate USB device [ 300.994093][ T6109] wÞ£ÿ (6109) used greatest stack depth: 2376 bytes left [ 301.465654][ T5860] uclogic 0003:256C:006D.0002: v1 frame probing failed: -71 [ 301.473748][ T5860] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 301.482272][ T5860] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 301.591330][ T5860] usb 4-1: USB disconnect, device number 4 [ 301.954922][ T5858] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 301.976650][ T6129] netlink: 48 bytes leftover after parsing attributes in process `syz.2.40'. [ 302.182613][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 302.206525][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 302.286399][ T5858] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 302.296346][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.304857][ T5858] usb 1-1: Product: syz [ 302.309303][ T5858] usb 1-1: Manufacturer: syz [ 302.314494][ T5858] usb 1-1: SerialNumber: syz [ 302.394282][ T5858] usb 1-1: config 0 descriptor?? [ 302.452155][ T5858] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 302.471470][ T5858] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 303.094050][ T5858] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 303.454563][ T6147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 303.578425][ T5858] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 303.595342][ T5858] em28xx 1-1:0.0: board has no eeprom [ 303.605266][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 303.731034][ T6150] bridge_slave_0: left allmulticast mode [ 303.739958][ T6150] bridge_slave_0: left promiscuous mode [ 303.747823][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.780146][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.794817][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.847840][ T6158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.47'. [ 303.903369][ T6150] bridge_slave_1: left allmulticast mode [ 303.909591][ T6150] bridge_slave_1: left promiscuous mode [ 303.932612][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.042652][ T6150] bond0: (slave bond_slave_0): Releasing backup interface [ 304.135753][ T6150] bond0: (slave bond_slave_1): Releasing backup interface [ 304.242391][ T6150] team0: Failed to send options change via netlink (err -105) [ 304.253570][ T6150] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 304.264993][ T6150] team0: Port device team_slave_0 removed [ 304.418160][ T6150] team0: Failed to send options change via netlink (err -105) [ 304.429179][ T6150] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 304.440742][ T6150] team0: Port device team_slave_1 removed [ 304.453229][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.461025][ T6150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.548800][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.563653][ T6150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.632900][ T6134] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 304.702060][ T5858] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 304.718429][ T5858] em28xx 1-1:0.0: dvb set to bulk mode. [ 304.733894][ T41] em28xx 1-1:0.0: Binding DVB extension [ 304.768199][ T6147] batadv0: entered promiscuous mode [ 304.774135][ T6147] macvtap1: entered promiscuous mode [ 304.780774][ T6147] macvtap1: entered allmulticast mode [ 304.786757][ T6147] batadv0: entered allmulticast mode [ 304.798141][ T6147] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 304.899375][ T5858] usb 1-1: USB disconnect, device number 4 [ 304.908206][ T5858] em28xx 1-1:0.0: Disconnecting em28xx [ 305.340777][ T41] em28xx 1-1:0.0: Registering input extension [ 305.392736][ T5858] em28xx 1-1:0.0: Closing input extension [ 305.456257][ T5858] em28xx 1-1:0.0: Freeing device [ 307.024330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 307.024871][ T6179] block nbd4: shutting down sockets [ 307.069212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 307.114444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 309.405199][ T6204] loop3: detected capacity change from 0 to 1024 [ 310.292593][ T5860] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 310.474820][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 310.615722][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.627242][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.637673][ T5860] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 310.647143][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.845218][ T5860] usb 4-1: config 0 descriptor?? [ 311.168842][ T5860] usbhid 4-1:0.0: can't add hid device: -71 [ 311.177376][ T5860] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 311.229227][ T6228] overlayfs: failed to resolve './file1/file0': -2 [ 311.250492][ T5860] usb 4-1: USB disconnect, device number 5 [ 312.057304][ T6233] netlink: 'syz.0.63': attribute type 10 has an invalid length. [ 312.065984][ T6233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.63'. [ 312.377098][ T6233] team0: Port device netdevsim1 added [ 314.332620][ T5807] Bluetooth: hci3: unexpected cc 0x203b length: 9 > 2 [ 316.566368][ T6243] syz.2.65 (6243): drop_caches: 2 [ 317.147678][ T5860] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 317.343485][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 317.431291][ T5860] usb 2-1: config 0 has an invalid interface number: 158 but max is 0 [ 317.440756][ T5860] usb 2-1: config 0 has no interface number 0 [ 317.750040][ T6216] Set syz1 is full, maxelem 65536 reached [ 317.844574][ T5860] usb 2-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=76.25 [ 317.854322][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.862935][ T5860] usb 2-1: Product: syz [ 317.867364][ T5860] usb 2-1: Manufacturer: syz [ 317.872401][ T5860] usb 2-1: SerialNumber: syz [ 317.961170][ T5860] usb 2-1: config 0 descriptor?? [ 318.265600][ T5860] upd78f0730 2-1:0.158: upd78f0730 converter detected [ 318.323666][ T5860] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 318.412372][ T5860] usb 2-1: USB disconnect, device number 3 [ 318.454010][ T5860] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 318.466294][ T5860] upd78f0730 2-1:0.158: device disconnected [ 318.736017][ T6260] loop2: detected capacity change from 0 to 4096 [ 319.092536][ T6270] syz.0.75 uses obsolete (PF_INET,SOCK_PACKET) [ 319.141074][ T6260] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 319.194386][ T5858] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 319.316511][ T6272] netlink: 156 bytes leftover after parsing attributes in process `syz.0.75'. [ 319.326157][ T6272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.75'. [ 319.450684][ T5858] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 319.466169][ T5858] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 319.540161][ T5858] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.550975][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 319.564451][ T5858] usb 5-1: SerialNumber: syz [ 319.682879][ T6266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.692295][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 319.725842][ T5858] usb 5-1: bad CDC descriptors [ 320.124551][ T5858] usb 5-1: USB disconnect, device number 5 [ 320.572076][ T5860] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 320.800849][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 320.845000][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.857399][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.868697][ T5860] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 320.879405][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.045181][ T5860] usb 2-1: config 0 descriptor?? [ 321.303312][ T5860] usbhid 2-1:0.0: can't add hid device: -71 [ 321.311529][ T5860] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 321.385149][ T5860] usb 2-1: USB disconnect, device number 4 [ 322.373683][ T30] audit: type=1326 audit(1750487964.819:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 322.402141][ T5858] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 322.458127][ T30] audit: type=1326 audit(1750487964.859:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 322.482182][ T30] audit: type=1326 audit(1750487964.859:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 322.504420][ T30] audit: type=1326 audit(1750487964.859:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 322.526710][ T30] audit: type=1326 audit(1750487964.859:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 322.672068][ T5858] usb 4-1: Using ep0 maxpacket: 8 [ 322.692867][ T5858] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 322.701431][ T5858] usb 4-1: config 0 has no interface number 0 [ 322.708220][ T5858] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 322.718834][ T5858] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 322.728913][ T5858] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 322.744046][ T5858] usb 4-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 322.757691][ T5858] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 322.768073][ T5858] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 323.048093][ T5858] usb 4-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 323.057973][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.066460][ T5858] usb 4-1: Product: syz [ 323.070891][ T5858] usb 4-1: Manufacturer: syz [ 323.075879][ T5858] usb 4-1: SerialNumber: syz [ 323.132525][ T5858] usb 4-1: config 0 descriptor?? [ 323.172465][ T6309] loop4: detected capacity change from 0 to 64 [ 323.229429][ T6309] MINIX-fs: bad superblock [ 323.278348][ T6311] random: crng reseeded on system resumption [ 323.443249][ T5858] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 323.460733][ T5858] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 323.552447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 323.664056][ T5858] usb 4-1: USB disconnect, device number 6 [ 324.194739][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 1870 [ 324.600638][ T3491] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 325.652608][ T6335] gre1: entered promiscuous mode [ 326.556855][ T30] audit: type=1326 audit(1750487968.989:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 326.579403][ T30] audit: type=1326 audit(1750487968.989:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 326.601872][ T30] audit: type=1326 audit(1750487968.989:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 326.629035][ T30] audit: type=1326 audit(1750487968.999:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 326.652985][ T30] audit: type=1326 audit(1750487968.999:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.1.108" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 326.763867][ T6350] netlink: 'syz.3.110': attribute type 10 has an invalid length. [ 327.513482][ T5807] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 328.353871][ T6369] loop4: detected capacity change from 0 to 256 [ 328.712084][ T5807] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 328.721134][ T5807] Bluetooth: hci4: Injecting HCI hardware error event [ 328.731366][ T5807] Bluetooth: hci4: hardware error 0x00 [ 329.412956][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 329.422773][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 330.057396][ T6390] netlink: 168 bytes leftover after parsing attributes in process `syz.0.130'. [ 330.802081][ T5807] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 331.092171][ T30] audit: type=1326 audit(1750487973.519:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 331.114628][ T30] audit: type=1326 audit(1750487973.549:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 331.143529][ T30] audit: type=1326 