last executing test programs: 21m44.638877062s ago: executing program 32 (id=1243): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x14}}, 0x4008084) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) syz_io_uring_setup(0x15e2, &(0x7f0000000500)={0x0, 0x9c8, 0x8000, 0x0, 0x1d9}, 0x0, &(0x7f0000000380)=0x0) accept(0xffffffffffffffff, &(0x7f0000000600)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x0) syz_io_uring_submit(0x0, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0}) 21m43.334815759s ago: executing program 33 (id=1265): add_key$user(0x0, 0x0, &(0x7f0000000140)="00c2", 0x2, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000040)={'crc32c\x00'}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000440)=""/19, &(0x7f0000000240)=0x71) 19m56.90430371s ago: executing program 34 (id=1445): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0xa}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x9, 0x4) mkdir(0x0, 0x0) syz_open_procfs(r2, 0x0) getxattr(0x0, 0x0, &(0x7f0000000540)=""/88, 0x58) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000000) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000200)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 19m53.610625934s ago: executing program 35 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000002040), 0x288, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) r3 = fsopen(&(0x7f0000000200)='bpf\x00', 0x1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000140)='-', 0x1}]) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001540)='./file0/file0\x00', 0x8000, &(0x7f0000000300)={0x1, 0x0, 0xc0000, {r6}}, 0x20) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getsig(0x4202, r7, 0x1, &(0x7f0000000140)) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x105040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r9, {0x7}}, './file0\x00'}) close_range(r8, 0xffffffffffffffff, 0x0) 18m48.341744648s ago: executing program 36 (id=1568): setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x1}}) 18m48.241222908s ago: executing program 37 (id=1566): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) pipe(&(0x7f0000000080)) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r0, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[], 0x0) 18m46.633871395s ago: executing program 38 (id=1570): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x5, "90737f0000ffffffffffffffff1e277fffffeb"}) r3 = dup(r2) ioctl$TCSETAF(r3, 0x5408, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000649fb491}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 17m25.29874849s ago: executing program 39 (id=1727): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x182a, &(0x7f0000000080)={0x0, 0x3dd8, 0x800, 0x0, 0x3ffff, 0x0, r0}, &(0x7f0000010080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000010300)=[{0x0}], 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x60083, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e000085000000820000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000001c0)={{@host}, @any, 0x0, 0x0, 0x2449, 0x0, 0x2e5, 0x0, 0xfff}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_settings={0x4, 0x0, @te1=0x0}}) ioctl$sock_netdev_private(r8, 0x89f3, &(0x7f0000000000)) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f0000000380)={{@my=0x1}, 0x8199, 0x800000000000000, 0x1}) 17m18.960614818s ago: executing program 40 (id=1746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17m17.919361846s ago: executing program 41 (id=1748): syz_open_dev$cec(&(0x7f00000002c0), 0xffffffffffffffff, 0x210380) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x1000110d, 0x0, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_setup(0xaab, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="030000e603000000", @ANYRES32, @ANYRES32, @ANYBLOB="040000000500"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0x30}, 0xffffffff}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet6(0xa, 0x6, 0x0) 17m11.592148235s ago: executing program 42 (id=1759): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff"], 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 16m14.128100383s ago: executing program 43 (id=1865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x18000}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 16m10.733263357s ago: executing program 44 (id=1873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 16m6.52523175s ago: executing program 45 (id=1880): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000300)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x900, 0x90, [0x5]}}) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000040), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 14m21.774881803s ago: executing program 46 (id=2231): syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7f00, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40004) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r6, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) socket$nl_netfilter(0x10, 0x3, 0xc) 13m22.030821413s ago: executing program 3 (id=2375): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0xc01, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='R', 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) shutdown(r0, 0x2) 13m19.151834619s ago: executing program 3 (id=2381): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x2, 0x2000c001) 13m17.408390445s ago: executing program 3 (id=2389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x41040}, 0x80) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x259, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000840), 0x20042, 0x0) write$UHID_INPUT(r6, 0x0, 0x0) 13m15.743015352s ago: executing program 3 (id=2392): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 13m15.049892981s ago: executing program 3 (id=2396): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000012380)={0x2020}, 0x2020) 13m12.040003096s ago: executing program 3 (id=2406): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') setpgid(0x0, 0x0) setpgid(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 13m11.458711095s ago: executing program 47 (id=2406): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') setpgid(0x0, 0x0) setpgid(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 4m42.367679772s ago: executing program 8 (id=3693): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000020000000000000e030000edff000000005f5f2500"], 0x0, 0x2d, 0x0, 0x1, 0xc0dc, 0x0, @void, @value}, 0x28) prctl$PR_SET_MM(0x23, 0x2, &(0x7f000092e000/0x2000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3589], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) socket(0x2, 0x80805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r4 = epoll_create(0x101) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x10001, r5}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000000)={0x80000004}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 4m40.048097998s ago: executing program 8 (id=3699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) capset(0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x20000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000140)=ANY=[]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x40002, 0x0, 0x0}) socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000003800048034000180090001007866726d0000000024000280070003dd010000000500030001000000080002400000000108000140000000160900010073797a30000000000900020073797a3200004000050007", @ANYRESHEX=r2], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m38.737981165s ago: executing program 8 (id=3702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4m38.268740924s ago: executing program 8 (id=3703): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x8}}}, {{@ip={@loopback, @loopback, 0xff000000, 0xff, 'hsr0\x00', 'pimreg\x00', {}, {0xff}, 0x4, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000ac0)}], 0x1}}], 0x2, 0x2000c001) 4m37.261283322s ago: executing program 8 (id=3705): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x4}}, 0x9) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x21, r5, 0x202, 0x0) ptrace$cont(0x9, r5, 0x4, 0x6) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 4m36.17945314s ago: executing program 8 (id=3707): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) unshare(0x8040600) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x2c, &(0x7f0000000040)=""/29, &(0x7f0000000240)=0x1d) poll(0x0, 0x0, 0x9) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000080)={0x86d95cbd2c13e977, 0x480, 0x690, 0x960, 0xfffffff8, 0xf, 0x2, 0x2, {0x9, 0x40, 0x1}, {0x8, 0xfffffffd}, {0x9, 0xabd0, 0x1}, {0xcde2, 0x3, 0x1}, 0x1, 0x1, 0x4379, 0x5, 0x1, 0x1, 0x4, 0x0, 0x2, 0x6, 0x5, 0x41, 0x20, 0x100, 0x3, 0x4}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x3, 0x26, 0x20, @empty, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8000, 0x20, 0xff, 0x8}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) write$cgroup_subtree(r4, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5a, 0x8c, 0xf1, 0x10, 0xeb1, 0x7007, 0x202, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1c, 0x45}}]}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 4m20.539996302s ago: executing program 2 (id=3736): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000100)=""/222, 0x10) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x11) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xffffffffffffffff) 4m19.869983651s ago: executing program 48 (id=3707): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) unshare(0x8040600) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x2c, &(0x7f0000000040)=""/29, &(0x7f0000000240)=0x1d) poll(0x0, 0x0, 0x9) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000080)={0x86d95cbd2c13e977, 0x480, 0x690, 0x960, 0xfffffff8, 0xf, 0x2, 0x2, {0x9, 0x40, 0x1}, {0x8, 0xfffffffd}, {0x9, 0xabd0, 0x1}, {0xcde2, 0x3, 0x1}, 0x1, 0x1, 0x4379, 0x5, 0x1, 0x1, 0x4, 0x0, 0x2, 0x6, 0x5, 0x41, 0x20, 0x100, 0x3, 0x4}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x3, 0x26, 0x20, @empty, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8000, 0x20, 0xff, 0x8}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) write$cgroup_subtree(r4, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5a, 0x8c, 0xf1, 0x10, 0xeb1, 0x7007, 0x202, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1c, 0x45}}]}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 4m19.33074563s ago: executing program 2 (id=3740): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x4}}, 0x9) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x21, r5, 0x202, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 4m16.499446975s ago: executing program 2 (id=3744): socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) socket(0x29, 0x4, 0x7) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24006018}, 0x40044) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 4m14.515052731s ago: executing program 2 (id=3749): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 4m12.139645697s ago: executing program 2 (id=3754): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x8}}}, {{@ip={@loopback, @loopback, 0xff000000, 0xff, 'hsr0\x00', 'pimreg\x00', {}, {0xff}, 0x4, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, 0x0, 0x0, 0x2000c001) 4m7.745039979s ago: executing program 2 (id=3761): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x22020400) 4m7.039816027s ago: executing program 49 (id=3761): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x22020400) 3m48.723951174s ago: executing program 4 (id=3824): socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) socket(0x29, 0x4, 0x7) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, 0x0, 0x40044) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 3m47.707312672s ago: executing program 4 (id=3827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x3, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x7a6e, 0x1, 0x20000000002, 0x80000000, 0xe017, 0x80000000000000c0, 0xb2f, 0x0, 0x1, 0xf51], 0x0, 0x1341}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0xda) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m47.013711411s ago: executing program 4 (id=3828): syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x5}, &(0x7f0000000480), &(0x7f0000000500)) r2 = eventfd2(0x9, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x10, 0x20, 0x6, 0xf, {{0x2b, 0x4, 0x1, 0x3, 0xac, 0x66, 0x0, 0x4, 0x29, 0x0, @remote, @private=0xa010102, {[@noop, @timestamp_addr={0x44, 0x34, 0x7c, 0x1, 0x4, [{@local, 0xfdb}, {@multicast1, 0x83}, {@local, 0x3}, {@local, 0x6}, {@private=0xa010100, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xffff}]}, @timestamp_prespec={0x44, 0x34, 0x9c, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote}, {@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@multicast2, 0x400}, {@loopback, 0xffff}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xad, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x18}]}, @lsrr={0x83, 0x1b, 0x79, [@private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @multicast2, @broadcast]}]}}}}}) bind$can_j1939(r3, &(0x7f0000000580)={0x1d, r4, 0x1, {0x2, 0x1, 0x3}}, 0x18) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9c, 0xe, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x7f}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x0, 0x2, 0x4, 0x10, 0xef}, 0xd0, &(0x7f0000000780)={0x5, 0xf, 0xd0, 0x3, [@generic={0xa0, 0x10, 0x4, "6a88a1cef014c30eb3b2aba99b6b9c5e371edbf4cd805f4fd6a3a66c3f27793a7279b0635069f7df0c244d529768fb12fa7fd27ef24f5919c90e99138e5c80aa5c2741da0d29505853f544958f93162f090045310ff2d707ca35d9b74b489cd9914f1d5da74cd9b28b841b9e9a0e2a87d5f2a86a78ee11877713ca01ad33f250b90aaa43ede19fd9421653c14422dff3fdff8e4a1b08b3ba39d844637d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa3, 0x3, 0x5, 0x100, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x2, 0xf, 0x8, [0x0, 0x30, 0x3fff, 0x0, 0xc0c0]}]}, 0x3, [{0x86, &(0x7f0000000880)=@string={0x86, 0x3, "2f1103531f388ff03683c78e72fbc6351c0d7e8452814f0c8a2a60bb8026b82f93e476f140a703e7b1f3ec6b0e7c8ce8e43454680a0e75cb1677364244a3c88049caf905041d5432e8ad036106a67dfd4d5a768e85eda350fceb27072d4b5f0d205cd1aae823573433ee7887119a36a1dfd84476df0f39dd25cda67412435004241dfd6d"}}, {0xbd, &(0x7f0000000940)=@string={0xbd, 0x3, "2fdad8a2dd2ecbf034e6f99fcdb97c2bd8dd6eff082a483449e986400d4fca826e5b2ea89e6fce89b74bbb0ae566f644da56afc7302c20b468437e1c0943e42ad85c78f3ccd518dcdd2ab110627f115d46dc15dddee663058ebc5b3ab5a371fcc90eb110f088418566f664e2425fe0614e70d20360ce9b87061eeb2f0fb691ee136a549c06d9ef7ded35e80b05494ea6e88fda970da54753638d9e1b57479d90784fc0f48dfff80fdd5ac6bc4e42ee132aa0b2721b440a22f0d736"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x424}}]}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000140)=0x4) 3m43.601809485s ago: executing program 4 (id=3838): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 3m43.345411704s ago: executing program 4 (id=3840): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 3m41.966271972s ago: executing program 4 (id=3844): syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9c, 0xe, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x7f}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x0, 0x2, 0x4, 0x10, 0xef}, 0xd0, &(0x7f0000000780)={0x5, 0xf, 0xd0, 0x3, [@generic={0xa0, 0x10, 0x4, "6a88a1cef014c30eb3b2aba99b6b9c5e371edbf4cd805f4fd6a3a66c3f27793a7279b0635069f7df0c244d529768fb12fa7fd27ef24f5919c90e99138e5c80aa5c2741da0d29505853f544958f93162f090045310ff2d707ca35d9b74b489cd9914f1d5da74cd9b28b841b9e9a0e2a87d5f2a86a78ee11877713ca01ad33f250b90aaa43ede19fd9421653c14422dff3fdff8e4a1b08b3ba39d844637d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa3, 0x3, 0x5, 0x100, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x2, 0xf, 0x8, [0x0, 0x30, 0x3fff, 0x0, 0xc0c0]}]}, 0x3, [{0x86, &(0x7f0000000880)=@string={0x86, 0x3, "2f1103531f388ff03683c78e72fbc6351c0d7e8452814f0c8a2a60bb8026b82f93e476f140a703e7b1f3ec6b0e7c8ce8e43454680a0e75cb1677364244a3c88049caf905041d5432e8ad036106a67dfd4d5a768e85eda350fceb27072d4b5f0d205cd1aae823573433ee7887119a36a1dfd84476df0f39dd25cda67412435004241dfd6d"}}, {0xbd, &(0x7f0000000940)=@string={0xbd, 0x3, "2fdad8a2dd2ecbf034e6f99fcdb97c2bd8dd6eff082a483449e986400d4fca826e5b2ea89e6fce89b74bbb0ae566f644da56afc7302c20b468437e1c0943e42ad85c78f3ccd518dcdd2ab110627f115d46dc15dddee663058ebc5b3ab5a371fcc90eb110f088418566f664e2425fe0614e70d20360ce9b87061eeb2f0fb691ee136a549c06d9ef7ded35e80b05494ea6e88fda970da54753638d9e1b57479d90784fc0f48dfff80fdd5ac6bc4e42ee132aa0b2721b440a22f0d736"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x424}}]}) 3m41.249269821s ago: executing program 50 (id=3844): syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9c, 0xe, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x7f}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x0, 0x2, 0x4, 0x10, 0xef}, 0xd0, &(0x7f0000000780)={0x5, 0xf, 0xd0, 0x3, [@generic={0xa0, 0x10, 0x4, "6a88a1cef014c30eb3b2aba99b6b9c5e371edbf4cd805f4fd6a3a66c3f27793a7279b0635069f7df0c244d529768fb12fa7fd27ef24f5919c90e99138e5c80aa5c2741da0d29505853f544958f93162f090045310ff2d707ca35d9b74b489cd9914f1d5da74cd9b28b841b9e9a0e2a87d5f2a86a78ee11877713ca01ad33f250b90aaa43ede19fd9421653c14422dff3fdff8e4a1b08b3ba39d844637d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa3, 0x3, 0x5, 0x100, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x2, 0xf, 0x8, [0x0, 0x30, 0x3fff, 0x0, 0xc0c0]}]}, 0x3, [{0x86, &(0x7f0000000880)=@string={0x86, 0x3, "2f1103531f388ff03683c78e72fbc6351c0d7e8452814f0c8a2a60bb8026b82f93e476f140a703e7b1f3ec6b0e7c8ce8e43454680a0e75cb1677364244a3c88049caf905041d5432e8ad036106a67dfd4d5a768e85eda350fceb27072d4b5f0d205cd1aae823573433ee7887119a36a1dfd84476df0f39dd25cda67412435004241dfd6d"}}, {0xbd, &(0x7f0000000940)=@string={0xbd, 0x3, "2fdad8a2dd2ecbf034e6f99fcdb97c2bd8dd6eff082a483449e986400d4fca826e5b2ea89e6fce89b74bbb0ae566f644da56afc7302c20b468437e1c0943e42ad85c78f3ccd518dcdd2ab110627f115d46dc15dddee663058ebc5b3ab5a371fcc90eb110f088418566f664e2425fe0614e70d20360ce9b87061eeb2f0fb691ee136a549c06d9ef7ded35e80b05494ea6e88fda970da54753638d9e1b57479d90784fc0f48dfff80fdd5ac6bc4e42ee132aa0b2721b440a22f0d736"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x424}}]}) 2m48.890438226s ago: executing program 0 (id=4071): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000080000000500000005"], 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x3}) 