last executing test programs: 3m1.520195165s ago: executing program 4 (id=21): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4e04, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x77f}}}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 2m58.572492853s ago: executing program 4 (id=25): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) 2m55.903953982s ago: executing program 4 (id=30): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$I2C(0x0, 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0x6808, 0x75, &(0x7f0000000240)="043cb60a56e27a4c68b366d3e58181b5c34b74bee631798684f5a56d6532ffca5d36143fdcec18cc8b3213976a3fc08aff92f2b89945b7b0c5eefa27023b1255d07451cb983965bf38fa80e4f5da4a21b5352bff6de3f6e27b29198193485b14b2dfafd1ad93bac454dc7168420ddbb1513d32409e"}], 0x2}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x3) 2m50.695567264s ago: executing program 4 (id=37): socket$unix(0x1, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x2) socket$inet6(0xa, 0x3, 0x3c) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2m49.304834199s ago: executing program 4 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="60bc010004a701002400128009000100626f6e64000000001400028008000700020000000800030008"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xc8}\xac\x06\x9c&\xf5\xe3j\xda*4\x9a1\xa0o\xa0G\xa5\xb8\xf4\x8dy\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x983U@\xf2M\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xd1\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\x9c\xa1&&\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84@\xeag\x94\x84\xd9\x1b\xc3OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91f\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeU\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x03D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00'/397, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r1, 0xffffffffffffffff, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4606, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r9], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r10}, 0x10) creat(0x0, 0x4b) 2m46.87303882s ago: executing program 4 (id=43): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x27125ae6fbb99f61, '\x00', 0x0, @sk_msg}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0/file0'}, 0x3a}, {@redirect_dir_off}, {@xino_off}, {@uuid_null}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20400, 0x38) getdents64(r2, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x301, 0x4800, 0x1}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x9, 0x9}) socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) 2m30.250362099s ago: executing program 32 (id=43): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x27125ae6fbb99f61, '\x00', 0x0, @sk_msg}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0/file0'}, 0x3a}, {@redirect_dir_off}, {@xino_off}, {@uuid_null}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20400, 0x38) getdents64(r2, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x301, 0x4800, 0x1}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x9, 0x9}) socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) 2m1.774226634s ago: executing program 1 (id=98): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="668546927ae520a8f3049a2f50ca1553a5e62dc469b5b2348ffe35a76a94a3ad96f8e87e3bd8a5c3c8ce4da39c468ccfb81bc03e88c8a813e9ce7cb1410024b82b58364f6dc5fbf35e04c17ccb4c793d5578c99cf2e1fe30481bb07c86c6806ad25840494578c1516bc6d6e1942cc9f6d3b5491d949c4b93d7a403ca75cb7bc8fea7d325645cbe4c87da88e362c3ae3206fe2d3d88d62500c4f5ccbc1af04079cc5d49c05f487f40ed97703cf5f46cc9d074e5a8811d3e43b5b4f6456c508e0695433ea9f6", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001800)="db", 0x1}], 0x1}}], 0x2, 0x0) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0x8}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/109, 0x6d}], 0x1}, 0x8}], 0x2, 0x100, 0x0) 2m0.245042454s ago: executing program 1 (id=99): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000ac0)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m55.873012337s ago: executing program 1 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000040), &(0x7f0000000340)=0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 1m54.936277129s ago: executing program 1 (id=107): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x27125ae6fbb99f61, '\x00', 0x0, @sk_msg}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0/file0'}, 0x3a}, {@redirect_dir_off}, {@xino_off}, {@uuid_null}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20400, 0x38) getdents64(r2, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x301, 0x4800, 0x1}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x9, 0x9}) socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) 1m50.93883305s ago: executing program 1 (id=113): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4044094) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102400, 0x19000) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x150) 1m48.290163056s ago: executing program 1 (id=117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r6 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @mcast2}, 0x1c) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/24, 0x18}], 0x1}, 0x3}], 0x1, 0x1, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1m33.151625342s ago: executing program 33 (id=117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r6 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @mcast2}, 0x1c) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/24, 0x18}], 0x1}, 0x3}], 0x1, 0x1, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 9.331209993s ago: executing program 2 (id=427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_open_dev$vim2m(0x0, 0x47b, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) 8.075594129s ago: executing program 2 (id=438): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="725eb862ce"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 6.348920945s ago: executing program 3 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1e2}], 0x1}}], 0x1, 0x400c0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 6.236865248s ago: executing program 2 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_procfs$pagemap(r0, &(0x7f0000000000)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1e2}], 0x1}}], 0x1, 0x400c0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 5.052929771s ago: executing program 3 (id=449): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) writev(r0, &(0x7f00000000c0), 0x0) 3.972419001s ago: executing program 3 (id=451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) 3.942526007s ago: executing program 2 (id=452): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[@rdmsr={0x66, 0x18, {0x915}}, @cpuid={0x64, 0x18, {0x0, 0x37}}, @out_dx={0x6a, 0x28, {0x5501, 0x1, 0x200}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x6e, 0x9, 0x2, 0x9}}], 0x90}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000000000001}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.015090506s ago: executing program 3 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1.759336373s ago: executing program 0 (id=458): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) 1.754033913s ago: executing program 2 (id=459): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x1, 0x8, 0x0, 0x0, @remote}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1.550596272s ago: executing program 3 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_procfs$pagemap(r0, &(0x7f0000000000)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1e2}], 0x1}}], 0x1, 0x400c0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 340.992553ms ago: executing program 3 (id=461): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x201e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 340.750758ms ago: executing program 0 (id=462): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x82083) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x3, 0x6000, 0x0, 0x0}], 0x1}) 212.659391ms ago: executing program 0 (id=463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) 172.549199ms ago: executing program 2 (id=464): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0x6808, 0x75, &(0x7f0000000240)="043cb60a56e27a4c68b366d3e58181b5c34b74bee631798684f5a56d6532ffca5d36143fdcec18cc8b3213976a3fc08aff92f2b89945b7b0c5eefa27023b1255d07451cb983965bf38fa80e4f5da4a21b5352bff6de3f6e27b29198193485b14b2dfafd1ad93bac454dc7168420ddbb1513d32409e"}], 0x2}) 77.001579ms ago: executing program 0 (id=465): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x201e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0) 49.853961ms ago: executing program 0 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1e2}], 0x1}}], 0x1, 0x400c0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 0s ago: executing program 0 (id=467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 92.199492][ T1230] cfg80211: failed to load regulatory.db [ 92.710166][ T5794] cgroup: Unknown subsys name 'net' [ 92.951096][ T5794] cgroup: Unknown subsys name 'cpuset' [ 93.005877][ T5794] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.972427][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.889495][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.924357][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.928720][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.946752][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.991509][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.994220][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.008186][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.012166][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.013893][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.016652][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.018023][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.019804][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.020390][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.021305][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.036704][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.037503][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.038740][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.039816][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.057147][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.065791][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.077871][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.098889][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.105687][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.118281][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.124252][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.093128][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 