audit(1750487973.549:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 331.875168][ T6409] binder_alloc: 6408: binder_alloc_buf, no vma [ 332.030263][ T6417] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.562884][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 332.992627][ T6427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.147'. [ 334.091360][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 334.145695][ T6441] binder: BINDER_SET_CONTEXT_MGR already set [ 334.152275][ T6441] binder: 6438:6441 ioctl 4018620d 80000040 returned -16 [ 334.867124][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 336.746327][ T5858] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 336.983791][ T5858] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.995361][ T5858] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 337.005814][ T5858] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.015328][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.155071][ T6474] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 337.227584][ T5858] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.563609][ T6474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'. [ 337.609024][ T5858] usb 3-1: USB disconnect, device number 4 [ 337.972056][ T41] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 338.178305][ T6489] udevd[6489]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.202408][ T41] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 338.212381][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.293779][ T41] usb 1-1: config 0 descriptor?? [ 338.392229][ T41] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 338.659457][ T6497] loop4: detected capacity change from 0 to 1024 [ 338.744801][ T6497] ext4: Unknown parameter 'smackfsroot' [ 338.997896][ T41] gspca_sunplus: reg_w_riv err -71 [ 339.004427][ T41] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 339.162469][ T41] usb 1-1: USB disconnect, device number 5 [ 340.183172][ T6510] tipc: Started in network mode [ 340.188316][ T6510] tipc: Node identity , cluster identity 4711 [ 341.089992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 341.412139][ T41] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 341.615245][ T41] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.626977][ T41] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.643105][ T41] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.652620][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.807091][ T6521] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 341.915476][ T41] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.152397][ T41] usb 3-1: USB disconnect, device number 5 [ 342.324580][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.373219][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'. [ 342.764356][ T6538] Zero length message leads to an empty skb [ 344.462210][ T5860] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 344.652084][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 344.719819][ T5860] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 344.729977][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.738581][ T5860] usb 2-1: Product: syz [ 344.743128][ T5860] usb 2-1: Manufacturer: syz [ 344.747992][ T5860] usb 2-1: SerialNumber: syz [ 344.846085][ T5860] usb 2-1: config 0 descriptor?? [ 344.920083][ T6560] loop3: detected capacity change from 0 to 1024 [ 344.953085][ T5860] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 344.966554][ T5860] usb 2-1: setting power ON [ 344.971361][ T5860] dvb-usb: bulk message failed: -22 (2/0) [ 345.043223][ T6560] ext4: Unknown parameter 'smackfsroot' [ 345.095740][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 345.124776][ T6554] dvb-usb: bulk message failed: -22 (3/0) [ 345.131091][ T6554] cxusb: i2c wr: len=79 is too big! [ 345.131091][ T6554] [ 345.190573][ T5860] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 345.199772][ T5860] usb 2-1: media controller created [ 345.336101][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.825350][ T5860] usb 2-1: selecting invalid altsetting 6 [ 345.831413][ T5860] usb 2-1: digital interface selection failed (-22) [ 345.840229][ T5860] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 345.962142][ T5860] usb 2-1: setting power OFF [ 345.967040][ T5860] dvb-usb: bulk message failed: -22 (2/0) [ 345.979147][ T5860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 345.993914][ T5860] (NULL device *): no alternate interface [ 346.612154][ T41] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 346.661832][ T6575] binder: BINDER_SET_CONTEXT_MGR already set [ 346.668100][ T6575] binder: 6572:6575 ioctl 4018620d 80000040 returned -16 [ 346.685179][ T5860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 346.829454][ T5860] usb 2-1: USB disconnect, device number 5 [ 346.913612][ T41] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.925518][ T41] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 346.935943][ T41] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.945644][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.113662][ T6573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 347.168343][ T41] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.533731][ T41] usb 3-1: USB disconnect, device number 6 [ 347.644159][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.213'. [ 347.944989][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.199322][ T6602] loop3: detected capacity change from 0 to 64 [ 349.442508][ T6602] hfs: bad catalog entry type 0 [ 350.192082][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 350.322604][ T6610] binder: BINDER_SET_CONTEXT_MGR already set [ 350.329001][ T6610] binder: 6609:6610 ioctl 4018620d 80000040 returned -16 [ 350.392793][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 350.419843][ T41] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.430349][ T41] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.442863][ T41] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 350.454368][ T41] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 350.464767][ T41] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 350.478387][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 350.490397][ T41] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 350.501867][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.765387][ T41] usb 5-1: config 0 descriptor?? [ 351.333964][ T41] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 351.343019][ T41] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 351.351230][ T41] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 351.359628][ T41] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 351.367907][ T41] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 351.534148][ T41] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 351.547351][ T41] hid-thrustmaster 0003:044F:B65D.0003: setup data couldn't be sent [ 351.556535][ C1] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71 [ 351.663912][ T41] usb 5-1: USB disconnect, device number 6 [ 352.500621][ T6627] fido_id[6627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 352.592912][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.599855][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.611872][ T41] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 352.712577][ T5860] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 352.835147][ T41] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 352.852000][ T41] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 352.864102][ T41] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 352.873664][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.904034][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.915097][ T5860] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.924713][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.985768][ T5860] usb 3-1: config 0 descriptor?? [ 353.083386][ T6632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.114076][ T41] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 353.288739][ T5860] usb 3-1: USB disconnect, device number 7 [ 353.444873][ T41] usb 4-1: USB disconnect, device number 7 [ 353.523785][ T6632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'. [ 353.629155][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.900162][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 353.909589][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 354.029303][ T6648] binder: BINDER_SET_CONTEXT_MGR already set [ 354.035838][ T6648] binder: 6647:6648 ioctl 4018620d 80000040 returned -16 [ 354.728709][ T5860] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 354.881906][ T41] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 354.922343][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 354.948319][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.958786][ T5860] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 354.968401][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.029575][ T5860] usb 2-1: config 0 descriptor?? [ 355.052241][ T41] usb 3-1: device descriptor read/64, error -71 [ 355.318263][ T41] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 355.513066][ T41] usb 3-1: device descriptor read/64, error -71 [ 355.524744][ T5860] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0 [ 355.625087][ T41] usb usb3-port1: attempt power cycle [ 355.703667][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 355.724917][ T5860] playstation 0003:054C:0BA0.0004: hidraw0: USB HID v0.08 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 355.806589][ T5860] playstation 0003:054C:0BA0.0004: Failed to retrieve feature with reportID 18: -71 [ 355.826367][ T5860] playstation 0003:054C:0BA0.0004: Failed to retrieve DualShock4 pairing info: -71 [ 355.837655][ T5860] playstation 0003:054C:0BA0.0004: Failed to get MAC address from DualShock4 [ 355.847321][ T5860] playstation 0003:054C:0BA0.0004: Failed to create dualshock4. [ 355.967060][ T5860] playstation 0003:054C:0BA0.0004: probe with driver playstation failed with error -71 [ 355.993012][ T41] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 356.071359][ T5860] usb 2-1: USB disconnect, device number 6 [ 356.111534][ T41] usb 3-1: device descriptor read/8, error -71 [ 356.278704][ T6667] fido_id[6667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 356.302749][ T6671] capability: warning: `syz.0.251' uses deprecated v2 capabilities in a way that may be insecure [ 356.382927][ T41] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 356.452051][ T41] usb 3-1: device descriptor read/8, error -71 [ 356.585116][ T41] usb usb3-port1: unable to enumerate USB device [ 357.763475][ T11] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 357.862156][ T5860] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 358.007938][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.018728][ T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 358.028317][ T11] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 358.038191][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.143538][ T5860] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.155213][ T5860] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 358.168644][ T5860] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.179065][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.205183][ T11] usb 5-1: config 0 descriptor?? [ 358.223722][ T11] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 358.230888][ T11] dvb-usb: bulk message failed: -22 (3/0) [ 358.272896][ T11] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 358.298502][ T6685] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 358.323587][ T5860] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.370952][ T6688] loop2: detected capacity change from 0 to 1024 [ 358.403664][ T11] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 358.411054][ T11] usb 5-1: media controller created [ 358.477673][ T6682] dvb-usb: bulk message failed: -22 (2/0) [ 358.497711][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.599528][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'. [ 358.653585][ T11] dvb-usb: bulk message failed: -22 (6/0) [ 358.660174][ T11] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 358.672022][ T5380] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 358.775099][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 358.866089][ T11] dvb-usb: schedule remote query interval to 150 msecs. [ 358.873784][ T11] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 358.912319][ T5380] usb 2-1: Using ep0 maxpacket: 8 [ 358.945902][ T5380] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 358.954032][ T5380] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 358.966435][ T5380] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.978607][ T5380] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.992793][ T5380] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 359.032805][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 359.038880][ T5908] dvb-usb: error while querying for an remote control event. [ 359.060357][ T11] usb 5-1: USB disconnect, device number 7 [ 359.190488][ T5860] usb 1-1: USB disconnect, device number 6 [ 359.198510][ T5380] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 359.206594][ T5380] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 359.219035][ T5380] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 359.231371][ T5380] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 359.243240][ T5380] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 359.348510][ T3609] hfsplus: b-tree write err: -5, ino 4 [ 359.444570][ T5380] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 359.456270][ T5380] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 359.468291][ T5380] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 359.480485][ T5380] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 359.492277][ T5380] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 359.586188][ T6489] udevd[6489]: setting mode of /dev/dmmidi3 to 020660 failed: No such file or directory [ 359.613154][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.645780][ T6489] udevd[6489]: setting owner of /dev/dmmidi3 to uid=0, gid=29 failed: No such file or directory [ 359.723707][ T5380] usb 2-1: string descriptor 0 read error: -22 [ 359.730663][ T5380] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 359.740426][ T5380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.850457][ T11] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 359.995122][ T5380] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 360.240361][ T11] usb 2-1: USB disconnect, device number 7 [ 362.112015][ T11] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 362.342122][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.352331][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 362.365250][ T11] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 362.375597][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.414556][ T11] usb 5-1: config 0 descriptor?? [ 362.522154][ T5380] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 362.637707][ T11] ath6kl: Failed to submit usb control message: -71 [ 362.644992][ T11] ath6kl: unable to send the bmi data to the device: -71 [ 362.652658][ T11] ath6kl: Unable to send get target info: -71 [ 362.660265][ T11] ath6kl: Failed to init ath6kl core: -71 [ 362.673673][ T11] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 362.780964][ T5380] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 362.794113][ T5380] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 362.804608][ T5380] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.814144][ T5380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.862077][ T11] usb 5-1: USB disconnect, device number 8 [ 362.970388][ T6722] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 363.063870][ T5380] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.404771][ T5380] usb 4-1: USB disconnect, device number 8 [ 363.503092][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.274'. [ 364.153664][ T5380] kernel write not supported for file /152/attr/exec (pid: 5380 comm: kworker/0:3) [ 364.774595][ T11] IPVS: starting estimator thread 0... [ 364.856320][ T6752] netlink: 132 bytes leftover after parsing attributes in process `syz.0.286'. [ 364.867421][ T6749] IPVS: using max 192 ests per chain, 9600 per kthread [ 365.492357][ T41] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 365.690875][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 365.702532][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.765050][ T41] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 365.775154][ T41] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 365.783825][ T41] usb 2-1: Manufacturer: syz [ 365.854938][ T41] usb 2-1: config 0 descriptor?? [ 365.869428][ T41] hub 2-1:0.0: USB hub found [ 366.159528][ T41] hub 2-1:0.0: 1 port detected [ 366.449459][ T6770] can0: slcan on ptm0. [ 366.675384][ T41] usb 2-1: USB disconnect, device number 8 [ 366.708392][ T6770] can0 (unregistered): slcan off ptm0. [ 366.752778][ T6770] sp0: Synchronizing with TNC [ 370.131261][ T6809] loop4: detected capacity change from 0 to 1024 [ 370.194954][ T6809] ======================================================= [ 370.194954][ T6809] WARNING: The mand mount option has been deprecated and [ 370.194954][ T6809] and is ignored by this kernel. Remove the mand [ 370.194954][ T6809] option from the mount to silence this warning. [ 