2m47.595954213s ago: executing program 0 (id=4075): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x4, 0x10000}) 2m47.472798813s ago: executing program 0 (id=4077): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'veth1_to_team\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m47.249083673s ago: executing program 0 (id=4080): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 2m46.768348712s ago: executing program 0 (id=4082): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x6a, 0x3, 0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x39}]}}]}, 0x48}}, 0x0) 2m45.468004039s ago: executing program 0 (id=4092): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 2m45.178039829s ago: executing program 51 (id=4092): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 20.255756817s ago: executing program 6 (id=4816): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2b7d18090f00442c}, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19.915649906s ago: executing program 6 (id=4821): r0 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, 0x0) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425", 0x29, 0x0, 0x0, 0x0) 19.163205795s ago: executing program 6 (id=4828): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) close(r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000007}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 18.001195172s ago: executing program 6 (id=4837): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0600001304"], 0x7) 17.903334652s ago: executing program 6 (id=4840): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESHEX=0x0], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) 16.75842796s ago: executing program 6 (id=4852): r0 = socket(0x2, 0x3, 0x6) io_uring_enter(0xffffffffffffffff, 0xa3a, 0x0, 0x2, 0x0, 0xffffffffffffffb3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0xc, @local}, 0x10) 5.245738659s ago: executing program 5 (id=4932): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 4.518364278s ago: executing program 5 (id=4933): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000000) r1 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x20}, 0x20) 3.927847187s ago: executing program 9 (id=4938): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000940)=""/132, 0x84}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000002d40)=""/201, 0xc9}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40000000, 0x0) 3.535573956s ago: executing program 5 (id=4943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) capset(0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x20000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000140)=ANY=[]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x40002, 0x0, 0x0}) socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000003800048034000180090001007866726d0000000024000280070003dd010000000500030001000000080002400000000108000140000000160900010073797a30000000000900020073797a3200004000050007", @ANYRESHEX=r2], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.000707075s ago: executing program 5 (id=4944): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x4}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) 2.891876465s ago: executing program 9 (id=4945): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x82002, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/108, 0xffffffcd) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000300)=0xcde) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4400000000000000140003006d6163766c616e310000000000000000140012800c0001006d6163766c616e000400028028001a8020000a80050008000000000014000700"/78], 0x70}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$nl_route(r0, 0x0, 0x0) 2.330350154s ago: executing program 1 (id=4952): connect$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) 1.801037683s ago: executing program 1 (id=4955): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/131, 0x83}, 0x4}], 0x1, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.800370083s ago: executing program 5 (id=4956): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}}, &(0x7f00000002c0)=0x84) 1.696013043s ago: executing program 9 (id=4957): syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x5, 0xa, 0x0, @remote}, @mptcp=@ack={0x1e, 0x4, 0xc4}]}}}}}}}}, 0x0) 1.648955853s ago: executing program 1 (id=4958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 1.591721203s ago: executing program 9 (id=4960): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) 1.504162653s ago: executing program 5 (id=4961): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) syz_usb_connect(0x5, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002c326208f00307020100010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x2) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007100000000000000029"], 0x30}, 0x0) 1.416092522s ago: executing program 9 (id=4963): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000000) r1 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x20}, 0x20) 1.338283932s ago: executing program 1 (id=4965): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0xa0, 0x5, 0x0, 0x22, 0x7, 0xc4, 0x40, 0x1, 0x0, 0x7d, 0x4, 0xba, 0x7f, 0x9, 0xf4, 0x23}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6ac, 0xfffffffffffffffc, 0x10001, 0x0, 0xfffffffffffffffc, 0x6c, 0x5, 0x7, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4310}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.253571902s ago: executing program 7 (id=4966): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_META_DREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.253085812s ago: executing program 9 (id=4967): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) close(r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000007}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 899.957161ms ago: executing program 7 (id=4968): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, &(0x7f0000000080)={r2}, &(0x7f0000000480)=0x10) 863.906821ms ago: executing program 1 (id=4969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) 852.162922ms ago: executing program 7 (id=4970): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}}, &(0x7f00000002c0)=0x84) 567.956921ms ago: executing program 7 (id=4971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000040000000100000a58000000060a0b040000000000000000020000032c000480280001800e000100636f6e6e6c696d697400000014000280080002400000001008000140000000010900010073797a30000000000900020073797a32"], 0x80}}, 0x4010) 178.80545ms ago: executing program 7 (id=4972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) 147.98068ms ago: executing program 1 (id=4973): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802110000000802110000015050505050500000", @ANYRES8=r0], 0x40}}, 0x0) 0s ago: executing program 7 (id=4974): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): expected cc 0x0c23 length: 249 > 4 [ 1635.778498][T10932] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1635.786128][T10932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1635.871299][T17006] fuse: Bad value for 'fd' [ 1637.086644][ T4761] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.991870][ T4761] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.184739][ T4761] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.406723][ T4761] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.628945][T17003] chnl_net:caif_netlink_parms(): no params data found [ 1645.551214][T17003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.563171][T17003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.590970][T17003] device bridge_slave_0 entered promiscuous mode [ 1645.635234][T17003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.662228][T17003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.693451][T17003] device bridge_slave_1 entered promiscuous mode [ 1645.913618][T17003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1645.926134][T17003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1646.788540][T15696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1646.822036][ T8175] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1646.831159][T15696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1646.839588][ T8175] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1646.847263][ T8175] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1646.854796][T15696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1646.875031][T10932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1646.885364][T10932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1646.893441][T10932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1646.903914][T10932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1646.905924][T17003] team0: Port device team_slave_0 added [ 1646.932175][T10932] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1646.939618][T10932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1647.026901][T17003] team0: Port device team_slave_1 added [ 1647.782299][T17003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.789519][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.815530][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.834839][T17003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.601324][T17003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.613153][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.664259][T17003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.792757][T17003] device hsr_slave_0 entered promiscuous mode [ 1648.794246][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3772'. [ 1648.821240][T17003] device hsr_slave_1 entered promiscuous mode [ 1648.828996][T17003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1648.835047][T17095] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3772'. [ 1648.847969][T17003] Cannot create hsr debugfs directory [ 1648.904883][T17099] use of bytesused == 0 is deprecated and will be removed in the future, [ 1648.916552][T17099] use the actual size instead. [ 1649.109808][T10932] Bluetooth: hci0: command 0x0409 tx timeout [ 1649.225843][ T14] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1649.345925][ T4761] device hsr_slave_0 left promiscuous mode [ 1649.352446][ T4761] device hsr_slave_1 left promiscuous mode [ 1649.364870][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.372603][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.387459][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.394911][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.403027][ T4761] device bridge_slave_1 left promiscuous mode [ 1649.409452][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.418174][ T4761] device bridge_slave_0 left promiscuous mode [ 1649.425279][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.432703][ T14] usb 10-1: Using ep0 maxpacket: 8 [ 1649.443143][ T14] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1649.456354][ T14] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1649.468744][ T14] usb 10-1: can't read configurations, error -71 [ 1649.478636][ T4761] device veth1_macvtap left promiscuous mode [ 1649.484814][ T4761] device veth0_macvtap left promiscuous mode [ 1649.490975][ T4761] device veth1_vlan left promiscuous mode [ 1649.497038][ T4761] device veth0_vlan left promiscuous mode [ 1649.601457][ T4239] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1650.501963][ T4239] usb 5-1: Using ep0 maxpacket: 32 [ 1650.510192][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.521237][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.531116][ T4239] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1650.540861][ T4239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.562446][ T4239] usb 5-1: config 0 descriptor?? [ 1650.578537][ T4239] hub 5-1:0.0: USB hub found [ 1650.809975][ T4239] hub 5-1:0.0: 1 port detected [ 1652.081651][T10932] Bluetooth: hci0: command 0x041b tx timeout [ 1652.115525][ T4239] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 1652.129341][ T4239] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 1652.566192][ T4239] usbhid 5-1:0.0: can't add hid device: -71 [ 1652.572256][ T4239] usbhid: probe of 5-1:0.0 failed with error -71 [ 1652.800225][ T4239] usb 5-1: USB disconnect, device number 44 [ 1652.935894][ T4761] team0 (unregistering): Port device team_slave_1 removed [ 1652.936852][ T4720] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1653.007955][ T4761] team0 (unregistering): Port device team_slave_0 removed [ 1653.084280][ T4761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.157401][ T4720] usb 10-1: Using ep0 maxpacket: 8 [ 1653.163293][ T4761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.163834][ T4720] usb 10-1: no configurations [ 1653.177024][ T4720] usb 10-1: can't read configurations, error -22 [ 1653.406863][ T4720] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1653.599353][ T4720] usb 10-1: Using ep0 maxpacket: 8 [ 1653.605383][ T4720] usb 10-1: no configurations [ 1653.616655][ T4720] usb 10-1: can't read configurations, error -22 [ 1653.623536][ T4720] usb usb10-port1: attempt power cycle [ 1653.705870][ T4239] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1653.924659][ T4239] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.935192][ T4239] usb 5-1: config 0 has no interfaces? [ 1653.956883][ T4239] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1653.966107][ T4239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.996735][ T4239] usb 5-1: config 0 descriptor?? [ 1654.058959][ T4720] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1654.092066][ T4720] usb 10-1: Using ep0 maxpacket: 8 [ 1654.113562][ T4720] usb 10-1: no configurations [ 1654.118365][ T4720] usb 10-1: can't read configurations, error -22 [ 1654.179547][ T4761] bond0 (unregistering): Released all slaves [ 1654.224071][T17136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.234951][T17136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.248845][T13665] usb 5-1: USB disconnect, device number 45 [ 1654.272854][T10932] Bluetooth: hci0: command 0x040f tx timeout [ 1654.338292][ T4720] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1654.424122][ T4720] usb 10-1: Using ep0 maxpacket: 8 [ 1654.452481][ T4720] usb 10-1: no configurations [ 1654.486085][ T4720] usb 10-1: can't read configurations, error -22 [ 1654.518378][ T4720] usb usb10-port1: unable to enumerate USB device [ 1655.045489][T17080] chnl_net:caif_netlink_parms(): no params data found [ 1656.503375][ T8175] Bluetooth: hci0: command 0x0419 tx timeout [ 1656.984453][T17080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.998967][T17080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.172159][T17080] device bridge_slave_0 entered promiscuous mode [ 1657.203275][T17080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.210534][T17080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.230047][T17080] device bridge_slave_1 entered promiscuous mode [ 1657.330039][T17003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1657.342688][T17080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.363134][T17003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1657.383421][T17080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.402576][T17003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1657.429278][T17003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1657.497063][T17080] team0: Port device team_slave_0 added [ 1657.525484][T17080] team0: Port device team_slave_1 added [ 1657.601249][T17080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.610937][T17080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.637938][T17080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.686063][T17080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.704510][T17080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.730769][ T9409] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1657.779355][T17080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1657.846399][T17003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1657.877350][T17080] device hsr_slave_0 entered promiscuous mode [ 1658.044977][T17080] device hsr_slave_1 entered promiscuous mode [ 1658.091816][T17080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1658.135885][T17080] Cannot create hsr debugfs directory [ 1658.396548][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1658.447212][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1658.628866][T17003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.735346][ T9409] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.749671][ T4761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.760699][ T9409] usb 10-1: config 0 has no interfaces? [ 1658.766518][ T9409] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1658.777350][ T9409] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.847091][ T9409] usb 10-1: config 0 descriptor?? [ 1658.848922][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1658.888085][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1658.919639][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.926911][ T9870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.970899][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1659.007507][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1659.035700][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.042954][ T9870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1659.084110][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1659.114231][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1659.275024][ T4761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.323160][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1659.372438][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1659.393411][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1659.405867][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1659.474158][ T4761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.498531][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1659.511356][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1659.520058][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1659.528898][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1659.545954][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1659.554958][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1659.562208][T17172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.571950][T17172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.582948][T16042] usb 