99.346425][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 99.360328][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 99.441370][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 99.743410][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 99.963772][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.963881][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.964439][ T5811] bridge_slave_0: entered allmulticast mode [ 99.973527][ T5811] bridge_slave_0: entered promiscuous mode [ 100.025839][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.025995][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.026164][ T5811] bridge_slave_1: entered allmulticast mode [ 100.028164][ T5811] bridge_slave_1: entered promiscuous mode [ 100.116729][ T5817] Bluetooth: hci1: command tx timeout [ 100.116735][ T5806] Bluetooth: hci2: command tx timeout [ 100.116910][ T5817] Bluetooth: hci3: command tx timeout [ 100.195613][ T5808] Bluetooth: hci4: command tx timeout [ 100.275261][ T5808] Bluetooth: hci0: command tx timeout [ 100.526233][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.526449][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.526648][ T5807] bridge_slave_0: entered allmulticast mode [ 100.529582][ T5807] bridge_slave_0: entered promiscuous mode [ 100.636229][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.636345][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.636482][ T5812] bridge_slave_0: entered allmulticast mode [ 100.638443][ T5812] bridge_slave_0: entered promiscuous mode [ 100.646288][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.649424][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.649657][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.649889][ T5807] bridge_slave_1: entered allmulticast mode [ 100.653121][ T5807] bridge_slave_1: entered promiscuous mode [ 100.746471][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.746632][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.746914][ T5812] bridge_slave_1: entered allmulticast mode [ 100.749305][ T5812] bridge_slave_1: entered promiscuous mode [ 100.754136][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.887839][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.887972][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.888136][ T5816] bridge_slave_0: entered allmulticast mode [ 100.890121][ T5816] bridge_slave_0: entered promiscuous mode [ 101.176146][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.176315][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.176511][ T5816] bridge_slave_1: entered allmulticast mode [ 101.178693][ T5816] bridge_slave_1: entered promiscuous mode [ 101.429816][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.430084][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.430249][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.430427][ T5804] bridge_slave_0: entered allmulticast mode [ 101.432535][ T5804] bridge_slave_0: entered promiscuous mode [ 101.510484][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.513133][ T5811] team0: Port device team_slave_0 added [ 101.519738][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.520225][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.520362][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.520563][ T5804] bridge_slave_1: entered allmulticast mode [ 101.524307][ T5804] bridge_slave_1: entered promiscuous mode [ 101.588840][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.591712][ T5811] team0: Port device team_slave_1 added [ 101.769366][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.029001][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.188343][ T5807] team0: Port device team_slave_0 added [ 102.191976][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.205111][ T5808] Bluetooth: hci2: command tx timeout [ 102.205128][ T5817] Bluetooth: hci3: command tx timeout [ 102.205146][ T5808] Bluetooth: hci1: command tx timeout [ 102.275258][ T5817] Bluetooth: hci4: command tx timeout [ 102.294104][ T5812] team0: Port device team_slave_0 added [ 102.296111][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.296129][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.296160][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.326495][ T5807] team0: Port device team_slave_1 added [ 102.331465][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.355295][ T5817] Bluetooth: hci0: command tx timeout [ 102.428733][ T5812] team0: Port device team_slave_1 added [ 102.429938][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.429949][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.429969][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.617884][ T5816] team0: Port device team_slave_0 added [ 103.077980][ T5816] team0: Port device team_slave_1 added [ 103.139054][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.139069][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.139089][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.141374][ T5804] team0: Port device team_slave_0 added [ 103.256738][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.256755][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.256774][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.258984][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.258995][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.259013][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.261212][ T5804] team0: Port device team_slave_1 added [ 103.497036][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.497049][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.497068][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.607373][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.607387][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.607405][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.796952][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.796970][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.796999][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.804654][ T5811] hsr_slave_0: entered promiscuous mode [ 103.808048][ T5811] hsr_slave_1: entered promiscuous mode [ 103.817740][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.817760][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.817790][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.036766][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.036780][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.036799][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.275194][ T5806] Bluetooth: hci3: command tx timeout [ 104.275231][ T5806] Bluetooth: hci2: command tx timeout [ 104.275397][ T5817] Bluetooth: hci1: command tx timeout [ 104.355608][ T5817] Bluetooth: hci4: command tx timeout [ 104.392709][ T5807] hsr_slave_0: entered promiscuous mode [ 104.393851][ T5807] hsr_slave_1: entered promiscuous mode [ 104.394689][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 104.394782][ T5807] Cannot create hsr debugfs directory [ 104.435495][ T5817] Bluetooth: hci0: command tx timeout [ 104.492057][ T5812] hsr_slave_0: entered promiscuous mode [ 104.493018][ T5812] hsr_slave_1: entered promiscuous mode [ 104.493759][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 104.493778][ T5812] Cannot create hsr debugfs directory [ 104.723011][ T5816] hsr_slave_0: entered promiscuous mode [ 104.724008][ T5816] hsr_slave_1: entered promiscuous mode [ 104.724706][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 104.724727][ T5816] Cannot create hsr debugfs directory [ 104.952651][ T5804] hsr_slave_0: entered promiscuous mode [ 104.953702][ T5804] hsr_slave_1: entered promiscuous mode [ 104.954483][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 104.954505][ T5804] Cannot create hsr debugfs directory [ 106.356554][ T5808] Bluetooth: hci2: command tx timeout [ 106.356590][ T5808] Bluetooth: hci3: command tx timeout [ 106.356647][ T5817] Bluetooth: hci1: command tx timeout [ 106.435560][ T5817] Bluetooth: hci4: command tx timeout [ 106.479354][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.515237][ T5817] Bluetooth: hci0: command tx timeout [ 106.525685][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.559954][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.596403][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.734111][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.772154][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.810446][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.868452][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.989958][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.028725][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.063474][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.098920][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.243734][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.278897][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.312791][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.356131][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.498738][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.499761][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.537214][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.579142][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.613997][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.697894][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.761778][ T1651] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.762322][ T1651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.783602][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.813684][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.813879][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.890610][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.900366][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.933393][ T1651] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.933543][ T1651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.984449][ T749] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.984598][ T749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.023643][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.068631][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.068781][ T749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.099719][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.124127][ T1651] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.124247][ T1651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.231956][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.261441][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.298547][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.298770][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.366299][ T1651] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.366448][ T1651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.429544][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.490930][ T1651] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.492005][ T1651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.566565][ T1651] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.566712][ T1651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.632243][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.971771][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.006812][ T5811] veth0_vlan: entered promiscuous mode [ 109.033837][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.080437][ T5811] veth1_vlan: entered promiscuous mode [ 109.298051][ T5807] veth0_vlan: entered promiscuous mode [ 109.302238][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.341964][ T5811] veth0_macvtap: entered promiscuous mode [ 109.363585][ T5807] veth1_vlan: entered promiscuous mode [ 109.387357][ T5811] veth1_macvtap: entered promiscuous mode [ 109.506644][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.518771][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.558178][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.607398][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.611273][ T5807] veth0_macvtap: entered promiscuous mode [ 109.618638][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.647560][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.660910][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.663704][ T5807] veth1_macvtap: entered promiscuous mode [ 109.674938][ T5816] veth0_vlan: entered promiscuous mode [ 109.814370][ T5816] veth1_vlan: entered promiscuous mode [ 109.903245][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.954955][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.988659][ T5804] veth0_vlan: entered promiscuous mode [ 109.990207][ T5812] veth0_vlan: entered promiscuous mode [ 110.013641][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.040825][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.061891][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.072181][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.095342][ T5804] veth1_vlan: entered promiscuous mode [ 110.098342][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.098368][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.103064][ T5812] veth1_vlan: entered promiscuous mode [ 110.268382][ T5816] veth0_macvtap: entered promiscuous mode [ 110.285371][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.285392][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.350377][ T5816] veth1_macvtap: entered promiscuous mode [ 110.454472][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.454494][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.522117][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.522854][ T5804] veth0_macvtap: entered promiscuous mode [ 110.528867][ T5812] veth0_macvtap: entered promiscuous mode [ 110.652508][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.668086][ T5804] veth1_macvtap: entered promiscuous mode [ 110.671946][ T5812] veth1_macvtap: entered promiscuous mode [ 110.690585][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.690608][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.727832][ T749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.730111][ T749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.731826][ T749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.733905][ T749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.822552][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.844679][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.087162][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.103888][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.937198][ T1834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.968618][ T1834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.000541][ T1834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.015394][ T1834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.278436][ T1834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.308806][ T1834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.313470][ T1834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.673029][ T1834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.679202][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.679227][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.166112][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.166135][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.075481][ T1834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.075505][ T1834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.593432][ T5945] bond1 (unregistering): Released all slaves [ 117.461739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.580052][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.580076][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.796753][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.796777][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.984709][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.228916][ T2539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.228947][ T2539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.315789][ T5956] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 118.387894][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.573576][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.974289][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.272146][ T5961] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.660690][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.951154][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.214836][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.827269][ T1230] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.835351][ T5863] IPVS: starting estimator thread 0... [ 121.019577][ T1230] usb 1-1: Using ep0 maxpacket: 8 [ 121.054113][ T1230] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 121.054145][ T1230] usb 1-1: config 0 has no interface number 0 [ 121.054199][ T1230] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.054224][ T1230] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 121.054251][ T1230] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.054279][ T1230] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.054326][ T1230] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 121.054350][ T1230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.205146][ T5978] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.229519][ T5979] IPVS: using max 8 ests per chain, 19200 per kthread [ 121.262436][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.314638][ T1230] usb 1-1: config 0 descriptor?? [ 121.365146][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 121.392179][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.392215][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.392239][ T5978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.392284][ T5978] usb 5-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 121.392308][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.247840][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.320294][ T5817] Bluetooth: hci3: unexpected event 0x08 length: 11 > 4 [ 122.347923][ T5978] usb 5-1: config 0 descriptor?? [ 122.550570][ T1230] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 122.895025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.895082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.895131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.895173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.895217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.895265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.895310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.895354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.895400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.335712][ T1230] usb 1-1: USB disconnect, device number 2 [ 123.760642][ T1230] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 123.763439][ T5978] nintendo 0003:057E:201E.0001: item fetching failed at offset 5/7 [ 123.764272][ T5978] nintendo 0003:057E:201E.0001: HID parse failed [ 123.839698][ T5978] nintendo 0003:057E:201E.0001: probe - fail = -22 [ 123.839824][ T5978] nintendo 0003:057E:201E.0001: probe with driver nintendo failed with error -22 [ 123.992139][ T5978] usb 5-1: USB disconnect, device number 2 [ 124.406160][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 126.048751][ T6006] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.760209][ T6033] input: syz1 as /devices/virtual/input/input6 [ 130.152200][ T6026] bond1 (unregistering): Released all slaves [ 130.619133][ T6044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.28'. [ 130.765123][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.965669][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.965703][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 