370.194954][ T6809] ======================================================= [ 370.233517][ T6809] EXT4-fs: Ignoring removed nobh option [ 370.239439][ T6809] EXT4-fs: inline encryption not supported [ 370.309137][ T6809] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.312: bad orphan inode 32767 [ 370.357907][ T6809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.775342][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.455859][ T6823] input: syz0 as /devices/virtual/input/input10 [ 374.117800][ T41] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 374.312045][ T41] usb 3-1: Using ep0 maxpacket: 32 [ 374.352167][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.363909][ T41] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 374.380403][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.426435][ T41] usb 3-1: config 0 descriptor?? [ 375.179104][ T41] usb 3-1: USB disconnect, device number 12 [ 375.244516][ T5858] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 375.432308][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 375.490095][ T5858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.500975][ T5858] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 375.512347][ T5858] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.595535][ T5858] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.605277][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.614221][ T5858] usb 4-1: Product: syz [ 375.618654][ T5858] usb 4-1: Manufacturer: syz [ 375.623651][ T5858] usb 4-1: SerialNumber: syz [ 375.744695][ T6871] binder: 6870:6871 ioctl c0306201 0 returned -14 [ 376.585442][ T5858] usb 4-1: USB disconnect, device number 9 [ 376.766263][ T6498] udevd[6498]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.843952][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 378.198714][ T6897] loop3: detected capacity change from 0 to 1024 [ 378.400489][ T5801] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 378.409333][ T5801] Bluetooth: hci1: Injecting HCI hardware error event [ 378.479647][ T6897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.493847][ T6897] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.733259][ T6897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.166942][ T6908] binder: 6907:6908 ioctl c0306201 0 returned -14 [ 380.250864][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 380.252073][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 380.257502][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 380.349473][ T5802] Bluetooth: hci1: hardware error 0x00 [ 380.510369][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 380.519846][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 381.642320][ T41] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 381.835192][ T41] usb 3-1: Using ep0 maxpacket: 32 [ 381.888215][ T41] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 381.897907][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.988357][ T41] usb 3-1: config 0 descriptor?? [ 382.076941][ T41] gspca_main: sunplus-2.14.0 probing 041e:400b [ 382.392286][ T5802] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 382.904320][ T41] gspca_sunplus: reg_w_riv err -71 [ 382.910021][ T41] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 382.973352][ T41] usb 3-1: USB disconnect, device number 13 [ 382.980971][ T6951] tun0: tun_chr_ioctl cmd 1074025675 [ 382.986836][ T6951] tun0: persist enabled [ 384.326483][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 385.294397][ T6976] loop4: detected capacity change from 0 to 1024 [ 385.565764][ T6979] loop3: detected capacity change from 0 to 1024 [ 385.754803][ T6979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.861324][ T6973] sctp: failed to load transform for md5: -2 [ 385.917613][ T12] hfsplus: b-tree write err: -5, ino 4 [ 386.496208][ T5810] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 386.544018][ T5810] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 386.579221][ T6992] process 'syz.1.386' launched './file0' with NULL argv: empty string added [ 386.591195][ T5810] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 386.664023][ T5810] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 386.743127][ T4265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 386.766243][ T5810] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 386.798799][ T5810] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 386.825349][ T5810] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 386.870246][ T5810] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 386.903862][ T6994] netlink: 'syz.0.388': attribute type 6 has an invalid length. [ 386.974159][ T5810] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 387.015796][ T5810] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 387.594236][ T7002] netlink: 64 bytes leftover after parsing attributes in process `syz.1.392'. [ 389.000700][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.397'. [ 389.441454][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.559237][ T7020] loop4: detected capacity change from 0 to 128 [ 389.758343][ T30] audit: type=1800 audit(1750488032.189:15): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.400" name="file1" dev="loop4" ino=1048601 res=0 errno=0 [ 389.831097][ T7022] netlink: 68 bytes leftover after parsing attributes in process `syz.1.401'. [ 391.416061][ T7031] loop2: detected capacity change from 0 to 256 [ 391.566062][ T30] audit: type=1804 audit(1750488033.999:16): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.408" name="/newroot/73/file0/file0" dev="loop2" ino=1048602 res=1 errno=0 [ 392.373811][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.393364][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.406074][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.424120][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.446055][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.102508][ T7041] chnl_net:caif_netlink_parms(): no params data found [ 394.562679][ T5802] Bluetooth: hci3: command tx timeout [ 395.651168][ T11] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 395.865306][ T7041] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.873109][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.880986][ T7041] bridge_slave_0: entered allmulticast mode [ 395.891165][ T7041] bridge_slave_0: entered promiscuous mode [ 395.917265][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.928154][ T11] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 395.939474][ T11] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.023368][ T7041] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.031020][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.039492][ T7041] bridge_slave_1: entered allmulticast mode [ 396.049505][ T11] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.050048][ T7041] bridge_slave_1: entered promiscuous mode [ 396.063913][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.064054][ T11] usb 2-1: Product: syz [ 396.064157][ T11] usb 2-1: Manufacturer: syz [ 396.064262][ T11] usb 2-1: SerialNumber: syz [ 396.232736][ T5380] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 396.498467][ T5380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.509191][ T5380] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 396.518817][ T5380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.519238][ T7041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.554689][ T11] usb 2-1: cannot find UAC_HEADER [ 396.560881][ T11] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 396.636787][ T5380] usb 1-1: config 0 descriptor?? [ 396.654041][ T5802] Bluetooth: hci3: command tx timeout [ 396.659995][ T7041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.694297][ T11] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.703224][ T11] usb 2-1: MIDIStreaming interface descriptor not found [ 396.891501][ T11] usb 2-1: USB disconnect, device number 9 [ 397.147851][ T5380] dragonrise 0003:0079:0006.0006: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 397.162482][ T5380] dragonrise 0003:0079:0006.0006: no inputs found [ 397.169212][ T5380] dragonrise 0003:0079:0006.0006: force feedback init failed [ 397.402291][ T5860] usb 1-1: USB disconnect, device number 7 [ 397.474570][ T7041] team0: Port device team_slave_0 added [ 397.628087][ T7041] team0: Port device team_slave_1 added [ 397.775962][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.931353][ T7091] fido_id[7091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 398.069378][ T7041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.076767][ T7041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.109505][ T7041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.199346][ T7095] ===================================================== [ 398.215019][ T7095] BUG: KMSAN: uninit-value in sctp_inq_pop+0x14dc/0x19e0 [ 398.225114][ T7095] sctp_inq_pop+0x14dc/0x19e0 [ 398.230069][ T7095] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 398.235498][ T7095] sctp_inq_push+0x2a3/0x350 [ 398.240355][ T7095] sctp_backlog_rcv+0x3c7/0xda0 [ 398.245646][ T7095] sk_backlog_rcv+0x13f/0x420 [ 398.250590][ T7095] __release_sock+0x1d3/0x330 [ 398.255775][ T7095] release_sock+0x6b/0x270 [ 398.260469][ T7095] sctp_wait_for_connect+0x458/0x820 [ 398.266642][ T7095] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 398.272411][ T7095] sctp_sendmsg+0x3910/0x49f0 [ 398.277326][ T7095] inet_sendmsg+0x26c/0x2a0 [ 398.282306][ T7095] __sock_sendmsg+0x278/0x3d0 [ 398.287270][ T7095] __sys_sendto+0x593/0x720 [ 398.292387][ T7095] __ia32_sys_sendto+0x12f/0x200 [ 398.297562][ T7095] ia32_sys_call+0x1397/0x42c0 [ 398.302737][ T7095] __do_fast_syscall_32+0xb0/0x150 [ 398.314604][ T7095] do_fast_syscall_32+0x38/0x80 [ 398.319713][ T7095] do_SYSENTER_32+0x1f/0x30 [ 398.328384][ T7095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.335312][ T7095] [ 398.337793][ T7095] Uninit was stored to memory at: [ 398.343286][ T7095] sctp_inq_pop+0x144a/0x19e0 [ 398.348213][ T7095] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 398.353542][ T7095] sctp_inq_push+0x2a3/0x350 [ 398.358392][ T7095] sctp_backlog_rcv+0x3c7/0xda0 [ 398.363762][ T7095] sk_backlog_rcv+0x13f/0x420 [ 398.368706][ T7095] __release_sock+0x1d3/0x330 [ 398.373781][ T7095] release_sock+0x6b/0x270 [ 398.378475][ T7095] sctp_wait_for_connect+0x458/0x820 [ 398.384974][ T7095] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 398.390599][ T7095] sctp_sendmsg+0x3910/0x49f0 [ 398.395723][ T7095] inet_sendmsg+0x26c/0x2a0 [ 398.400464][ T7095] __sock_sendmsg+0x278/0x3d0 [ 398.405570][ T7095] __sys_sendto+0x593/0x720 [ 398.417204][ T7095] __ia32_sys_sendto+0x12f/0x200 [ 398.425032][ T7095] ia32_sys_call+0x1397/0x42c0 [ 398.430025][ T7095] __do_fast_syscall_32+0xb0/0x150 [ 398.435517][ T7095] do_fast_syscall_32+0x38/0x80 [ 398.440632][ T7095] do_SYSENTER_32+0x1f/0x30 [ 398.445518][ T7095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.452336][ T7095] [ 398.454806][ T7095] Uninit was created at: [ 398.459347][ T7095] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 398.466291][ T7095] kmalloc_reserve+0x22f/0x4b0 [ 398.471284][ T7095] __alloc_skb+0x347/0x7d0 [ 398.476112][ T7095] sctp_packet_transmit+0x18a1/0x46d0 [ 398.481891][ T7095] sctp_outq_flush+0x1c7d/0x67c0 [ 398.487091][ T7095] sctp_outq_uncork+0x9e/0xc0 [ 398.492177][ T7095] sctp_do_sm+0x8c8e/0x9720 [ 398.496956][ T7095] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 398.502298][ T7095] sctp_inq_push+0x2a3/0x350 [ 398.507137][ T7095] sctp_backlog_rcv+0x3c7/0xda0 [ 398.519455][ T7095] sk_backlog_rcv+0x13f/0x420 [ 398.526520][ T7095] __release_sock+0x1d3/0x330 [ 398.531464][ T7095] release_sock+0x6b/0x270 [ 398.536260][ T7095] sctp_wait_for_connect+0x458/0x820 [ 398.542053][ T7095] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 398.547679][ T7095] sctp_sendmsg+0x3910/0x49f0 [ 398.552761][ T7095] inet_sendmsg+0x26c/0x2a0 [ 398.557490][ T7095] __sock_sendmsg+0x278/0x3d0 [ 398.562599][ T7095] __sys_sendto+0x593/0x720 [ 398.567434][ T7095] __ia32_sys_sendto+0x12f/0x200 [ 398.572744][ T7095] ia32_sys_call+0x1397/0x42c0 [ 398.577728][ T7095] __do_fast_syscall_32+0xb0/0x150 [ 398.583230][ T7095] do_fast_syscall_32+0x38/0x80 [ 398.588320][ T7095] do_SYSENTER_32+0x1f/0x30 [ 398.593178][ T7095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 398.599774][ T7095] [ 398.602521][ T7095] CPU: 1 UID: 0 PID: 7095 Comm: syz.1.430 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 398.621312][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.674590][ T7095] ===================================================== [ 398.703798][ T7095] Disabling lock debugging due to kernel taint [ 398.710157][ T7095] Kernel panic - not syncing: kmsan.panic set ... [ 398.716807][ T7095] CPU: 1 UID: 0 PID: 7095 Comm: syz.1.430 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 398.730662][ T7095] Tainted: [B]=BAD_PAGE [ 398.734974][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.745244][ T7095] Call Trace: [ 398.748671][ T7095] [ 398.751739][ T7095] __dump_stack+0x26/0x30 [ 398.756338][ T7095] dump_stack_lvl+0x53/0x270 [ 398.761155][ T7095] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 398.767227][ T7095] dump_stack+0x1e/0x25 [ 398.771600][ T7095] panic+0x4bd/0xd50 [ 398.775878][ T7095] kmsan_report+0x31c/0x320 [ 398.780623][ T7095] ? __msan_warning+0x1b/0x30 [ 398.785520][ T7095] ? sctp_inq_pop+0x14dc/0x19e0 [ 398.790596][ T7095] ? sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 398.795937][ T7095] ? sctp_inq_push+0x2a3/0x350 [ 398.800924][ T7095] ? sctp_backlog_rcv+0x3c7/0xda0 [ 398.806197][ T7095] ? sk_backlog_rcv+0x13f/0x420 [ 398.811292][ T7095] ? __release_sock+0x1d3/0x330 [ 398.816373][ T7095] ? release_sock+0x6b/0x270 [ 398.821222][ T7095] ? sctp_wait_for_connect+0x458/0x820 [ 398.826915][ T7095] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 398.832683][ T7095] ? sctp_sendmsg+0x3910/0x49f0 [ 398.837740][ T7095] ? inet_sendmsg+0x26c/0x2a0 [ 398.842615][ T7095] ? __sock_sendmsg+0x278/0x3d0 [ 398.847687][ T7095] ? __sys_sendto+0x593/0x720 [ 398.852540][ T7095] ? __ia32_sys_sendto+0x12f/0x200 [ 398.857875][ T7095] ? ia32_sys_call+0x1397/0x42c0 [ 398.862999][ T7095] ? __do_fast_syscall_32+0xb0/0x150 [ 398.868499][ T7095] ? do_fast_syscall_32+0x38/0x80 [ 398.873729][ T7095] ? do_SYSENTER_32+0x1f/0x30 [ 398.878613][ T7095] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.885356][ T7095] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.892113][ T7095] ? kmsan_get_metadata+0xfb/0x160 [ 398.897477][ T7095] ? kmsan_get_metadata+0xfb/0x160 [ 398.902834][ T7095] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 398.909410][ T7095] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 398.915711][ T7095] ? kmsan_get_metadata+0xfb/0x160 [ 398.921081][ T7095] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 398.927212][ T7095] ? kmsan_get_metadata+0xfb/0x160 [ 398.932630][ T7095] __msan_warning+0x1b/0x30 [ 398.937389][ T7095] sctp_inq_pop+0x14dc/0x19e0 [ 398.942342][ T7095] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 398.947533][ T7095] ? kmsan_get_metadata+0xfb/0x160 [ 398.952920][ T7095] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 398.959095][ T7095] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 398.964832][ T7095] sctp_inq_push+0x2a3/0x350 [ 398.969677][ T7095] sctp_backlog_rcv+0x3c7/0xda0 [ 398.974766][ T7095] ? kmsan_get_metadata+0xfb/0x160 [ 398.980156][ T7095] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 398.985777][ T7095] sk_backlog_rcv+0x13f/0x420 [ 398.990711][ T7095] __release_sock+0x1d3/0x330 [ 398.995632][ T7095] release_sock+0x6b/0x270 [ 399.000472][ T7095] sctp_wait_for_connect+0x458/0x820 [ 399.005988][ T7095] ? __pfx_autoremove_wake_function+0x10/0x10 [ 399.012343][ T7095] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 399.017944][ T7095] ? kmsan_get_metadata+0xfb/0x160 [ 399.023320][ T7095] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.029465][ T7095] sctp_sendmsg+0x3910/0x49f0 [ 399.034443][ T7095] ? kmsan_internal_set_shadow_origin+0x10/0x110 [ 399.041117][ T7095] ? __pfx_sctp_sendmsg+0x10/0x10 [ 399.046380][ T7095] inet_sendmsg+0x26c/0x2a0 [ 399.051308][ T7095] __sock_sendmsg+0x278/0x3d0 [ 399.056256][ T7095] __sys_sendto+0x593/0x720 [ 399.060975][ T7095] ? do_futex+0x3a1/0x480 [ 399.065546][ T7095] ? kmsan_get_metadata+0xfb/0x160 [ 399.070914][ T7095] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.077014][ T7095] __ia32_sys_sendto+0x12f/0x200 [ 399.082179][ T7095] ia32_sys_call+0x1397/0x42c0 [ 399.087139][ T7095] __do_fast_syscall_32+0xb0/0x150 [ 399.092469][ T7095] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 399.098409][ T7095] do_fast_syscall_32+0x38/0x80 [ 399.103468][ T7095] do_SYSENTER_32+0x1f/0x30 [ 399.108174][ T7095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 399.114760][ T7095] RIP: 0023:0xf7f93539 [ 399.118989][ T7095] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 399.138833][ T7095] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 399.147483][ T7095] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 399.155626][ T7095] RDX: 000000000000fee4 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 399.163767][ T7095] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 399.171899][ T7095] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 399.180050][ T7095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 399.188236][ T7095] [ 399.191754][ T7095] Kernel Offset: disabled [ 399.196203][ T7095] Rebooting in 86400 seconds..