10-1: USB disconnect, device number 46 [ 1659.594116][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1659.625997][ T4761] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.800527][T13665] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1659.904392][T17195] fuse: Bad value for 'rootmode' [ 1660.005619][T13665] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1660.030911][T13665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.052658][T13665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.063319][T13665] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1660.083358][T13665] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1660.092802][T13665] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1660.102853][T13665] usb 5-1: Manufacturer: syz [ 1660.109478][T13665] usb 5-1: config 0 descriptor?? [ 1660.116852][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1660.142926][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1660.231518][T17003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1660.330939][T10147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1660.341652][T10147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1660.425132][T17003] device veth0_vlan entered promiscuous mode [ 1660.434995][T10147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1660.449955][T10147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1660.470335][T10147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1660.495663][T10147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1660.520050][T17003] device veth1_vlan entered promiscuous mode [ 1660.570430][T13665] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 1660.582446][T13665] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 1660.605874][T13665] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1660.639046][T17080] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1660.661277][T17003] device veth0_macvtap entered promiscuous mode [ 1660.671141][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1660.680391][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1660.690157][T17080] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1660.738490][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1660.749707][T17080] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1660.767722][T17003] device veth1_macvtap entered promiscuous mode [ 1660.822818][T17080] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1660.856525][T17003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.873143][T17003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.889166][T17003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.901841][T17003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.913527][T17003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.942375][T17003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.952522][T17003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1660.973004][T17003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.995321][T17003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1661.610125][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1661.619442][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1661.628895][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1661.656643][T17003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.667961][T17003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.678558][T17003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.712124][T17003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.728544][T17219] fuse: Bad value for 'rootmode' [ 1661.734510][T17003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.752983][T17003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.766466][T17003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.790107][T17003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.814305][T17003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1661.896624][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1661.906839][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1661.932474][T17003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.950826][T17003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.962346][T17003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.971452][T17003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.325109][T17080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.388826][ T4761] device hsr_slave_0 left promiscuous mode [ 1662.395851][ T4761] device hsr_slave_1 left promiscuous mode [ 1662.404251][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1662.412575][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1662.421877][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1662.431219][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1662.440439][ T4761] device bridge_slave_1 left promiscuous mode [ 1662.447193][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.456597][ T4761] device bridge_slave_0 left promiscuous mode [ 1662.463498][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.520808][ T4761] device veth1_macvtap left promiscuous mode [ 1662.536417][ T4761] device veth0_macvtap left promiscuous mode [ 1662.544275][ T4761] device veth1_vlan left promiscuous mode [ 1662.551201][ T4761] device veth0_vlan left promiscuous mode [ 1663.724200][ T9409] usb 5-1: USB disconnect, device number 46 [ 1663.762923][T17242] fuse: Bad value for 'rootmode' [ 1664.545566][ T4761] team0 (unregistering): Port device team_slave_1 removed [ 1664.629490][ T4761] team0 (unregistering): Port device team_slave_0 removed [ 1664.690197][ T4761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.759302][ T4761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1664.879927][ T9409] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1665.089340][ T9409] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.113539][ T9409] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1665.125079][ T9409] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1665.138086][ T9409] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1665.147192][ T9409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.202174][ T9409] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1665.414489][T17251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.433020][T17251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.706929][ T4761] bond0 (unregistering): Released all slaves [ 1665.816334][T10147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1665.825175][T10147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1665.839748][T17080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1665.850368][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3832'. [ 1665.886564][T17260] device bridge0 entered promiscuous mode [ 1665.893024][T17260] device macvtap1 entered promiscuous mode [ 1665.928706][T17261] device bridge0 left promiscuous mode [ 1665.951133][ T4649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.961391][ T4649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.020364][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1666.045241][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1666.081889][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1666.090852][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.098075][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.107843][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1666.289121][T16042] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1666.304093][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1666.314385][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1666.323374][T14958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.330516][T14958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.394967][T17267] fuse: Bad value for 'fd' [ 1667.068152][T17080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1667.081821][T17080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1667.115846][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1667.148504][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1667.157335][T16042] usb 10-1: Using ep0 maxpacket: 8 [ 1667.167425][T16042] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.198919][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1667.213943][T17270] fuse: Unknown parameter 'use00000000000000000000' [ 1667.217930][T16042] usb 10-1: config 0 has no interfaces? [ 1667.229172][T16042] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1667.241424][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1667.250325][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1667.270019][T16042] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.283302][T16042] usb 10-1: Product: syz [ 1667.287683][T16042] usb 10-1: Manufacturer: syz [ 1667.299149][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1667.307258][T16042] usb 10-1: SerialNumber: syz [ 1667.318981][T16042] usb 10-1: config 0 descriptor?? [ 1667.337311][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1667.357065][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1667.397866][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1667.422586][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1667.432072][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1667.441097][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.441840][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1667.457267][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.500574][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1667.932363][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1667.945599][ T4720] usb 5-1: USB disconnect, device number 47 [ 1667.956954][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1668.001928][T17080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1668.869201][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1668.879234][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1668.947649][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1668.957323][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1668.968737][T17080] device veth0_vlan entered promiscuous mode [ 1668.977541][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1668.996287][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1669.024735][T17080] device veth1_vlan entered promiscuous mode [ 1669.077668][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1669.102293][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1669.110598][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1669.127777][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1669.140846][T17080] device veth0_macvtap entered promiscuous mode [ 1669.160539][T17080] device veth1_macvtap entered promiscuous mode [ 1669.217220][T17305] fuse: Bad value for 'fd' [ 1670.011273][ T4649] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.014999][ T14] usb 10-1: USB disconnect, device number 47 [ 1670.043462][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.078790][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.124841][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.135455][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.145536][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.156631][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.166746][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.177310][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.228594][T17080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1670.236878][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1670.254169][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1670.266748][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1670.275658][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1670.317639][ T4649] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.371017][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1670.399146][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.426305][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1670.468995][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.478891][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1670.524832][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.558552][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1670.578706][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.603283][T17080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1670.640678][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1670.665210][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1670.727429][ T4649] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.753448][T17080] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.768473][T17080] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.788263][T17080] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.808454][T17080] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.961058][T10932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1670.972167][ T4649] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.000663][T10932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1671.010418][T10932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1671.019832][T10932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1671.029936][T10932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1671.043134][T10932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1671.067872][ T22] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1671.126312][T10147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.135748][T10147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.171763][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1671.270838][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 1671.278623][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1671.282857][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.299575][ T22] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1671.315604][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.320718][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.336220][ T22] usb 2-1: config 0 descriptor?? [ 1671.377317][ T22] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1671.393209][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1671.622467][T17332] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3762'. [ 1671.845787][T17336] fuse: Unknown parameter '0x0000000000000006' [ 1672.611235][T17323] chnl_net:caif_netlink_parms(): no params data found [ 1673.121271][T17323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.161111][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.182965][T17323] device bridge_slave_0 entered promiscuous mode [ 1673.227370][ T8175] Bluetooth: hci1: command 0x0409 tx timeout [ 1673.269016][T17348] XFS (nullb0): Invalid superblock magic number [ 1673.300596][T17323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.320799][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.420671][T17323] device bridge_slave_1 entered promiscuous mode [ 1673.502855][T17353] kvm: pic: level sensitive irq not supported [ 1673.503207][T17353] kvm: pic: non byte read [ 1673.558339][T17353] kvm: pic: level sensitive irq not supported [ 1673.558409][T17353] kvm: pic: non byte read [ 1673.583003][T17353] kvm: pic: level sensitive irq not supported [ 1673.583076][T17353] kvm: pic: non byte read [ 1673.622009][T17353] kvm: pic: level sensitive irq not supported [ 1673.622082][T17353] kvm: pic: non byte read [ 1673.636390][T17323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.773629][T17323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.253642][ T9409] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1674.294862][T17323] team0: Port device team_slave_0 added [ 1674.334222][T17323] team0: Port device team_slave_1 added [ 1674.456642][ T9409] usb 6-1: Using ep0 maxpacket: 32 [ 1674.463752][ T7257] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1674.464017][ T9409] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1674.664798][ T9409] usb 6-1: config 0 has no interface number 0 [ 1674.721429][ T9409] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1674.732637][ T9409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.740881][ T9409] usb 6-1: Product: syz [ 1674.745600][ T9409] usb 6-1: Manufacturer: syz [ 1674.748265][ T7257] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.750212][ T9409] usb 6-1: SerialNumber: syz [ 1674.769238][ T9409] usb 6-1: config 0 descriptor?? [ 1674.778847][ T7257] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1674.799672][ T7257] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1674.821864][ T9409] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1674.829453][ T9409] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 1674.849054][ T7257] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1674.882650][ T7257] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.914080][ T7257] usb 10-1: invalid MIDI out EP 0 [ 1674.975512][ T7257] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1675.051861][ T9409] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1675.071177][T17323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.091023][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.174349][T17369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.183456][T17323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.224881][T17323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.239236][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.261390][T17369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.265188][ C0] vkms_vblank_simulate: vblank timer overrun [ 1675.280692][T17323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.336517][ T4649] device hsr_slave_0 left promiscuous mode [ 1675.441556][ T4649] device hsr_slave_1 left promiscuous mode [ 1675.450907][ T8175] Bluetooth: hci1: command 0x041b tx timeout [ 1675.552401][ T4649] device veth1_macvtap left promiscuous mode [ 1675.577341][ T4649] device veth0_macvtap left promiscuous mode [ 1675.604836][ T4649] device veth1_vlan left promiscuous mode [ 1675.629709][ T4649] device veth0_vlan left promiscuous mode [ 1675.856189][ T7257] usb 2-1: USB disconnect, device number 18 [ 1675.919987][ T9409] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 1675.934173][ T9409] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 1675.962189][ T9409] usb 6-1: USB disconnect, device number 3 [ 1675.975043][ T9409] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1676.445114][ T7257] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1676.623757][T17384] fuse: Unknown parameter '0x0000000000000006' [ 1677.448279][ T8137] usb 10-1: USB disconnect, device number 48 [ 1677.509037][ T7257] usb 2-1: Using ep0 maxpacket: 8 [ 1677.516750][ T7257] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1677.535617][ T7257] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1677.545791][ T7257] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1677.557126][ T7257] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1677.570823][ T7257] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1677.582497][ T7257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.675237][ T8175] Bluetooth: hci1: command 0x040f tx timeout [ 1677.818480][ T7257] usb 2-1: GET_CAPABILITIES returned 0 [ 1677.824521][ T7257] usbtmc 2-1:16.0: can't read capabilities [ 1678.056403][ T7257] usb 2-1: USB disconnect, device number 19 [ 1678.893438][ T14] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1679.029494][ T4649] bond0 (unregistering): Released all slaves [ 1679.110394][ T14] usb 10-1: Using ep0 maxpacket: 16 [ 1679.117676][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.128776][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.152293][T17388] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3867'. [ 1679.155380][ T14] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1679.170658][ T14] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.201915][ T14] usb 10-1: config 0 descriptor?? [ 1679.222018][T17323] device hsr_slave_0 entered promiscuous mode [ 1679.237046][T17323] device hsr_slave_1 entered promiscuous mode [ 1679.257038][ T9409] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1679.289791][T17323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1679.297423][T17323] Cannot create hsr debugfs directory [ 1679.523991][ T9409] usb 2-1: Using ep0 maxpacket: 8 [ 1679.534170][ T9409] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1679.556712][ T9409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.564780][ T9409] usb 2-1: Product: syz [ 1679.598769][ T9409] usb 2-1: Manufacturer: syz [ 1679.603437][ T9409] usb 2-1: SerialNumber: syz [ 1679.624349][ T9409] usb 2-1: config 0 descriptor?? [ 1679.775696][ T14] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 1679.783651][ T14] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 1679.790828][ T14] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 1679.798117][ T14] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 1679.805288][ T14] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 1679.814714][ T14] appleir 0003:05AC:8241.0007: No inputs registered, leaving [ 1679.836931][ T14] appleir 0003:05AC:8241.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 1679.926018][T17411] fuse: Unknown parameter '0x0000000000000007' [ 1679.951843][ T8175] Bluetooth: hci1: command 0x0419 tx timeout [ 1680.668189][ T9409] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1680.735865][T17323] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.750217][ T8137] usb 10-1: USB disconnect, device number 49 [ 1680.895074][T17323] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.001527][T17323] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.012659][ T9413] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1681.140794][T17323] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.237432][ T9413] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.256981][ T9413] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1681.275327][ T9413] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1681.293226][T17323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1681.297377][ T9413] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1681.317364][ T9413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.327508][T17323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1681.334821][ T9413] usb 6-1: invalid MIDI out EP 0 [ 1681.350711][T17323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1681.381426][T17323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1681.387460][ T9413] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 1681.573821][T17414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1681.611434][T17414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1681.630571][T17323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.653187][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1681.667419][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1681.700312][T17323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.727979][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1681.751229][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1681.766758][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.773996][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1681.821097][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1681.831292][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1681.841727][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1681.851853][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.859056][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.886372][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1681.923760][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1681.935303][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1681.947177][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1681.959852][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1681.970337][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1682.002805][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1682.017546][ T9409] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1682.030230][ T9409] usb 2-1: USB disconnect, device number 20 [ 1682.037429][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1682.048777][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1682.057946][T17430] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1682.078758][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1682.097811][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1682.119337][T17323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1682.200922][T17433] fuse: Unknown parameter 'user_id00000000000000000000' [ 1682.734514][T17442] fuse: Unknown parameter '0x0000000000000006' [ 1683.456065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1683.464822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1683.507416][T17323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.648743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1683.676332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1683.701716][T17323] device veth0_vlan entered promiscuous mode [ 1683.732356][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1683.756777][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1683.819435][T17323] device veth1_vlan entered promiscuous mode [ 1683.851646][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1683.862755][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1683.901883][T14958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1684.039852][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1684.059197][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1684.059566][T13665] usb 6-1: USB disconnect, device number 4 [ 1684.115859][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1684.176689][T17323] device veth0_macvtap entered promiscuous mode [ 1684.194863][T17323] device veth1_macvtap entered promiscuous mode [ 1684.301505][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.500140][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.652216][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.718103][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.762465][T13665] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1684.806625][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.902293][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.936927][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.966564][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.986905][T13665] usb 6-1: Using ep0 maxpacket: 32 [ 1685.011009][T13665] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1685.020317][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.054015][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.076792][T13665] usb 6-1: config 0 has no interface number 0 [ 1685.096090][T17323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1685.151812][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1685.160998][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1685.276904][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1685.289426][T13665] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1685.396821][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1685.406858][T13665] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.443452][T13665] usb 6-1: Product: syz [ 1685.446059][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.493095][T13665] usb 6-1: Manufacturer: syz [ 1685.497753][T13665] usb 6-1: SerialNumber: syz [ 1685.529449][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.584665][T13665] usb 6-1: config 0 descriptor?? [ 1685.589902][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.625131][T13665] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1685.640607][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.650658][T13665] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 1685.661569][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.673252][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.683362][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.694272][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.704597][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1685.716634][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.744500][T17323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1685.752756][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1685.766124][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1685.780334][T17323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.791107][T17323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.803715][T17323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.831181][T17323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.849190][T13665] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1685.954972][ T4919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.979184][ T4919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1686.012969][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1686.039709][ T4919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.052999][ T4919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1686.168070][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1686.462913][ C0] vcan0: j1939_tp_rxtimer: 0xffff888071428c00: rx timeout, send abort [ 1686.474578][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880553fb800: rx timeout, send abort [ 1686.483500][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888071428c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1686.500137][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880553fb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1686.636545][T17467] fuse: Unknown parameter 'user_id00000000000000000000' [ 1686.667717][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3897'. [ 1686.927212][T13665] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 1686.952063][T13665] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 1686.981211][T13665] usb 6-1: USB disconnect, device number 5 [ 1687.007783][T13665] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1687.274841][T16042] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1687.466843][T17496] fuse: Bad value for 'fd' [ 1687.490324][T16042] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1687.528895][T16042] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1687.561658][T16042] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1687.586879][T16042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.630659][T16042] usb 2-1: invalid MIDI out EP 0 [ 1687.720726][T16042] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1687.872326][T17478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.926610][T17478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.167326][T17517] kvm [17515]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1688.195544][T17517] kvm [17515]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1690.286282][ T4720] usb 2-1: USB disconnect, device number 21 [ 1690.300276][ T22] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1691.037769][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 1691.055549][ T22] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1691.103981][ T22] usb 6-1: config 0 has no interface number 0 [ 1691.143045][ T22] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1691.155600][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.164365][ T22] usb 6-1: Product: syz [ 1691.180764][ T22] usb 6-1: Manufacturer: syz [ 1691.185542][ T22] usb 6-1: SerialNumber: syz [ 1691.205078][ T22] usb 6-1: config 0 descriptor?? [ 1691.262668][ T22] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1691.271299][ T22] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 1691.470184][ T22] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1693.254128][T17576] fuse: Bad value for 'group_id' [ 1694.420608][ T22] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 1694.429967][ T22] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 1694.438844][ T22] usb 6-1: USB disconnect, device number 6 [ 1694.445063][ T22] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1695.383322][T17611] fuse: Bad value for 'group_id' [ 1695.444493][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1695.450897][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1696.981867][T13665] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1697.195825][T13665] usb 1-1: Using ep0 maxpacket: 32 [ 1697.210573][T13665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.229255][T13665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1697.254429][T13665] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1697.277619][T13665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.308162][T13665] usb 1-1: config 0 descriptor?? [ 1697.331602][T13665] hub 1-1:0.0: USB hub found [ 1697.547728][T13665] hub 1-1:0.0: 1 port detected [ 1697.876304][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3956'. [ 1697.984916][T13665] usb 1-1: USB disconnect, device number 35 [ 1698.253936][ T8137] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1698.457037][ T8137] usb 6-1: Using ep0 maxpacket: 16 [ 1698.474290][ T8137] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.495815][ T8137] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1698.506259][ T8137] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1698.515746][ T8137] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.525724][ T8137] usb 6-1: config 0 descriptor?? [ 1698.610758][T17652] fuse: Bad value for 'group_id' [ 1698.788120][ T8137] usbhid 6-1:0.0: can't add hid device: -71 [ 1698.811242][ T8137] usbhid: probe of 6-1:0.0 failed with error -71 [ 1698.865318][ T8137] usb 6-1: USB disconnect, device number 7 [ 1698.905509][T13665] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1699.182689][T13665] usb 10-1: config 0 has no interfaces? [ 1699.190119][T13665] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1699.421702][T13665] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.424471][ T8137] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1700.629458][ T8137] usb 1-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid maxpacket 57464, setting to 64 [ 1700.649335][ T8137] usb 1-1: config 2 interface 0 has no altsetting 0 [ 1700.666228][ T8137] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1700.678445][ T8137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.698228][ T8137] usb 1-1: Product: syz [ 1700.706469][ T8137] usb 1-1: Manufacturer: syz [ 1700.711313][ T8137] usb 1-1: SerialNumber: syz [ 1700.835925][T13665] usb 10-1: config 0 descriptor?? [ 1700.954496][ T8137] ims_pcu: probe of 1-1:2.0 failed with error -22 [ 1700.988388][ T8137] usb 1-1: USB disconnect, device number 36 [ 1701.731508][T13665] usb 10-1: USB disconnect, device number 50 [ 1702.919161][T10932] Bluetooth: Unexpected continuation frame (len 4) [ 1704.430865][T17710] fuse: Unknown parameter 'fd0x0000000000000007' [ 1706.849269][ T22] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1707.583133][T17746] input: syz0 as /devices/virtual/input/input90 [ 1707.590499][ T22] usb 10-1: device descriptor read/64, error -71 [ 1707.897011][ T22] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1708.085728][ T22] usb 10-1: device descriptor read/64, error -71 [ 1708.350908][ T22] usb usb10-port1: attempt power cycle [ 1709.211866][ T22] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1709.689602][ T22] usb 10-1: device descriptor read/8, error -71 [ 1710.963852][T10932] Bluetooth: Unexpected continuation frame (len 4) [ 1711.674866][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4001'. [ 1711.747537][T17780] device bridge0 entered promiscuous mode [ 1711.836141][T17780] device macvtap1 entered promiscuous mode [ 1714.991593][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4022'. [ 1715.068886][T17844] device bond_slave_0 entered promiscuous mode [ 1715.075787][T17844] device bond_slave_1 entered promiscuous mode [ 1715.135138][T17844] device macvtap1 entered promiscuous mode [ 1715.141057][T17844] device bond0 entered promiscuous mode [ 1715.169498][T17844] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1715.264122][T17847] input: syz0 as /devices/virtual/input/input91 [ 1716.686191][ T9409] usb 10-1: new full-speed USB device number 55 using dummy_hcd [ 1717.696180][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1717.746115][T17880] device macvtap2 entered promiscuous mode [ 1717.767791][T17880] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1717.835049][T17864] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4029'. [ 1717.870200][T17864] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4029'. [ 