130.965749][ T5908] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 130.965774][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.327425][ T5873] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 132.347339][ T5908] usb 2-1: config 0 descriptor?? [ 132.497859][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.497890][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 132.497943][ T5873] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 132.497963][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.512026][ T5873] usb 5-1: config 0 descriptor?? [ 132.658842][ T5873] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 132.659236][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 133.149434][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.169039][ T5908] usbhid 2-1:0.0: can't add hid device: -32 [ 133.169176][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 133.179024][ T5908] usb 2-1: USB disconnect, device number 2 [ 133.283884][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.262920][ T6066] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 134.262973][ T6066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.476431][ T5873] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 134.481650][ T5873] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 134.481721][ T5873] usb 5-1: media controller created [ 134.522304][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.559017][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 134.559154][ T5873] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 134.587605][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 134.670472][ T5873] dvb-usb: schedule remote query interval to 150 msecs. [ 134.670499][ T5873] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 134.827675][ T5873] dvb-usb: bulk message failed: -22 (1/0) [ 134.827735][ T5873] dvb-usb: error while querying for an remote control event. [ 134.986383][ T6073] process 'syz.2.33' launched '/dev/fd/6' with NULL argv: empty string added [ 135.002568][ T5873] dvb-usb: bulk message failed: -22 (1/0) [ 135.002599][ T5873] dvb-usb: error while querying for an remote control event. [ 135.105046][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.162926][ T5873] dvb-usb: bulk message failed: -22 (1/0) [ 135.163721][ T5873] dvb-usb: error while querying for an remote control event. [ 135.334365][ T5873] dvb-usb: bulk message failed: -22 (1/0) [ 135.334591][ T5873] dvb-usb: error while querying for an remote control event. [ 135.495691][ T5873] dvb-usb: bulk message failed: -22 (1/0) [ 135.495910][ T5873] dvb-usb: error while querying for an remote control event. [ 135.655237][ T5873] dvb-usb: bulk message failed: -22 (1/0) [ 135.655271][ T5873] dvb-usb: error while querying for an remote control event. [ 135.776407][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.797073][ T5873] usb 5-1: USB disconnect, device number 3 [ 136.410504][ T6074] netlink: 'syz.0.35': attribute type 2 has an invalid length. [ 136.888656][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.895868][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 136.927155][ T5873] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 137.024671][ T6085] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.680826][ T977] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.736591][ T6092] netlink: 36 bytes leftover after parsing attributes in process `syz.4.40'. [ 138.575144][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 138.584063][ T977] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 138.584096][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.584118][ T977] usb 1-1: Product: syz [ 138.584133][ T977] usb 1-1: Manufacturer: syz [ 138.584148][ T977] usb 1-1: SerialNumber: syz [ 138.748148][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.748354][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.177589][ T977] usb 1-1: config 0 descriptor?? [ 139.387004][ T977] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 139.452788][ T6099] input: syz1 as /devices/virtual/input/input8 [ 140.037171][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.225218][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 140.330977][ T5892] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 140.331017][ T5892] usb 4-1: config 0 has no interface number 0 [ 140.331066][ T5892] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.331092][ T5892] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 140.331119][ T5892] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.331146][ T5892] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.331192][ T5892] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 140.331217][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.451995][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.812624][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.515830][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.539330][ T977] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 141.588403][ T5892] usb 4-1: config 0 descriptor?? [ 141.629341][ T5892] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 141.658036][ T5908] usb 1-1: USB disconnect, device number 3 [ 141.813979][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.938076][ T5873] usb 4-1: USB disconnect, device number 2 [ 142.004306][ T5873] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 143.960992][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.628173][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.691376][ T5892] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 144.761210][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.869098][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.869130][ T5892] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 144.869186][ T5892] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 144.869211][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.936953][ T5892] usb 3-1: config 0 descriptor?? [ 144.941513][ T5892] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 144.941547][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 144.971095][ T5892] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 144.988158][ T5892] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 144.988219][ T5892] usb 3-1: media controller created [ 145.013581][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.038991][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 145.039081][ T5892] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 145.058056][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 145.061596][ T5892] dvb-usb: schedule remote query interval to 150 msecs. [ 145.061620][ T5892] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 145.305882][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 145.305917][ T5892] dvb-usb: error while querying for an remote control event. [ 145.309189][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'. [ 145.350699][ T6128] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 145.546895][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 145.546927][ T5892] dvb-usb: error while querying for an remote control event. [ 145.868457][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.445039][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 151.445076][ T5892] dvb-usb: error while querying for an remote control event. [ 151.750497][ T5873] usb 3-1: USB disconnect, device number 2 [ 152.107838][ T6145] input: syz1 as /devices/virtual/input/input10 [ 152.388358][ T5873] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 154.533052][ T6160] netlink: 36 bytes leftover after parsing attributes in process `syz.3.57'. [ 154.655492][ T5908] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.678377][ T5978] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 155.087080][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 155.670727][ T5908] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 155.670751][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.670809][ T5908] usb 1-1: Product: syz [ 155.670820][ T5908] usb 1-1: Manufacturer: syz [ 155.670830][ T5908] usb 1-1: SerialNumber: syz [ 155.675659][ T5978] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.675690][ T5978] usb 3-1: config 0 has no interface number 0 [ 155.675750][ T5978] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 155.675803][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.689420][ T5978] usb 3-1: config 0 descriptor?? [ 155.769235][ T5978] usb 3-1: selecting invalid altsetting 1 [ 155.770002][ T5978] dvb_ttusb_budget: ttusb_init_controller: error [ 155.770015][ T5978] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 155.835044][ T5908] usb 1-1: config 0 descriptor?? [ 156.054463][ T5908] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 156.626361][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.658044][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.665589][ T5908] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 157.759641][ T5978] DVB: Unable to find symbol cx22700_attach() [ 157.958162][ T10] usb 1-1: USB disconnect, device number 4 [ 158.585131][ T1230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 158.590834][ T5978] DVB: Unable to find symbol tda10046_attach() [ 158.590851][ T5978] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 158.638549][ T5978] usb 3-1: USB disconnect, device number 3 [ 158.743662][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.869191][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.895266][ T1230] usb 4-1: Using ep0 maxpacket: 8 [ 159.541914][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.573061][ T1230] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 159.573094][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.573116][ T1230] usb 4-1: Product: syz [ 159.573132][ T1230] usb 4-1: Manufacturer: syz [ 159.573147][ T1230] usb 4-1: SerialNumber: syz [ 159.606562][ T5981] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.661847][ T1230] usb 4-1: config 0 descriptor?? [ 159.845325][ T5981] usb 1-1: device descriptor read/64, error -71 [ 159.898587][ T1230] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.125894][ T5981] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.266203][ T5981] usb 1-1: device descriptor read/64, error -71 [ 160.380852][ T5981] usb usb1-port1: attempt power cycle [ 160.786094][ T5981] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.833867][ T5981] usb 1-1: device descriptor read/8, error -71 [ 161.177515][ T5981] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 161.211492][ T5981] usb 1-1: device descriptor read/8, error -71 [ 161.319482][ T5981] usb usb1-port1: unable to enumerate USB device [ 161.681514][ T1230] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 162.329087][ T1230] usb 4-1: USB disconnect, device number 3 [ 162.778140][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.780477][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.781810][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.784342][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.786428][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.373481][ T1230] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.965198][ T1230] usb 2-1: Using ep0 maxpacket: 8 [ 163.967216][ T1230] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 163.967236][ T1230] usb 2-1: config 0 has no interface number 0 [ 163.967276][ T1230] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.967292][ T1230] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 163.967310][ T1230] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.967329][ T1230] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.967359][ T1230] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 163.967375][ T1230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.971578][ T1230] usb 2-1: config 0 descriptor?? [ 164.117115][ T1230] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 164.383639][ T1230] usb 2-1: USB disconnect, device number 3 [ 164.401784][ T1230] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 164.916658][ T5817] Bluetooth: hci5: command tx timeout [ 166.007356][ T5981] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.996936][ T5817] Bluetooth: hci5: command tx timeout [ 167.180747][ T5981] usb 3-1: Using ep0 maxpacket: 8 [ 167.809403][ T5981] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 167.809437][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.809476][ T5981] usb 3-1: Product: syz [ 167.809492][ T5981] usb 3-1: Manufacturer: syz [ 167.809507][ T5981] usb 3-1: SerialNumber: syz [ 167.863866][ T5981] usb 3-1: config 0 descriptor?? [ 168.107405][ T5981] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 169.405160][ T5806] Bluetooth: hci5: command tx timeout [ 170.158073][ T5981] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 170.162385][ T5981] usb 3-1: USB disconnect, device number 4 [ 170.255454][ T5994] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.408799][ T5980] udevd[5980]: setting mode of /dev/bus/usb/003/004 to 020664 failed: No such file or directory [ 170.458412][ T5994] usb 4-1: device descriptor read/64, error -71 [ 170.506106][ T5980] udevd[5980]: setting owner of /dev/bus/usb/003/004 to uid=0, gid=0 failed: No such file or directory [ 170.735378][ T5994] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.767991][ T6252] netlink: 'syz.2.79': attribute type 2 has an invalid length. [ 170.770736][ T6252] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 170.770768][ T6252] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 170.770822][ T6252] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.875225][ T5994] usb 4-1: device descriptor read/64, error -71 [ 171.033127][ T5994] usb usb4-port1: attempt power cycle [ 171.272019][ T3584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.485559][ T5806] Bluetooth: hci5: command 0x0419 tx timeout [ 171.615511][ T5994] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.646403][ T5994] usb 4-1: device descriptor read/8, error -71 [ 171.729281][ T3584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.789739][ T6191] chnl_net:caif_netlink_parms(): no params data found [ 171.955405][ T5994] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 171.986381][ T5994] usb 4-1: device descriptor read/8, error -71 [ 172.104354][ T5994] usb usb4-port1: unable to enumerate USB device [ 172.851893][ T3584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.567133][ T5817] Bluetooth: hci5: command 0x0419 tx timeout [ 173.635528][ T5873] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.916906][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 174.010548][ T5873] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 174.010587][ T5873] usb 4-1: config 0 has no interface number 0 [ 174.010770][ T5873] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.010795][ T5873] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 174.010821][ T5873] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.010849][ T5873] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.010894][ T5873] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.010918][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.117879][ T5873] usb 4-1: config 0 descriptor?? [ 174.139971][ T5873] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 174.553452][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-1) [ 174.561987][ T5978] usb 4-1: USB disconnect, device number 8 [ 174.671336][ T5978] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 177.780150][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.891056][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.024421][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.235498][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.561112][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.868228][ T3584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.060963][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.063842][ T6281] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 179.108222][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.108381][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.108631][ T6191] bridge_slave_0: entered allmulticast mode [ 179.116319][ T6191] bridge_slave_0: entered promiscuous mode [ 179.763281][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.785243][ T1230] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 181.408885][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.466045][ T1230] usb 1-1: device descriptor read/64, error -71 [ 181.656913][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.657135][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.657400][ T6191] bridge_slave_1: entered allmulticast mode [ 181.660353][ T6191] bridge_slave_1: entered promiscuous mode [ 181.705121][ T1230] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 182.011636][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.095137][ T1230] usb 1-1: device descriptor read/64, error -71 [ 182.208512][ T1230] usb usb1-port1: attempt power cycle [ 184.452907][ T6191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.594389][ T6191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.738077][ T6333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.97'. [ 185.393776][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.95'. [ 186.624896][ T6191] team0: Port device team_slave_0 added [ 186.662038][ T6191] team0: Port device team_slave_1 added [ 186.705199][ T5994] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 186.855045][ T5994] usb 2-1: Using ep0 maxpacket: 8 [ 186.909571][ T5994] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 186.909604][ T5994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.909625][ T5994] usb 2-1: Product: syz [ 186.909640][ T5994] usb 2-1: Manufacturer: syz [ 186.909655][ T5994] usb 2-1: SerialNumber: syz [ 187.274717][ T5994] usb 2-1: config 0 descriptor?? [ 187.909966][ T5994] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 189.189392][ T5994] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 189.520772][ T6352] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 189.574873][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.574893][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.574921][ T6191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.580319][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.580340][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.580370][ T6191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.972874][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.663455][ T5978] usb 2-1: USB disconnect, device number 4 [ 191.123507][ T3584] bridge_slave_1: left allmulticast mode [ 191.123677][ T3584] bridge_slave_1: left promiscuous mode [ 191.130696][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.603177][ T1230] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 191.855124][ T1230] usb 4-1: Using ep0 maxpacket: 8 [ 191.857823][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.857858][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.857880][ T1230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.857922][ T1230] usb 4-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 191.857944][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.773249][ T1230] usb 4-1: config 0 descriptor?? [ 192.806247][ T3584] bridge_slave_0: left allmulticast mode [ 192.806279][ T3584] bridge_slave_0: left promiscuous mode [ 192.811998][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.246902][ T1230] usbhid 4-1:0.0: can't add hid device: -71 [ 193.247099][ T1230] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 193.354009][ T1230] usb 4-1: USB disconnect, device number 9 [ 196.225748][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 197.011355][ T6401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.113'. [ 197.155491][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 197.162579][ T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.162609][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.162628][ T31] usb 4-1: Product: syz [ 197.162642][ T31] usb 4-1: Manufacturer: syz [ 197.162655][ T31] usb 4-1: SerialNumber: syz [ 197.198499][ T31] usb 4-1: config 0 descriptor?? [ 197.410066][ T31] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.685323][ T31] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 