1717.918845][ T26] audit: type=1326 audit(1737084865.605:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17891 comm="syz.6.4041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc968f85d29 code=0x0 [ 1717.952545][T17864] device netdevsim0 entered promiscuous mode [ 1717.974707][T17864] device dummy0 entered promiscuous mode [ 1717.997326][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1718.281792][ T9409] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1718.299312][ T9409] usb 10-1: can't read configurations, error -71 [ 1720.804054][T17936] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4059'. [ 1720.824408][T17936] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1722.178495][T17955] input: syz0 as /devices/virtual/input/input92 [ 1723.195716][ T9409] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1723.852543][ T9409] usb 10-1: Using ep0 maxpacket: 8 [ 1723.863796][ T9409] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1723.873193][ T9409] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.881487][ T9409] usb 10-1: Product: syz [ 1723.885770][ T9409] usb 10-1: Manufacturer: syz [ 1723.895778][ T9409] usb 10-1: SerialNumber: syz [ 1723.919164][ T9409] usb 10-1: config 0 descriptor?? [ 1724.145846][ T9409] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1725.041475][ T9409] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -32 [ 1725.051360][ T9409] usb 10-1: USB disconnect, device number 57 [ 1725.526652][T17997] input: syz0 as /devices/virtual/input/input93 [ 1725.771260][T18008] fuse: Bad value for 'fd' [ 1726.212617][ T5329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.427957][ T5329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.726241][ T5329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.756743][T18037] fuse: Bad value for 'fd' [ 1726.842493][T18038] input: syz0 as /devices/virtual/input/input94 [ 1727.598165][ T5329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.807481][ T8175] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1728.823800][ T8175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1728.833598][ T8175] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1728.849433][ T8175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1728.859117][ T8175] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1728.866767][ T8175] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1729.171187][ T4239] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1729.363613][ T4239] usb 6-1: Using ep0 maxpacket: 8 [ 1729.431634][ T4239] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1729.604768][T18073] fuse: Bad value for 'fd' [ 1729.674596][ T4239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.800808][ T4239] usb 6-1: Product: syz [ 1729.860739][ T4239] usb 6-1: Manufacturer: syz [ 1729.939650][ T4239] usb 6-1: SerialNumber: syz [ 1729.996239][ T4239] usb 6-1: config 0 descriptor?? [ 1730.029180][T18055] chnl_net:caif_netlink_parms(): no params data found [ 1730.176194][ T4720] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1730.234690][ T4239] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1730.246995][T18055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.254584][T18055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.263637][T18055] device bridge_slave_0 entered promiscuous mode [ 1730.332135][T18055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.347448][T18055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.355795][T18055] device bridge_slave_1 entered promiscuous mode [ 1730.381015][ T4720] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1730.396911][ T4720] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1730.409924][ T4720] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1730.420190][ T4720] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1730.431246][ T4720] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.471120][ T4720] snd-usb-audio: probe of 10-1:27.0 failed with error -12 [ 1730.501178][T18055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1730.569320][T18055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.590433][T18089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1730.675753][T18063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.691933][T18063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.703390][T18055] team0: Port device team_slave_0 added [ 1730.741627][T18055] team0: Port device team_slave_1 added [ 1730.922089][T18055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.939113][T18055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1730.965483][ C0] vkms_vblank_simulate: vblank timer overrun [ 1730.982059][T18055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1730.998371][T18055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1731.009314][T18055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1731.035557][ C0] vkms_vblank_simulate: vblank timer overrun [ 1731.042973][ T8175] Bluetooth: hci1: command 0x0409 tx timeout [ 1731.090625][T18055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1731.102367][ T4239] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1731.112682][ T4239] usb 6-1: USB disconnect, device number 8 [ 1732.714094][T18055] device hsr_slave_0 entered promiscuous mode [ 1732.805765][ T7] usb 10-1: USB disconnect, device number 58 [ 1732.854098][T18055] device hsr_slave_1 entered promiscuous mode [ 1732.868323][T18055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1732.884596][T18055] Cannot create hsr debugfs directory [ 1732.922771][ T5329] device hsr_slave_0 left promiscuous mode [ 1732.938722][ T5329] device hsr_slave_1 left promiscuous mode [ 1732.962293][ T5329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1733.113276][ T5329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.127030][ T5329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1733.135212][ T5329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.149214][ T5329] device bridge_slave_1 left promiscuous mode [ 1733.167398][ T5329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.201254][ T5329] device bridge_slave_0 left promiscuous mode [ 1733.239573][ T5329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.265837][ T8175] Bluetooth: hci1: command 0x041b tx timeout [ 1733.508347][ T5329] device veth1_macvtap left promiscuous mode [ 1733.515785][ T5329] device veth0_macvtap left promiscuous mode [ 1733.522946][ T5329] device veth1_vlan left promiscuous mode [ 1733.529517][ T5329] device veth0_vlan left promiscuous mode [ 1734.492022][T18116] input: syz0 as /devices/virtual/input/input95 [ 1735.489391][ T8175] Bluetooth: hci1: command 0x040f tx timeout [ 1736.163109][ T9417] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1736.393417][ T9417] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1736.426068][ T9417] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1736.483867][ T9417] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1736.529506][ T9417] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.608419][T18127] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1736.872427][ T5329] team0 (unregistering): Port device team_slave_1 removed [ 1736.899124][T18127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.907978][T18127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.948340][ T5329] team0 (unregistering): Port device team_slave_0 removed [ 1737.022648][ T5329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.088657][ T5329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.713401][ T8175] Bluetooth: hci1: command 0x0419 tx timeout [ 1737.937198][ T5329] bond0 (unregistering): Released all slaves [ 1738.076084][T18103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4119'. [ 1738.625339][T18145] input: syz0 as /devices/virtual/input/input96 [ 1739.267379][ T4317] usb 10-1: USB disconnect, device number 59 [ 1739.973463][T18055] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1740.111773][T18055] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1740.172732][T18055] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1740.202397][T18055] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1740.555487][T18055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1740.626851][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1740.655793][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1740.686887][T18055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1740.716223][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1740.748211][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1740.767925][ T4549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1740.775124][ T4549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1740.801340][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4143'. [ 1740.861060][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1741.068361][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1741.313531][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1741.410166][ T4549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.417478][ T4549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1741.444436][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1741.474119][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1741.508420][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1741.546746][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1741.567845][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1741.585200][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1741.597713][T18187] fuse: Unknown parameter 'group_id00000000000000000000' [ 1741.617118][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1741.637103][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1741.659759][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1741.679514][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1741.704761][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1741.717430][T18055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1742.161208][ T4317] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1742.388387][ T4317] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1742.451837][ T4317] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1742.550818][ T4317] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1742.639846][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.762207][T18189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1743.040732][T18189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.069432][T18189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.139652][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1743.150083][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1743.164297][T18055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1743.384882][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4154'. [ 1743.633602][T18227] fuse: Unknown parameter 'group_id00000000000000000000' [ 1744.040195][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1744.051323][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1744.082476][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1744.093905][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1744.108859][T18055] device veth0_vlan entered promiscuous mode [ 1744.122771][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1744.132777][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1744.143593][T18055] device veth1_vlan entered promiscuous mode [ 1744.177173][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1744.192314][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1744.201138][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1744.211937][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1744.227587][T18055] device veth0_macvtap entered promiscuous mode [ 1744.237310][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1744.249120][T18055] device veth1_macvtap entered promiscuous mode [ 1744.296921][T18055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.311824][T18055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.331607][T18055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.342632][T18055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.352806][T18055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.363641][T18055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.373912][T18055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.394400][T18055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.405165][T18055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.416605][T18055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.431345][T18055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1744.444282][T18055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.454944][T18055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.465353][T18055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.476131][T18055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.486412][T18055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.497125][T18055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.507616][T18055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.518295][T18055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.528398][T18055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.539163][T18055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.552866][T18055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1744.572419][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1744.592608][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1744.627264][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1744.682888][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1744.736072][T18055] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.758506][T18055] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.778558][T18055] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.796220][T18055] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.905413][ T9413] usb 2-1: USB disconnect, device number 22 [ 1745.048388][ T4919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1745.086289][ T4919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1745.124688][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1745.133785][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1745.158763][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1745.186739][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1747.679865][T18266] fuse: Unknown parameter 'group_id00000000000000000000' [ 1749.406486][T18300] fuse: Bad value for 'user_id' [ 1752.309007][T18336] fuse: Bad value for 'user_id' [ 1753.610353][ T22] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1753.862522][ T22] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1753.892798][ T22] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1753.905158][ T22] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1753.924002][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.016613][T18357] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1754.334911][T18367] fuse: Bad value for 'user_id' [ 1754.375938][T18357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.420194][T18357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.934228][T18404] fuse: Bad value for 'fd' [ 1756.582630][ T7257] usb 6-1: USB disconnect, device number 9 [ 1757.331633][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4233'. [ 1758.062673][T18436] fuse: Bad value for 'fd' [ 1759.135781][T18465] fuse: Bad value for 'fd' [ 1759.928469][ T8175] Bluetooth: Unexpected continuation frame (len 4) [ 1761.251210][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1761.260759][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1762.547526][ T7257] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1762.765179][ T7257] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1762.806544][ T7257] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1762.840813][ T7257] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1762.857337][ T7257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.880929][T18499] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1763.040537][T18508] fuse: Bad value for 'fd' [ 1763.135049][T18499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.145599][T18499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.607711][ T7257] usb 6-1: USB disconnect, device number 10 [ 1766.297459][T18545] fuse: Bad value for 'fd' [ 1768.888573][T18576] sctp: [Deprecated]: syz.7.4287 (pid 18576) Use of int in max_burst socket option. [ 1768.888573][T18576] Use struct sctp_assoc_value instead [ 1769.078869][T18580] fuse: Bad value for 'fd' [ 1773.272408][T18634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4306'. [ 1774.149987][ T7257] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1774.501207][ T7257] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1774.529916][ T7257] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1774.549604][ T7257] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1774.578314][ T7257] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.740602][T18630] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1774.763202][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4312'. [ 1774.890028][T18653] device syz_tun entered promiscuous mode [ 1774.933961][T18653] device macvtap2 entered promiscuous mode [ 1775.561334][T18630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.585366][T18630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.862055][T18655] device syz_tun left promiscuous mode [ 1776.042970][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4317'. [ 1776.462189][ T9413] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1776.719642][ T9413] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1776.859828][ T9413] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1777.038860][ T9413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.243511][ T9413] usb 2-1: Product: syz [ 1777.269049][ T9413] usb 2-1: Manufacturer: syz [ 1777.273799][ T9413] usb 2-1: SerialNumber: syz [ 1777.358848][ T9409] usb 10-1: USB disconnect, device number 60 [ 1777.423686][T18678] fuse: Invalid rootmode [ 1777.586465][ T9413] usb 2-1: USB disconnect, device number 23 [ 1779.501297][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4329'. [ 1779.705914][T10932] Bluetooth: hci0: command 0x0406 tx timeout [ 1780.101580][ T9409] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1780.461736][ T9409] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1780.600846][ T9409] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1780.764598][ T9409] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1780.817823][ T9409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.850032][T18707] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1781.256474][T18707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.272378][T18707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.871497][ T7257] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1783.089048][ T4317] usb 2-1: USB disconnect, device number 24 [ 1784.085844][ T7257] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1784.102023][ T7257] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1784.128341][ T7257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.140035][ T7257] usb 6-1: Product: syz [ 1784.158353][ T7257] usb 6-1: Manufacturer: syz [ 1784.163082][ T7257] usb 6-1: SerialNumber: syz [ 1784.412970][ T7257] usb 6-1: USB disconnect, device number 11 [ 1788.908702][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4367'. [ 1789.135176][ T7257] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1789.428160][ T7257] usb 10-1: config 0 has no interfaces? [ 1789.435684][ T7257] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1789.455629][ T7257] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.466545][ T7257] usb 10-1: config 0 descriptor?? [ 1790.020107][ T9417] usb 10-1: USB disconnect, device number 61 [ 1793.870902][ T9417] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1794.063198][ T9417] usb 2-1: Using ep0 maxpacket: 8 [ 1794.071137][ T9417] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1794.097277][ T9417] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1794.108235][ T9417] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1794.119767][ T9417] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1794.135144][ T9417] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1794.145046][ T9417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.488423][ T9417] usb 2-1: GET_CAPABILITIES returned 0 [ 1794.494705][ T9417] usbtmc 2-1:16.0: can't read capabilities [ 1794.852198][ T9417] usb 2-1: USB disconnect, device number 25 [ 1797.165978][T18893] fuse: Bad value for 'fd' [ 1797.454088][ T8138] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1797.902941][ T8138] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1797.919643][ T8138] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1797.931573][ T8138] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1797.941142][ T8138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.952238][T18892] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1798.018746][T18900] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1798.193834][T18892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.208258][T18892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.232697][T18900] usb 10-1: Using ep0 maxpacket: 8 [ 1798.256822][T18900] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1798.278855][T18900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.295160][T18900] usb 10-1: Product: syz [ 1798.311791][T18900] usb 10-1: Manufacturer: syz [ 1798.316535][T18900] usb 10-1: SerialNumber: syz [ 1798.334801][T18900] usb 10-1: config 0 descriptor?? [ 1798.658073][T18900] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1799.823906][T18900] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 1799.868358][T18900] usb 10-1: USB disconnect, device number 62 [ 1799.996066][ T4317] usb 6-1: USB disconnect, device number 12 [ 1800.592835][T18949] input: syz0 as /devices/virtual/input/input97 [ 1801.653777][ T4317] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1801.891139][ T4317] usb 6-1: config 0 has an invalid interface number: 87 but max is 0 [ 1801.904026][ T4317] usb 6-1: config 0 has no interface number 0 [ 1801.911052][ T4317] usb 6-1: too many endpoints for config 0 interface 87 altsetting 109: 67, using maximum allowed: 30 [ 1801.922349][ T4317] usb 6-1: config 0 interface 87 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 67 [ 1801.953281][ T4317] usb 6-1: config 0 interface 87 has no altsetting 0 [ 1801.966179][ T4317] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1801.985938][ T4317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.006685][ T4317] usb 6-1: Product: syz [ 1802.010920][ T4317] usb 6-1: Manufacturer: syz [ 1802.024132][ T4317] usb 6-1: SerialNumber: syz [ 1802.049928][ T4317] usb 6-1: config 0 descriptor?? [ 1802.300977][ T4317] usb 6-1: USB disconnect, device number 13 [ 1805.162032][T19026] input: syz0 as /devices/virtual/input/input98 [ 1806.024903][T16042] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1806.219041][T16042] usb 6-1: Using ep0 maxpacket: 32 [ 1806.226458][T16042] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1806.249035][T16042] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1806.271901][T16042] usb 6-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 1806.321301][T16042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.347269][T16042] usb 6-1: config 0 descriptor?? [ 1807.369523][T16042] usb 6-1: USB disconnect, device number 14 [ 1807.730638][T19065] input: syz0 as /devices/virtual/input/input99 [ 1809.799861][T16042] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1810.045751][T16042] usb 10-1: Using ep0 maxpacket: 8 [ 1810.067514][T16042] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1810.392919][T16042] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.401294][T16042] usb 10-1: Product: syz [ 1810.405650][T16042] usb 10-1: Manufacturer: syz [ 1810.411892][T16042] usb 10-1: SerialNumber: syz [ 1810.418947][T16042] usb 10-1: config 0 descriptor?? [ 1810.900207][T16042] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1810.900926][ T9408] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1811.373267][ T9408] usb 2-1: Using ep0 maxpacket: 8 [ 1811.440525][ T9408] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1811.462748][ T9408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.471074][ T9408] usb 2-1: Product: syz [ 1811.475529][ T9408] usb 2-1: Manufacturer: syz [ 1811.480328][ T9408] usb 2-1: SerialNumber: syz [ 1811.487254][ T9408] usb 2-1: config 0 descriptor?? [ 1811.498145][ T9408] gspca_main: se401-2.14.0 probing 047d:5003 [ 1811.760516][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4479'. [ 1812.078553][ T9408] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1812.091338][ T9408] se401: probe of 2-1:0.0 failed with error -71 [ 1812.100776][ T9408] usb 2-1: USB disconnect, device number 26 [ 1813.120447][T16042] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 1813.200503][T16042] usb 10-1: USB disconnect, device number 63 [ 1813.468079][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4489'. [ 1813.616863][T18900] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1813.869174][T18900] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1813.909764][T18900] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1813.969170][T18900] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1813.978289][T18900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.010985][T19133] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1814.037162][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 1814.271466][T19133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.303718][T19133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.079643][T16042] usb 6-1: USB disconnect, device number 15 [ 1816.813156][T16042] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1817.017489][T16042] usb 2-1: Using ep0 maxpacket: 32 [ 1817.027464][T16042] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.068115][T16042] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1817.101107][T16042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.147950][T16042] usb 2-1: Product: syz [ 1817.172902][T16042] usb 2-1: Manufacturer: syz [ 1817.200621][T16042] usb 2-1: SerialNumber: syz [ 1817.416175][T16042] usb 2-1: config 0 descriptor?? [ 1817.434940][T16042] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1818.308816][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4505'. [ 1819.484533][T16042] gspca_sunplus: reg_w_1 err -110 [ 1819.489784][T16042] sunplus: probe of 2-1:0.0 failed with error -110 [ 1820.720791][T13922] usb 2-1: USB disconnect, device number 27 [ 1822.662403][T13922] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1822.927949][T13922] usb 6-1: Using ep0 maxpacket: 32 [ 1822.947978][T13922] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1822.991940][T13922] usb 6-1: config 0 has no interface number 0 [ 1822.998464][T13922] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1823.019986][T13922] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1823.040613][T13922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.049165][T13922] usb 6-1: Product: syz [ 1823.053482][T13922] usb 6-1: Manufacturer: syz [ 1823.064139][T13922] usb 6-1: SerialNumber: syz [ 1823.115647][T13922] usb 6-1: config 0 descriptor?? [ 1824.520976][ T8138] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1825.049827][T13922] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1825.211428][T13922] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1825.382830][T13922] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1825.533209][T13922] f81534: probe of 6-1:0.12 failed with error -71 [ 1825.626304][T13922] usb 6-1: USB disconnect, device number 16 [ 1825.664613][ T8138] usb 2-1: Using ep0 maxpacket: 32 [ 1825.677358][ T8138] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1825.685519][ T8138] usb 2-1: config 0 has no interface number 0 [ 1825.733994][ T8138] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1825.750185][ T8138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.758244][ T8138] usb 2-1: Product: syz [ 1825.789004][ T8138] usb 2-1: Manufacturer: syz [ 1825.793822][T16042] usb 10-1: new full-speed USB device number 64 using dummy_hcd [ 1825.812499][ T8138] usb 2-1: SerialNumber: syz [ 1825.819738][ T8138] usb 2-1: config 0 descriptor?? [ 1825.868007][ T8138] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 1825.904071][ T8138] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 1826.027775][T16042] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.103370][T16042] usb 10-1: config 0 has no interfaces? [ 1826.170632][T16042] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1826.322563][T16042] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1826.436356][ T8138] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1826.473133][T16042] usb 10-1: Manufacturer: syz [ 1826.482395][T16042] usb 10-1: config 0 descriptor?? [ 1826.764876][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1826.771373][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1828.269312][ T8138] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 1828.290703][ T8138] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 1828.335615][ T8138] usb 2-1: USB disconnect, device number 28 [ 1828.357025][ T8138] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 1828.663155][T16042] usb 10-1: can't set config #0, error -71 [ 1828.679610][T16042] usb 10-1: USB disconnect, device number 64 [ 1829.668943][T19338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4564'. [ 1829.697910][T19338] device bridge0 entered promiscuous mode [ 1829.704393][T19338] device macvtap3 entered promiscuous mode [ 1829.741061][T16042] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1829.768820][T19338] device bridge0 left promiscuous mode [ 1829.968444][T16042] usb 2-1: config 0 has no interfaces? [ 1829.980327][T16042] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1830.077930][T16042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.178289][T16042] usb 2-1: config 0 descriptor?? [ 1830.678622][T16042] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1830.882075][T16042] usb 6-1: Using ep0 maxpacket: 32 [ 1830.889699][T16042] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1830.923007][T16042] usb 6-1: config 0 has no interface number 0 [ 1830.958950][T16042] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1830.982538][T16042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.003873][T16042] usb 6-1: Product: syz [ 1831.008293][T16042] usb 6-1: Manufacturer: syz [ 1831.013272][T16042] usb 6-1: SerialNumber: syz [ 1831.034077][T16042] usb 6-1: config 0 descriptor?? [ 1831.050132][T16042] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1831.068161][T16042] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 1831.199970][T13922] usb 2-1: USB disconnect, device number 29 [ 1831.260941][T16042] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1833.426757][T16042] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 1833.446248][T16042] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 1833.466922][T16042] usb 6-1: USB disconnect, device number 17 [ 1833.473390][T16042] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1833.844513][T10932] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1833.853866][T10932] Bluetooth: hci1: Injecting HCI hardware error event [ 1833.866242][ T8175] Bluetooth: hci1: hardware error 0x00 [ 1833.883478][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4579'. [ 1834.027153][T19381] device macvtap2 entered promiscuous mode [ 1834.518816][T19391] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4583'. [ 1834.532738][T19391] device bond0 entered promiscuous mode [ 1834.545526][T19391] device bond_slave_0 entered promiscuous mode [ 1834.564946][T19391] device bond_slave_1 entered promiscuous mode [ 1834.663948][T19391] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1834.933076][T19391] device bond0 left promiscuous mode [ 1835.050605][T19391] device bond_slave_0 left promiscuous mode [ 1835.303744][T19391] device bond_slave_1 left promiscuous mode [ 1836.168341][ T8175] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1837.049222][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4595'. [ 1837.133436][T19421] device bridge0 entered promiscuous mode [ 1837.146791][T19421] device macvtap3 entered promiscuous mode [ 1837.187380][T19422] device bridge0 left promiscuous mode [ 1840.342967][T16042] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1840.564283][T16042] usb 10-1: config 0 has no interfaces? [ 1840.572854][T16042] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1840.613459][T16042] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.651610][T16042] usb 10-1: config 0 descriptor?? [ 1841.258380][T19483] fuse: Unknown parameter '0x0000000000000003' [ 1842.360084][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4624'. [ 1842.384315][T19497] device bridge0 entered promiscuous mode [ 1842.398357][T19497] device macvtap4 entered promiscuous mode [ 1842.441366][T19497] device bridge0 left promiscuous mode [ 1843.246198][ T9420] usb 10-1: USB disconnect, device number 65 [ 1843.368280][T16042] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1843.603413][T16042] usb 6-1: Using ep0 maxpacket: 32 [ 1843.612742][T16042] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1843.656926][T16042] usb 6-1: config 0 has no interface number 0 [ 1843.697412][T16042] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1843.764742][T16042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.833743][T19531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4638'. [ 1843.868767][T16042] usb 6-1: Product: syz [ 1843.882423][T16042] usb 6-1: Manufacturer: syz [ 1843.925604][T16042] usb 6-1: SerialNumber: syz [ 1843.964250][T19531] device bridge0 entered promiscuous mode [ 1843.985613][T16042] usb 6-1: config 0 descriptor?? [ 1844.006506][T19531] device macvtap1 entered promiscuous mode [ 1844.068318][T16042] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1844.111920][T16042] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 1844.160503][T19532] device bridge0 left promiscuous mode [ 1844.262255][T16042] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1845.583887][ T26] audit: type=1326 audit(1737084985.028:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc968f85d29 code=0x7ffc0000 [ 1845.607435][T16042] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 1845.629131][T16042] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 1845.645604][T16042] usb 6-1: USB disconnect, device number 18 [ 1845.656380][T16042] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1845.663888][ T26] audit: type=1326 audit(1737084985.056:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc968f85d29 code=0x7ffc0000 [ 1845.723909][ T26] audit: type=1326 audit(1737084985.056:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc968f85d29 code=0x7ffc0000 [ 1845.763502][ T26] audit: type=1326 audit(1737084985.056:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc968f85d29 code=0x7ffc0000 [ 1845.785783][ C0] vkms_vblank_simulate: vblank timer overrun [ 1845.827934][ T26] audit: type=1326 audit(1737084985.056:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc968f85d29 code=0x7ffc0000 [ 1845.832689][T19563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4650'. [ 1845.859750][ T26] audit: type=1326 audit(1737084985.056:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc968f85d29 code=0x7ffc0000 [ 1845.882472][ T26] audit: type=1326 audit(1737084985.056:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc968f85d29 code=0x7ffc0000 [ 1845.930231][ T26] audit: type=1326 audit(1737084985.056:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc968f85d29 code=0x7ffc0000 [ 1845.953778][ T26] audit: type=1326 audit(1737084985.056:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc968f85d29 code=0x7ffc0000 [ 1846.273323][T19577] fuse: Unknown parameter '0x0000000000000003' [ 1847.986945][ T9408] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1848.176259][T19615] fuse: Unknown parameter '0x0000000000000003' [ 1848.189735][ T9408] usb 2-1: Using ep0 maxpacket: 8 [ 1848.207211][ T9408] usb 2-1: config 0 has no interfaces? [ 1848.262658][ T9408] usb 2-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 1848.272806][ T9408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.281112][ T9408] usb 2-1: Product: syz [ 1848.286049][ T9408] usb 2-1: Manufacturer: syz [ 1848.290757][ T9408] usb 2-1: SerialNumber: syz [ 1848.310666][ T9408] usb 2-1: config 0 descriptor?? [ 1848.540732][ T9408] usb 2-1: USB disconnect, device number 30 [ 1851.362948][T19648] fuse: Unknown parameter 'fd0x0000000000000003' [ 1853.337033][T19680] fuse: Unknown parameter 'fd0x0000000000000003' [ 1853.414315][T19684] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1853.427212][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4697'. [ 1853.492049][T19685] device bridge0 entered promiscuous mode [ 1853.503468][T19685] device macvtap2 entered promiscuous mode [ 1853.576773][T19693] device bridge0 left promiscuous mode [ 1853.727570][T16623] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1853.770724][T18900] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1853.941428][T16623] usb 10-1: Using ep0 maxpacket: 16 [ 1854.004601][T16623] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x93, skipping [ 1854.018680][T16623] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1854.028046][T18900] usb 6-1: Using ep0 maxpacket: 32 [ 1854.035499][T18900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.063773][T16623] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.072548][T18900] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1854.086855][T16623] usb 10-1: Product: syz [ 1854.094522][T16623] usb 10-1: Manufacturer: syz [ 1854.100596][T18900] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1854.109962][T16623] usb 10-1: SerialNumber: syz [ 1854.115344][T19700] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4701'. [ 1854.116203][T18900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.134207][T16623] usb 10-1: config 0 descriptor?? [ 1854.140747][T16623] hub 10-1:0.0: bad descriptor, ignoring hub [ 1854.283438][T16623] hub: probe of 10-1:0.0 failed with error -5 [ 1854.295165][T18900] usb 6-1: config 0 descriptor?? [ 1854.316392][T18900] hub 6-1:0.0: bad descriptor, ignoring hub [ 1854.322349][T18900] hub: probe of 6-1:0.0 failed with error -5 [ 1854.344130][T16623] snd-usb-audio: probe of 10-1:0.0 failed with error -2 [ 1854.353938][T18900] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1854.402848][T16623] usb 10-1: USB disconnect, device number 66 [ 1855.152995][T19716] netlink: 'syz.1.4708': attribute type 1 has an invalid length. [ 1855.180323][T19716] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.4708'. [ 1855.778461][T19733] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4715'. [ 1857.565587][ T8138] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1857.779163][ T8138] usb 10-1: Using ep0 maxpacket: 32 [ 1857.805646][ T8138] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.946377][ T8138] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1858.057634][ T8138] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1858.069190][ T8138] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.203504][ T8138] usb 10-1: config 0 descriptor?? [ 1858.243910][ T8137] usb 6-1: USB disconnect, device number 19 [ 1858.267616][ T8138] hub 10-1:0.0: USB hub found [ 1858.494162][ T8138] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 1858.533305][T19765] netlink: 'syz.6.4727': attribute type 72 has an invalid length. [ 1858.543245][ T8138] usbhid 10-1:0.0: can't add hid device: -71 [ 1858.552688][ T8138] usbhid: probe of 10-1:0.0 failed with error -71 [ 1858.559811][T19765] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4727'. [ 1858.603412][ T8138] usb 10-1: USB disconnect, device number 67 [ 1858.859213][ T4303] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1859.308023][ T4303] usb 2-1: Using ep0 maxpacket: 8 [ 1859.336452][ T4303] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1859.357467][ T4303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.378239][ T4303] usb 2-1: Product: syz [ 1859.405453][ T4303] usb 2-1: Manufacturer: syz [ 1859.430119][ T4303] usb 2-1: SerialNumber: syz [ 1859.499649][ T4303] usb 2-1: config 0 descriptor?? [ 1859.551380][ T4303] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1859.595663][ T4303] usb 2-1: setting power ON [ 1859.634989][ T4303] dvb-usb: bulk message failed: -22 (2/0) [ 1859.768431][ T4303] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1859.922236][ T4303] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1859.937959][ T4303] usb 2-1: media controller created [ 1860.468912][ T4303] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1860.548380][ T4303] usb 2-1: selecting invalid altsetting 6 [ 1860.555095][ T4303] usb 2-1: digital interface selection failed (-22) [ 1860.578089][ T4303] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1860.622119][ T4303] usb 2-1: setting power OFF [ 1860.670589][ T4303] dvb-usb: bulk message failed: -22 (2/0) [ 1860.702055][ T4303] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1860.736926][ T4303] (NULL device *): no alternate interface [ 1861.097182][ T4303] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1861.167291][ T4303] usb 2-1: USB disconnect, device number 31 [ 1862.059089][T19824] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1864.525268][T16623] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1864.728261][T16623] usb 10-1: Using ep0 maxpacket: 32 [ 1864.748761][T16623] usb 10-1: config 2 has an invalid interface number: 45 but max is 0 [ 1864.840388][T16623] usb 10-1: config 2 has no interface number 0 [ 1864.862128][T16623] usb 10-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1865.053270][T16623] usb 10-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1865.231426][T16623] usb 10-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1865.353981][T16623] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.453736][T16623] usb 10-1: Product: syz [ 1865.529177][T16623] usb 10-1: Manufacturer: syz [ 1865.605530][T16623] usb 10-1: SerialNumber: syz [ 1865.665316][T16623] kobil_sct 10-1:2.45: KOBIL USB smart card terminal converter detected [ 1865.698333][T16623] usb 10-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1865.842434][T16623] usb 10-1: USB disconnect, device number 68 [ 1865.896371][T16623] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1865.945545][T16623] kobil_sct 10-1:2.45: device disconnected [ 1865.972686][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4772'. [ 1866.005087][T19886] device bridge0 entered promiscuous mode [ 1866.014480][T19886] device macvtap5 entered promiscuous mode [ 1866.061072][T19889] capability: warning: `syz.1.4773' uses 32-bit capabilities (legacy support in use) [ 1867.446972][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4785'. [ 1867.462277][T19923] device bond_slave_0 entered promiscuous mode [ 1867.468633][T19923] device bond_slave_1 entered promiscuous mode [ 1867.486153][T19923] device macvtap3 entered promiscuous mode [ 1867.514880][T19923] device bond0 entered promiscuous mode [ 1867.528607][T19923] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1869.735406][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4800'. [ 1869.911489][T19966] device macvtap4 entered promiscuous mode [ 1869.921199][T19966] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1871.623414][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4818'. [ 1871.701470][T20019] device macvtap5 entered promiscuous mode [ 1871.710744][T20019] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 1872.532265][ T9420] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1872.756925][ T9420] usb 2-1: Using ep0 maxpacket: 8 [ 1872.774435][ T9420] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1872.816196][ T9420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.835279][ T9420] usb 2-1: Product: syz [ 1872.847021][ T9420] usb 2-1: Manufacturer: syz [ 1872.856909][ T9420] usb 2-1: SerialNumber: syz [ 1872.869579][ T9420] usb 2-1: config 0 descriptor?? [ 1872.888064][ T9420] gspca_main: se401-2.14.0 probing 047d:5003 [ 1873.552746][ T9420] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input102 [ 1873.808519][ T9420] usb 2-1: USB disconnect, device number 32 [ 1874.518011][T20097] kvm: pic: non byte write [ 1874.837688][T20109] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4851'. [ 1875.993026][T20136] xt_recent: Unsupported userspace flags (00000042) [ 1876.019967][T20138] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4863'. [ 1876.099373][T10932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1876.111350][T10932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1876.120721][T10932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1876.142786][T10932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1876.150998][T10932] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1876.172714][T10932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1876.462906][T14958] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.641609][T14958] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.685045][ T9420] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1876.832480][T14958] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.904873][ T9420] usb 6-1: Using ep0 maxpacket: 32 [ 1876.922241][ T9420] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1876.934684][ T9420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.951748][ T9420] usb 6-1: Product: syz [ 1876.956160][ T9420] usb 6-1: Manufacturer: syz [ 1876.964417][ T9420] usb 6-1: SerialNumber: syz [ 1876.981456][ T9420] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1877.008926][T14958] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.179602][T20139] chnl_net:caif_netlink_parms(): no params data found [ 1877.196454][ T9420] gspca_stk1135: reg_w 0x2 err -71 [ 1877.202687][ T9420] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.230264][ T9420] gspca_stk1135: Sensor write failed [ 1877.245984][ T9420] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.253392][ T9420] gspca_stk1135: Sensor write failed [ 1877.268973][ T9420] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.275664][ T9420] gspca_stk1135: Sensor read failed [ 1877.287933][ T9420] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.295623][ T9420] gspca_stk1135: Sensor read failed [ 1877.309562][ T9420] gspca_stk1135: Detected sensor type unknown (0x0) [ 1877.323202][ T9420] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.329607][ T9420] gspca_stk1135: Sensor read failed [ 1877.347339][ T9420] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.362330][ T9420] gspca_stk1135: Sensor read failed [ 1877.370238][ T9420] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.378217][ T9420] gspca_stk1135: Sensor write failed [ 1877.383569][ T9420] gspca_stk1135: serial bus timeout: status=0x00 [ 1877.390932][ T9420] gspca_stk1135: Sensor write failed [ 1877.396297][ T9420] stk1135: probe of 6-1:64.0 failed with error -71 [ 1877.404286][ T9420] usb 6-1: USB disconnect, device number 20 [ 1877.603215][T20139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.633348][T20139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.685280][T20139] device bridge_slave_0 entered promiscuous mode [ 1877.868051][T20187] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4878'. [ 1878.196279][T20139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.224257][T20139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.260129][T20139] device bridge_slave_1 entered promiscuous mode [ 1878.374707][T20196] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4880'. [ 1878.384245][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4880'. [ 1878.401835][ T8175] Bluetooth: hci2: command 0x0409 tx timeout [ 1878.564712][T20139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1878.690296][T20139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1878.965242][T20139] team0: Port device team_slave_0 added [ 1879.071680][T20139] team0: Port device team_slave_1 added [ 1879.217021][T20139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1879.224042][T20139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1879.250138][ C0] vkms_vblank_simulate: vblank timer overrun [ 1879.369094][T20139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1879.479302][T20139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1879.497357][T20139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1879.618911][T20139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1879.760605][T20139] device hsr_slave_0 entered promiscuous mode [ 1879.787156][T20139] device hsr_slave_1 entered promiscuous mode [ 1879.802099][T20139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1879.809725][T20139] Cannot create hsr debugfs directory [ 1880.262195][T20245] device syzkaller0 entered promiscuous mode [ 1880.283084][T16042] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1880.329284][T14958] device hsr_slave_0 left promiscuous mode [ 1880.343832][T14958] device hsr_slave_1 left promiscuous mode [ 1880.353960][T14958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1880.367482][T14958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1880.400015][T14958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1880.416324][T14958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1880.427736][T14958] device bridge_slave_1 left promiscuous mode [ 1880.439930][T14958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1880.451342][T14958] device bridge_slave_0 left promiscuous mode [ 1880.463470][T14958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1880.496857][T16042] usb 2-1: Using ep0 maxpacket: 32 [ 1880.503989][T16042] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1880.544636][T16042] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1880.560413][T16042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.581934][T16042] usb 2-1: config 0 descriptor?? [ 1880.583093][T14958] device bridge0 left promiscuous mode [ 1880.591358][T16042] hub 2-1:0.0: bad descriptor, ignoring hub [ 1880.612057][T16042] hub: probe of 2-1:0.0 failed with error -5 [ 1880.625263][ T8175] Bluetooth: hci2: command 0x041b tx timeout [ 1880.636821][T16042] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1880.649483][T14958] device veth1_macvtap left promiscuous mode [ 1880.663562][T14958] device veth0_macvtap left promiscuous mode [ 1880.671050][T14958] device veth1_vlan left promiscuous mode [ 1880.676996][T14958] device veth0_vlan left promiscuous mode [ 1881.676784][T14958] team0 (unregistering): Port device team_slave_1 removed [ 1881.767608][T14958] team0 (unregistering): Port device team_slave_0 removed [ 1881.833489][T14958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1881.899787][T14958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1882.802559][T14958] bond0 (unregistering): Released all slaves [ 1882.848830][ T8175] Bluetooth: hci2: command 0x040f tx timeout [ 1883.347520][T16623] usb 2-1: USB disconnect, device number 33 [ 1885.072583][ T8175] Bluetooth: hci2: command 0x0419 tx timeout [ 1888.103821][T20139] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1888.140756][T20139] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1888.166636][T20139] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1888.219213][T20139] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1888.532801][T20139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1888.556897][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1888.587354][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1888.599542][T20139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1888.620968][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1888.632141][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1888.649503][T19673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.656733][T19673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1888.675728][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1888.689486][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1888.702676][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1888.714896][T19673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.722108][T19673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1888.784942][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1888.799555][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1888.816445][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1888.830882][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1888.840286][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1888.856346][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1888.875180][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1888.891670][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1888.904203][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1888.925824][T20139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1888.939780][T20139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1888.955004][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1888.964915][T19673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1889.790103][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1889.816706][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1889.834894][T20139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1890.514222][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1890.524171][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1890.573012][ T8912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1890.592068][ T8912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1890.601862][T18900] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1890.645806][T20139] device veth0_vlan entered promiscuous mode [ 1890.656662][ T8912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1890.686956][ T8912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1890.713526][T20139] device veth1_vlan entered promiscuous mode [ 1890.810065][ T8912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1890.824132][T18900] usb 6-1: Using ep0 maxpacket: 8 [ 1890.835878][T18900] usb 6-1: config 0 has no interfaces? [ 1890.867105][T18900] usb 6-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 1890.873648][ T8912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1890.895467][T18900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.916684][T20139] device veth0_macvtap entered promiscuous mode [ 1890.924746][T18900] usb 6-1: Product: syz [ 1890.941526][T18900] usb 6-1: Manufacturer: syz [ 1890.947749][T18900] usb 6-1: SerialNumber: syz [ 