199.814340][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.814428][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.894681][ T977] usb 4-1: USB disconnect, device number 10 [ 211.278951][ T977] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 211.425056][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 211.427766][ T977] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 211.427826][ T977] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 211.427851][ T977] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.427870][ T977] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.427885][ T977] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 211.430424][ T977] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 211.430451][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.430466][ T977] usb 4-1: Product: syz [ 211.430476][ T977] usb 4-1: Manufacturer: syz [ 211.430487][ T977] usb 4-1: SerialNumber: syz [ 211.533292][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.547461][ T977] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 211.547540][ T977] imon 4-1:155.0: unable to initialize intf0, err -90 [ 211.547551][ T977] imon:imon_probe: failed to initialize context! [ 211.547560][ T977] imon 4-1:155.0: unable to register, err -19 [ 211.625831][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.648449][ T3584] bond0 (unregistering): Released all slaves [ 211.755990][ T6447] Zero length message leads to an empty skb [ 212.436119][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.443006][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.255258][ T977] usb 4-1: USB disconnect, device number 11 [ 214.692287][ T6191] hsr_slave_0: entered promiscuous mode [ 214.702193][ T6191] hsr_slave_1: entered promiscuous mode [ 214.704763][ T6191] debugfs: 'hsr0' already exists in 'hsr' [ 214.704791][ T6191] Cannot create hsr debugfs directory [ 214.848265][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.850566][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.851730][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.853128][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.853971][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.535149][ T5994] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 216.889469][ T5994] usb 4-1: Using ep0 maxpacket: 8 [ 216.921150][ T5817] Bluetooth: hci2: command tx timeout [ 217.019333][ T5994] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 217.019366][ T5994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.019388][ T5994] usb 4-1: Product: syz [ 217.019403][ T5994] usb 4-1: Manufacturer: syz [ 217.019419][ T5994] usb 4-1: SerialNumber: syz [ 217.077860][ T5994] usb 4-1: config 0 descriptor?? [ 217.181781][ T5892] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 217.283920][ T5994] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 217.355760][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 217.372942][ T5892] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 217.372970][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.372989][ T5892] usb 3-1: config 0 has no interface number 0 [ 217.373035][ T5892] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.373057][ T5892] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.373096][ T5892] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 217.373117][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.516684][ T5892] usb 3-1: config 0 descriptor?? [ 217.531301][ T5892] ldusb 3-1:0.55: Interrupt in endpoint not found [ 217.735634][ T5894] usb 3-1: USB disconnect, device number 5 [ 217.926900][ T5994] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 218.039780][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.062768][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.064830][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.088143][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.096212][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.733018][ T5817] Bluetooth: hci2: command tx timeout [ 220.198883][ T5817] Bluetooth: hci4: command tx timeout [ 220.247212][ T5893] usb 4-1: USB disconnect, device number 12 [ 221.017188][ T6545] netlink: 'syz.3.147': attribute type 2 has an invalid length. [ 221.551795][ T5994] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 221.576884][ T6543] input: syz1 as /devices/virtual/input/input11 [ 221.707429][ T5994] usb 1-1: Using ep0 maxpacket: 8 [ 221.717558][ T5994] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 221.717591][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.717619][ T5994] usb 1-1: Product: syz [ 221.717635][ T5994] usb 1-1: Manufacturer: syz [ 221.717650][ T5994] usb 1-1: SerialNumber: syz [ 221.800999][ T5994] usb 1-1: config 0 descriptor?? [ 221.840395][ T5125] Bluetooth: hci2: command tx timeout [ 222.023156][ T5994] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 222.462924][ T5125] Bluetooth: hci3: command 0x0406 tx timeout [ 222.612009][ T5125] Bluetooth: hci1: command 0x0406 tx timeout [ 222.612054][ T5125] Bluetooth: hci0: command 0x0406 tx timeout [ 222.612837][ T5125] Bluetooth: hci4: command tx timeout [ 223.350920][ T5994] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 223.875745][ T5817] Bluetooth: hci2: command tx timeout [ 223.955292][ T3584] hsr_slave_0: left promiscuous mode [ 223.996634][ T3584] hsr_slave_1: left promiscuous mode [ 223.999496][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.999605][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.344305][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.344336][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.675134][ T5817] Bluetooth: hci4: command tx timeout [ 224.809886][ T5994] usb 1-1: USB disconnect, device number 12 [ 224.874201][ T3584] veth1_macvtap: left promiscuous mode [ 224.882419][ T3584] veth0_macvtap: left promiscuous mode [ 224.882888][ T3584] veth1_vlan: left promiscuous mode [ 224.883321][ T3584] veth0_vlan: left promiscuous mode [ 225.055204][ T1230] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 225.215185][ T1230] usb 4-1: Using ep0 maxpacket: 8 [ 225.218618][ T1230] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 225.218652][ T1230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.218671][ T1230] usb 4-1: config 0 has no interface number 0 [ 225.218711][ T1230] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.218733][ T1230] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.218773][ T1230] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 225.218796][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.232222][ T1230] usb 4-1: config 0 descriptor?? [ 225.247147][ T1230] ldusb 4-1:0.55: Interrupt in endpoint not found [ 225.295090][ T5994] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 225.440453][ T5893] usb 4-1: USB disconnect, device number 13 [ 225.455151][ T5994] usb 1-1: Using ep0 maxpacket: 8 [ 225.489994][ T5994] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 225.490027][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.490048][ T5994] usb 1-1: Product: syz [ 225.490063][ T5994] usb 1-1: Manufacturer: syz [ 225.490078][ T5994] usb 1-1: SerialNumber: syz [ 225.502025][ T5994] usb 1-1: config 0 descriptor?? [ 225.719694][ T5994] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 226.091176][ T6584] input: syz1 as /devices/virtual/input/input12 [ 226.145140][ T5893] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 226.492116][ T5994] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 226.570454][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.570481][ T5893] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 226.570535][ T5893] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 226.570558][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.580382][ T5893] usb 3-1: config 0 descriptor?? [ 226.612517][ T5893] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 226.612566][ T5893] dvb-usb: bulk message failed: -22 (3/0) [ 226.624691][ T5893] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 226.627596][ T5893] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 226.627662][ T5893] usb 3-1: media controller created [ 226.630708][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.832872][ T5817] Bluetooth: hci4: command tx timeout [ 227.603049][ T5893] dvb-usb: bulk message failed: -22 (6/0) [ 227.603149][ T5893] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 227.617536][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 227.620786][ T5893] dvb-usb: schedule remote query interval to 150 msecs. [ 227.620808][ T5893] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 227.778807][ T1230] dvb-usb: bulk message failed: -22 (1/0) [ 227.778847][ T1230] dvb-usb: error while querying for an remote control event. [ 227.936457][ T1230] dvb-usb: bulk message failed: -22 (1/0) [ 227.936491][ T1230] dvb-usb: error while querying for an remote control event. [ 228.042825][ T6598] dvb-usb: bulk message failed: -22 (2/0) [ 228.892347][ T1230] dvb-usb: bulk message failed: -22 (1/0) [ 228.892384][ T1230] dvb-usb: error while querying for an remote control event. [ 229.009740][ T977] usb 1-1: USB disconnect, device number 13 [ 229.045100][ T1230] dvb-usb: bulk message failed: -22 (1/0) [ 229.045135][ T1230] dvb-usb: error while querying for an remote control event. [ 229.131474][ T6600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.159'. [ 229.205124][ T1230] dvb-usb: bulk message failed: -22 (1/0) [ 229.205162][ T1230] dvb-usb: error while querying for an remote control event. [ 229.409234][ T1230] dvb-usb: bulk message failed: -22 (1/0) [ 229.409280][ T1230] dvb-usb: error while querying for an remote control event. [ 229.574468][ T1230] dvb-usb: bulk message failed: -22 (1/0) [ 229.574504][ T1230] dvb-usb: error while querying for an remote control event. [ 229.958903][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.232526][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.405120][ T5978] usb 3-1: USB disconnect, device number 6 [ 230.407074][ T1230] dvb-usb: bulk message failed: -22 (1/0) [ 230.407106][ T1230] dvb-usb: error while querying for an remote control event. [ 230.702756][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.757578][ T5978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 231.409938][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.557085][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.655945][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 231.674592][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.866749][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 232.326133][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.574666][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.724206][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.731306][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.774449][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.851343][ T6493] chnl_net:caif_netlink_parms(): no params data found [ 236.299309][ T6511] chnl_net:caif_netlink_parms(): no params data found [ 236.505074][ T5994] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 236.665127][ T5994] usb 4-1: Using ep0 maxpacket: 8 [ 236.667513][ T5994] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 236.667539][ T5994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.667559][ T5994] usb 4-1: config 0 has no interface number 0 [ 236.667604][ T5994] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.667627][ T5994] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.667670][ T5994] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 236.667694][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.781234][ T5994] usb 4-1: config 0 descriptor?? [ 236.829196][ T5994] ldusb 4-1:0.55: Interrupt in endpoint not found [ 236.992489][ T5978] usb 4-1: USB disconnect, device number 14 [ 237.300831][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.301048][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.301311][ T6493] bridge_slave_0: entered allmulticast mode [ 237.315247][ T6493] bridge_slave_0: entered promiscuous mode [ 237.434325][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.434641][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.437541][ T6493] bridge_slave_1: entered allmulticast mode [ 237.452668][ T6493] bridge_slave_1: entered promiscuous mode [ 237.675293][ T6668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.168'. [ 240.510584][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.511934][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.512033][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.512185][ T6511] bridge_slave_0: entered allmulticast mode [ 240.514153][ T6511] bridge_slave_0: entered promiscuous mode [ 240.541998][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.542561][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.542835][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.543109][ T6511] bridge_slave_1: entered allmulticast mode [ 240.557741][ T6511] bridge_slave_1: entered promiscuous mode [ 241.051961][ T3584] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.615886][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.178'. [ 247.730466][ T5808] Bluetooth: hci4: command 0x0405 tx timeout [ 247.951331][ T3584] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.011988][ T6493] team0: Port device team_slave_0 added [ 248.019644][ T6511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.049326][ T6493] team0: Port device team_slave_1 added [ 248.231994][ T6511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.697306][ T3584] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.519007][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.188'. [ 251.615944][ T6748] syz.2.186 (6748) used greatest stack depth: 17776 bytes left [ 251.810116][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.810134][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.810164][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.283203][ T6762] netlink: 208 bytes leftover after parsing attributes in process `syz.3.189'. [ 253.388103][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.388122][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.388151][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.150721][ T3584] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.226498][ T6511] team0: Port device team_slave_0 added [ 255.297899][ T6511] team0: Port device team_slave_1 added [ 256.838288][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.838306][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.838334][ T6511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.854037][ T6493] hsr_slave_0: entered promiscuous mode [ 256.916002][ T6493] hsr_slave_1: entered promiscuous mode [ 256.923037][ T6493] debugfs: 'hsr0' already exists in 'hsr' [ 256.923071][ T6493] Cannot create hsr debugfs directory [ 256.942465][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.942483][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.942513][ T6511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.232028][ T6812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'. [ 259.776510][ T6511] hsr_slave_0: entered promiscuous mode [ 259.778101][ T6511] hsr_slave_1: entered promiscuous mode [ 259.779146][ T6511] debugfs: 'hsr0' already exists in 'hsr' [ 259.779172][ T6511] Cannot create hsr debugfs directory [ 259.825185][ T5978] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 260.945056][ T5978] usb 3-1: Using ep0 maxpacket: 32 [ 260.949025][ T5978] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 260.949088][ T5978] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 260.949112][ T5978] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.949131][ T5978] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 260.949147][ T5978] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 260.951639][ T5978] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 260.951660][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.951674][ T5978] usb 3-1: Product: syz [ 260.951684][ T5978] usb 3-1: Manufacturer: syz [ 260.951694][ T5978] usb 3-1: SerialNumber: syz [ 261.200466][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.201245][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.271367][ T5978] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 261.271443][ T5978] imon 3-1:155.0: unable to initialize intf0, err -90 [ 261.271455][ T5978] imon:imon_probe: failed to initialize context! [ 261.271463][ T5978] imon 3-1:155.0: unable to register, err -19 [ 261.318305][ T3584] bridge_slave_1: left allmulticast mode [ 261.318335][ T3584] bridge_slave_1: left promiscuous mode [ 261.318631][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.386313][ T3584] bridge_slave_0: left allmulticast mode [ 261.386338][ T3584] bridge_slave_0: left promiscuous mode [ 261.386583][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.948581][ T3584] bridge_slave_1: left allmulticast mode [ 261.948606][ T3584] bridge_slave_1: left promiscuous mode [ 261.948785][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.126866][ T3584] bridge_slave_0: left allmulticast mode [ 262.126897][ T3584] bridge_slave_0: left promiscuous mode [ 262.127169][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.467568][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.468163][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.713971][ T977] usb 3-1: USB disconnect, device number 7 [ 267.006013][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.192156][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.693725][ T3584] bond0 (unregistering): Released all slaves [ 275.001152][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.011759][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.012931][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.014251][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.017430][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.415941][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.457026][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.499974][ T3584] bond0 (unregistering): Released all slaves [ 277.092098][ T5817] Bluetooth: hci5: command tx timeout [ 279.216907][ T5817] Bluetooth: hci5: command tx timeout [ 279.851720][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.871751][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.873519][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.885118][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.904091][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.245172][ T5817] Bluetooth: hci5: command tx timeout [ 281.497443][ T6977] chnl_net:caif_netlink_parms(): no params data found [ 281.805027][ T3584] hsr_slave_0: left promiscuous mode [ 281.836489][ T3584] hsr_slave_1: left promiscuous mode [ 281.837589][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.888915][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.955322][ T5817] Bluetooth: hci2: command tx timeout [ 282.945241][ T3584] hsr_slave_0: left promiscuous mode [ 283.002640][ T3584] hsr_slave_1: left promiscuous mode [ 283.003668][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.003695][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.266184][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.266214][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.315184][ T5817] Bluetooth: hci5: command tx timeout [ 283.368506][ T3584] veth1_macvtap: left promiscuous mode [ 283.368617][ T3584] veth0_macvtap: left promiscuous mode [ 283.368888][ T3584] veth1_vlan: left promiscuous mode [ 283.369074][ T3584] veth0_vlan: left promiscuous mode [ 283.495109][ T5994] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 283.645421][ T5994] usb 4-1: Using ep0 maxpacket: 8 [ 283.648494][ T5994] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 283.648524][ T5994] usb 4-1: config 0 has no interface number 0 [ 283.648572][ T5994] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 283.648614][ T5994] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 283.648639][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.708632][ T5994] usb 4-1: config 0 descriptor?? [ 283.733020][ T5994] ldusb 4-1:0.55: Interrupt in endpoint not found [ 284.008804][ T5994] usb 4-1: USB disconnect, device number 15 [ 284.035081][ T5817] Bluetooth: hci2: command tx timeout [ 284.972547][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 