1890.954043][T20139] device veth1_macvtap entered promiscuous mode [ 1890.963671][T18900] usb 6-1: config 0 descriptor?? [ 1891.038695][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.068887][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.089673][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.109076][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.125542][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.154788][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.173254][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.195833][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.210581][T18900] usb 6-1: USB disconnect, device number 21 [ 1891.261310][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1891.272201][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.286770][T20139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1891.301383][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.347819][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.387589][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.414156][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.448470][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.473085][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.494624][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.516179][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.537719][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.556664][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1891.559320][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.587638][T20445] [ 1891.590020][T20445] ====================================================== [ 1891.597058][T20445] WARNING: possible circular locking dependency detected [ 1891.602579][T20139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1891.604076][T20445] 6.1.124-syzkaller #0 Not tainted [ 1891.604090][T20445] ------------------------------------------------------ [ 1891.604098][T20445] syz.7.4974/20445 is trying to acquire lock: [ 1891.627696][T20139] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.629465][T20445] ffff888062bf1f90 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xe5/0xad0 [ 1891.649638][T20445] [ 1891.649638][T20445] but task is already holding lock: [ 1891.657013][T20445] ffff888062bf0c70 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530 [ 1891.657676][T20139] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.666004][T20445] [ 1891.666004][T20445] which lock already depends on the new lock. [ 1891.666004][T20445] [ 1891.666013][T20445] [ 1891.666013][T20445] the existing dependency chain (in reverse order) is: [ 1891.666020][T20445] [ 1891.666020][T20445] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0} [ 1891.686519][T20139] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.694131][T20445] : [ 1891.694142][T20445] lock_acquire+0x1f8/0x5a0 [ 1891.694178][T20445] lock_sock_nested+0x44/0x100 [ 1891.721835][T20139] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.723190][T20445] smc_listen_out+0x11b/0x3d0 [ 1891.737129][T20445] process_one_work+0x8a9/0x11d0 [ 1891.742622][T20445] worker_thread+0xa47/0x1200 [ 1891.744462][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1891.747833][T20445] kthread+0x28d/0x320 [ 1891.759915][T20445] ret_from_fork+0x1f/0x30 [ 1891.764895][T20445] [ 1891.764895][T20445] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1891.767779][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1891.775085][T20445] validate_chain+0x1661/0x5950 [ 1891.775113][T20445] __lock_acquire+0x125b/0x1f80 [ 1891.793268][T20445] lock_acquire+0x1f8/0x5a0 [ 1891.798347][T20445] __flush_work+0xfe/0xad0 [ 1891.803308][T20445] __cancel_work_timer+0x519/0x6a0 [ 1891.805192][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1891.808950][T20445] smc_clcsock_release+0x5e/0xe0 [ 1891.808979][T20445] __smc_release+0x678/0x7f0 [ 1891.808996][T20445] smc_close_non_accepted+0xd4/0x1e0 [ 1891.809014][T20445] smc_close_active+0xa75/0xe20 [ 1891.809033][T20445] __smc_release+0xa0/0x7f0 [ 1891.809050][T20445] smc_release+0x2d5/0x530 [ 1891.809068][T20445] sock_close+0xcd/0x230 [ 1891.809086][T20445] __fput+0x3f6/0x8d0 [ 1891.809110][T20445] task_work_run+0x246/0x300 [ 1891.809136][T20445] exit_to_user_mode_loop+0xde/0x100 [ 1891.809156][T20445] exit_to_user_mode_prepare+0xb1/0x140 [ 1891.809175][T20445] syscall_exit_to_user_mode+0x60/0x270 [ 1891.809199][T20445] do_syscall_64+0x47/0xb0 [ 1891.809228][T20445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1891.809260][T20445] [ 1891.809260][T20445] other info that might help us debug this: [ 1891.809260][T20445] [ 1891.809268][T20445] Possible unsafe locking scenario: [ 1891.809268][T20445] [ 1891.809273][T20445] CPU0 CPU1 [ 1891.809279][T20445] ---- ---- [ 1891.809284][T20445] lock(sk_lock-AF_SMC/1); [ 1891.809308][T20445] lock( [ 1891.829599][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1891.833665][T20445] (work_completion)(&new_smc->smc_listen_work)); [ 1891.833683][T20445] lock(sk_lock-AF_SMC/1); [ 1891.850031][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1891.853787][T20445] lock((work_completion)(&new_smc->smc_listen_work) [ 1891.859144][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1891.863396][T20445] ); [ 1891.863403][T20445] [ 1891.863403][T20445] *** DEADLOCK *** [ 1891.863403][T20445] [ 1891.863409][T20445] 2 locks held by syz.7.4974/20445: [ 1891.863423][T20445] #0: ffff8880592c3e10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 1891.863486][T20445] #1: ffff888062bf0c70 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530 [ 1891.863545][T20445] [ 1891.863545][T20445] stack backtrace: [ 1891.863553][T20445] CPU: 1 PID: 20445 Comm: syz.7.4974 Not tainted 6.1.124-syzkaller #0 [ 1891.863582][T20445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1891.863595][T20445] Call Trace: [ 1891.863602][T20445] [ 1891.863612][T20445] dump_stack_lvl+0x1e3/0x2cb [ 1891.863647][T20445] ? nf_tcp_handle_invalid+0x642/0x642 [ 1891.863683][T20445] ? print_circular_bug+0x12b/0x1a0 [ 1892.056830][T20445] check_noncircular+0x2fa/0x3b0 [ 1892.061788][T20445] ? add_chain_block+0x850/0x850 [ 1892.066744][T20445] ? lockdep_lock+0x11f/0x2a0 [ 1892.071438][T20445] ? rcu_is_watching+0x11/0xb0 [ 1892.076226][T20445] ? _find_first_zero_bit+0xd0/0x100 [ 1892.081527][T20445] validate_chain+0x1661/0x5950 [ 1892.086385][T20445] ? deref_stack_reg+0x17c/0x210 [ 1892.091331][T20445] ? is_bpf_text_address+0x22/0x2a0 [ 1892.096550][T20445] ? __bfs+0x359/0x6e0 [ 1892.100640][T20445] ? reacquire_held_locks+0x660/0x660 [ 1892.106023][T20445] ? check_path+0x40/0x40 [ 1892.110359][T20445] ? noop_count+0x30/0x30 [ 1892.114706][T20445] ? __bfs+0x359/0x6e0 [ 1892.118798][T20445] ? look_up_lock_class+0x77/0x140 [ 1892.123918][T20445] ? register_lock_class+0x100/0x990 [ 1892.129221][T20445] ? check_path+0x21/0x40 [ 1892.133558][T20445] ? check_noncircular+0x1e3/0x3b0 [ 1892.138681][T20445] ? is_dynamic_key+0x260/0x260 [ 1892.143623][T20445] ? mark_lock+0x9a/0x340 [ 1892.148004][T20445] __lock_acquire+0x125b/0x1f80 [ 1892.152888][T20445] lock_acquire+0x1f8/0x5a0 [ 1892.157436][T20445] ? __flush_work+0xe5/0xad0 [ 1892.162047][T20445] ? read_lock_is_recursive+0x10/0x10 [ 1892.167530][T20445] ? reacquire_held_locks+0x660/0x660 [ 1892.172908][T20445] ? reacquire_held_locks+0x660/0x660 [ 1892.178284][T20445] ? reacquire_held_locks+0x660/0x660 [ 1892.183664][T20445] ? __flush_work+0xe5/0xad0 [ 1892.188261][T20445] __flush_work+0xfe/0xad0 [ 1892.192693][T20445] ? __flush_work+0xe5/0xad0 [ 1892.197291][T20445] ? flush_work+0x20/0x20 [ 1892.201634][T20445] ? print_irqtrace_events+0x210/0x210 [ 1892.207286][T20445] ? __cancel_work_timer+0x467/0x6a0 [ 1892.212581][T20445] __cancel_work_timer+0x519/0x6a0 [ 1892.217702][T20445] ? mark_lock+0x9a/0x340 [ 1892.222052][T20445] ? cancel_work_sync+0x20/0x20 [ 1892.226907][T20445] ? __smc_release+0x670/0x7f0 [ 1892.231680][T20445] ? __local_bh_enable_ip+0x164/0x1f0 [ 1892.237070][T20445] ? lockdep_hardirqs_on+0x94/0x130 [ 1892.242302][T20445] ? __local_bh_enable_ip+0x164/0x1f0 [ 1892.247692][T20445] ? __smc_release+0x670/0x7f0 [ 1892.252464][T20445] ? _local_bh_enable+0xa0/0xa0 [ 1892.257333][T20445] ? do_raw_spin_unlock+0x137/0x8a0 [ 1892.262550][T20445] smc_clcsock_release+0x5e/0xe0 [ 1892.267586][T20445] __smc_release+0x678/0x7f0 [ 1892.272201][T20445] smc_close_non_accepted+0xd4/0x1e0 [ 1892.277674][T20445] smc_close_active+0xa75/0xe20 [ 1892.282547][T20445] ? sock_no_sendpage_locked+0x1e0/0x1e0 [ 1892.288202][T20445] __smc_release+0xa0/0x7f0 [ 1892.292889][T20445] smc_release+0x2d5/0x530 [ 1892.297315][T20445] sock_close+0xcd/0x230 [ 1892.301567][T20445] ? sock_mmap+0x90/0x90 [ 1892.305817][T20445] __fput+0x3f6/0x8d0 [ 1892.309822][T20445] task_work_run+0x246/0x300 [ 1892.314436][T20445] ? task_work_cancel+0x2e0/0x2e0 [ 1892.319568][T20445] ? exit_to_user_mode_loop+0x39/0x100 [ 1892.325040][T20445] exit_to_user_mode_loop+0xde/0x100 [ 1892.330366][T20445] exit_to_user_mode_prepare+0xb1/0x140 [ 1892.336102][T20445] syscall_exit_to_user_mode+0x60/0x270 [ 1892.341712][T20445] do_syscall_64+0x47/0xb0 [ 1892.346152][T20445] ? clear_bhb_loop+0x45/0xa0 [ 1892.350840][T20445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1892.356753][T20445] RIP: 0033:0x7fc4d4385d29 [ 1892.361193][T20445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1892.380904][T20445] RSP: 002b:00007ffc5b65c5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1892.389327][T20445] RAX: 0000000000000000 RBX: 00000000001b53bd RCX: 00007fc4d4385d29 [ 1892.397394][T20445] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1892.405389][T20445] RBP: 00007fc4d4577ba0 R08: 0000000000000001 R09: 00007ffc5b65c8df [ 1892.413370][T20445] R10: 00007fc4d4000000 R11: 0000000000000246 R12: 00000000001b541b SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1892.421356][T20445] R13: 00007fc4d4575fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 1892.429342][T20445] [ 1892.436846][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1892.443262][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1892.533553][T20139] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 1893.214149][T10147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.265928][T10147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.384951][T10147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.501983][T10147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.379419][T10147] device hsr_slave_0 left promiscuous mode [ 1894.385704][T10147] device hsr_slave_1 left promiscuous mode [ 1894.392141][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1894.399883][T10147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1894.407602][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1894.415426][T10147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1894.423933][T10147] device bridge_slave_1 left promiscuous mode [ 1894.430453][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1894.438820][T10147] device bridge_slave_0 left promiscuous mode [ 1894.445044][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.455521][T10147] device bond0 left promiscuous mode [ 1894.461286][T10147] device bond_slave_0 left promiscuous mode [ 1894.467259][T10147] device bond_slave_1 left promiscuous mode [ 1894.473421][T10147] device veth1_macvtap left promiscuous mode [ 1894.479444][T10147] device veth0_macvtap left promiscuous mode [ 1894.485848][T10147] device veth1_vlan left promiscuous mode [ 1894.491773][T10147] device veth0_vlan left promiscuous mode [ 1894.676820][T10147] team0 (unregistering): Port device team_slave_1 removed [ 1894.688837][T10147] team0 (unregistering): Port device team_slave_0 removed [ 1894.722387][T10147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.758838][T10147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1894.816038][T10147] bond0 (unregistering): Released all slaves [ 1895.330507][T10147] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.500905][T10147] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.563364][T10147] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.628347][T10147] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.709014][T10147] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.755671][T10147] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.798479][T10147] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.863864][T10147] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.924095][T10147] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.979889][T10147] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.044060][T10147] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.118971][T10147] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.180402][T10147] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.226077][T10147] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.290295][T10147] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.365662][T10147] device netdevsim0 left promiscuous mode [ 1896.371862][T10147] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.575414][T10147] device hsr_slave_0 left promiscuous mode [ 1897.582055][T10147] device hsr_slave_1 left promiscuous mode [ 1897.588472][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1897.596065][T10147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.603833][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1897.611250][T10147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.619069][T10147] device bridge_slave_1 left promiscuous mode [ 1897.625331][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.633457][T10147] device bridge_slave_0 left promiscuous mode [ 1897.639798][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.652186][T10147] device hsr_slave_0 left promiscuous mode [ 1897.658564][T10147] device hsr_slave_1 left promiscuous mode [ 1897.664828][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1897.672386][T10147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.680061][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1897.687644][T10147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.695399][T10147] device bridge_slave_1 left promiscuous mode [ 1897.702199][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.710441][T10147] device bridge_slave_0 left promiscuous mode [ 1897.716632][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.726985][T10147] device hsr_slave_0 left promiscuous mode [ 1897.733771][T10147] device hsr_slave_1 left promiscuous mode [ 1897.740030][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1897.747877][T10147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.755989][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1897.763587][T10147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.771167][T10147] device bridge_slave_1 left promiscuous mode [ 1897.777449][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.785803][T10147] device bridge_slave_0 left promiscuous mode [ 1897.791970][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.801673][T10147] device dummy0 left promiscuous mode [ 1897.810340][T10147] device hsr_slave_0 left promiscuous mode [ 1897.816791][T10147] device hsr_slave_1 left promiscuous mode [ 1897.823040][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1897.830637][T10147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.838435][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1897.845869][T10147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.853907][T10147] device bridge_slave_1 left promiscuous mode [ 1897.860191][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.868039][T10147] device bridge_slave_0 left promiscuous mode [ 1897.874282][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.887612][T10147] device veth1_macvtap left promiscuous mode [ 1897.893838][T10147] device veth0_macvtap left promiscuous mode [ 1897.899995][T10147] device veth1_vlan left promiscuous mode [ 1897.906156][T10147] device veth0_vlan left promiscuous mode [ 1897.913766][T10147] device veth1_macvtap left promiscuous mode [ 1897.919848][T10147] device veth0_macvtap left promiscuous mode [ 1897.926017][T10147] device veth1_vlan left promiscuous mode [ 1897.931797][T10147] device veth0_vlan left promiscuous mode [ 1897.938757][T10147] device veth1_macvtap left promiscuous mode [ 1897.944958][T10147] device veth0_macvtap left promiscuous mode [ 1897.951040][T10147] device veth1_vlan left promiscuous mode [ 1897.956981][T10147] device veth0_vlan left promiscuous mode [ 1897.963475][T10147] device bond0 left promiscuous mode [ 1897.969027][T10147] device bond_slave_0 left promiscuous mode [ 1897.974942][T10147] device bond_slave_1 left promiscuous mode [ 1897.981226][T10147] device bridge0 left promiscuous mode [ 1897.989592][T10147] device veth1_macvtap left promiscuous mode [ 1897.995650][T10147] device veth0_macvtap left promiscuous mode [ 1898.001854][T10147] device veth1_vlan left promiscuous mode [ 1898.330539][T10147] team0 (unregistering): Port device team_slave_1 removed [ 1898.367375][T10147] team0 (unregistering): Port device team_slave_0 removed [ 1898.399914][T10147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1898.434177][T10147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1898.489690][T10147] bond0 (unregistering): Released all slaves [ 1898.727357][T10147] team0 (unregistering): Port device team_slave_1 removed [ 1898.760258][T10147] team0 (unregistering): Port device team_slave_0 removed [ 1898.792721][T10147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1898.826796][T10147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1898.880090][T10147] bond0 (unregistering): Released all slaves [ 1899.051515][T10147] team0 (unregistering): Port device team_slave_1 removed [ 1899.085583][T10147] team0 (unregistering): Port device team_slave_0 removed [ 1899.120331][T10147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1899.153963][T10147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1899.208960][T10147] bond0 (unregistering): Released all slaves [ 1899.530504][T10147] team0 (unregistering): Port device team_slave_1 removed [ 1899.563354][T10147] team0 (unregistering): Port device team_slave_0 removed [ 1899.617872][T10147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1899.651404][T10147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1899.706394][T10147] bond0 (unregistering): Released all slaves