285.105889][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 285.885050][ T5978] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 286.068846][ T5978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.068875][ T5978] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 286.068944][ T5978] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 286.068967][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.087292][ T5978] usb 4-1: config 0 descriptor?? [ 286.109837][ T5978] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 286.109921][ T5978] dvb-usb: bulk message failed: -22 (3/0) [ 286.115077][ T5817] Bluetooth: hci2: command tx timeout [ 286.131782][ T5978] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 286.139448][ T5978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 286.139522][ T5978] usb 4-1: media controller created [ 286.143364][ T5978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.222804][ T5978] dvb-usb: bulk message failed: -22 (6/0) [ 286.222903][ T5978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 286.262898][ T5978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 286.277257][ T5978] dvb-usb: schedule remote query interval to 150 msecs. [ 286.277280][ T5978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 286.593369][ T5978] dvb-usb: bulk message failed: -22 (1/0) [ 286.593403][ T5978] dvb-usb: error while querying for an remote control event. [ 286.714214][ T7207] dvb-usb: bulk message failed: -22 (2/0) [ 287.455448][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 287.455851][ T5893] dvb-usb: error while querying for an remote control event. [ 287.644628][ T5978] dvb-usb: bulk message failed: -22 (1/0) [ 287.644667][ T5978] dvb-usb: error while querying for an remote control event. [ 287.795091][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 287.795127][ T5893] dvb-usb: error while querying for an remote control event. [ 287.968745][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 287.968782][ T5893] dvb-usb: error while querying for an remote control event. [ 288.132776][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 288.132814][ T5893] dvb-usb: error while querying for an remote control event. [ 288.196470][ T5817] Bluetooth: hci2: command tx timeout [ 288.293021][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 288.293057][ T5893] dvb-usb: error while querying for an remote control event. [ 288.461053][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 288.461084][ T5893] dvb-usb: error while querying for an remote control event. [ 288.624394][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 288.624432][ T5893] dvb-usb: error while querying for an remote control event. [ 288.789436][ T5978] dvb-usb: bulk message failed: -22 (1/0) [ 288.789471][ T5978] dvb-usb: error while querying for an remote control event. [ 288.945220][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 288.945254][ T5893] dvb-usb: error while querying for an remote control event. [ 288.955100][ T977] usb 4-1: USB disconnect, device number 16 [ 289.172250][ T977] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 290.737568][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 292.038061][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 293.390499][ T7296] netlink: 208 bytes leftover after parsing attributes in process `syz.3.382'. [ 295.935462][ T1230] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 296.099247][ T1230] usb 4-1: no configurations [ 296.099262][ T1230] usb 4-1: can't read configurations, error -22 [ 296.235100][ T1230] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 296.333906][ T7367] bond1 (unregistering): Released all slaves [ 296.386161][ T1230] usb 4-1: no configurations [ 296.386182][ T1230] usb 4-1: can't read configurations, error -22 [ 296.386742][ T1230] usb usb4-port1: attempt power cycle [ 296.837129][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.837270][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.837533][ T6977] bridge_slave_0: entered allmulticast mode [ 296.840516][ T6977] bridge_slave_0: entered promiscuous mode [ 296.844599][ T1230] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 296.866467][ T1230] usb 4-1: no configurations [ 296.866487][ T1230] usb 4-1: can't read configurations, error -22 [ 296.956212][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.956474][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.956755][ T6977] bridge_slave_1: entered allmulticast mode [ 296.977498][ T6977] bridge_slave_1: entered promiscuous mode [ 297.065058][ T1230] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 297.087359][ T1230] usb 4-1: no configurations [ 297.087381][ T1230] usb 4-1: can't read configurations, error -22 [ 297.089099][ T1230] usb usb4-port1: unable to enumerate USB device [ 297.532077][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.461482][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.510596][ T6977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.560227][ T6977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.897888][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.130184][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.229529][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.464066][ T7424] netlink: 'syz.2.438': attribute type 2 has an invalid length. [ 300.092395][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.325263][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.910798][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.021639][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.324252][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.515898][ T6977] team0: Port device team_slave_0 added [ 302.477442][ T6977] team0: Port device team_slave_1 added [ 303.451279][ T7066] chnl_net:caif_netlink_parms(): no params data found [ 303.468550][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.468563][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.468582][ T6977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.470395][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.470405][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.470425][ T6977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.349452][ T6977] hsr_slave_0: entered promiscuous mode [ 306.351087][ T6977] hsr_slave_1: entered promiscuous mode [ 306.352209][ T6977] debugfs: 'hsr0' already exists in 'hsr' [ 306.352235][ T6977] Cannot create hsr debugfs directory [ 306.525057][ T5863] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 306.565264][ T5893] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 306.565283][ T5893] #PF: supervisor read access in kernel mode [ 306.565295][ T5893] #PF: error_code(0x0000) - not-present page [ 306.565310][ T5893] PGD 800000003d257067 P4D 800000003d257067 PUD 0 [ 306.565351][ T5893] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 306.565384][ T5893] CPU: 0 UID: 0 PID: 5893 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 306.565409][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.565423][ T5893] Workqueue: usb_hub_wq hub_event [ 306.565460][ T5893] RIP: 0010:kcov_remote_start+0x2a2/0x6f0 [ 306.565493][ T5893] Code: f9 8c 4c 8b b8 b0 2b a3 91 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 db 5f 8d 4d 8b 3f 49 81 ff 00 db 5f 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 b0 0b c4 02 84 c0 74 0e 49 8b 07 49 [ 306.565512][ T5893] RSP: 0018:ffffc900056c7748 EFLAGS: 00010207 [ 306.565529][ T5893] RAX: 0000000000000000 RBX: ffff88802c2b1e00 RCX: 0000000000000000 [ 306.565544][ T5893] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8b3ddf80 [ 306.565557][ T5893] RBP: 0000000000100000 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 306.565571][ T5893] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 0000000000000002 [ 306.565586][ T5893] R13: 0000000000000001 R14: ffff888027d23100 R15: 0000000000000000 [ 306.565600][ T5893] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 306.565617][ T5893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.565632][ T5893] CR2: 0000000000000010 CR3: 0000000053e6c000 CR4: 00000000003526f0 [ 306.565649][ T5893] Call Trace: [ 306.565657][ T5893] [ 306.565668][ T5893] hub_event+0x158/0x4a20 [ 306.565693][ T5893] ? __lock_acquire+0xab9/0xd20 [ 306.565733][ T5893] ? do_raw_spin_lock+0x121/0x290 [ 306.565756][ T5893] ? look_up_lock_class+0x74/0x170 [ 306.565789][ T5893] ? register_lock_class+0x51/0x320 [ 306.565821][ T5893] ? __lock_acquire+0xab9/0xd20 [ 306.565861][ T5893] ? __pfx_hub_event+0x10/0x10 [ 306.565885][ T5893] ? process_scheduled_works+0x9ef/0x17b0 [ 306.565914][ T5893] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.565945][ T5893] ? process_scheduled_works+0x9ef/0x17b0 [ 306.565970][ T5893] ? process_scheduled_works+0x9ef/0x17b0 [ 306.565997][ T5893] process_scheduled_works+0xae1/0x17b0 [ 306.566036][ T5893] ? __pfx_process_scheduled_works+0x10/0x10 [ 306.566070][ T5893] worker_thread+0x8a0/0xda0 [ 306.566098][ T5893] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 306.566134][ T5893] ? __kthread_parkme+0x7b/0x200 [ 306.566167][ T5893] kthread+0x711/0x8a0 [ 306.566199][ T5893] ? __pfx_worker_thread+0x10/0x10 [ 306.566225][ T5893] ? __pfx_kthread+0x10/0x10 [ 306.566254][ T5893] ? rt_spin_unlock+0x150/0x200 [ 306.566281][ T5893] ? rt_spin_unlock+0x161/0x200 [ 306.566305][ T5893] ? __pfx_kthread+0x10/0x10 [ 306.566336][ T5893] ret_from_fork+0x4bc/0x870 [ 306.566363][ T5893] ? __pfx_ret_from_fork+0x10/0x10 [ 306.566391][ T5893] ? __switch_to_asm+0x39/0x70 [ 306.566412][ T5893] ? __switch_to_asm+0x33/0x70 [ 306.566432][ T5893] ? __pfx_kthread+0x10/0x10 [ 306.566476][ T5893] ret_from_fork_asm+0x1a/0x30 [ 306.566505][ T5893] [ 306.566513][ T5893] Modules linked in: [ 306.566533][ T5893] CR2: 0000000000000010 [ 306.566547][ T5893] ---[ end trace 0000000000000000 ]--- [ 306.566560][ T5893] RIP: 0010:kcov_remote_start+0x2a2/0x6f0 [ 306.566590][ T5893] Code: f9 8c 4c 8b b8 b0 2b a3 91 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 db 5f 8d 4d 8b 3f 49 81 ff 00 db 5f 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 b0 0b c4 02 84 c0 74 0e 49 8b 07 49 [ 306.566607][ T5893] RSP: 0018:ffffc900056c7748 EFLAGS: 00010207 [ 306.566625][ T5893] RAX: 0000000000000000 RBX: ffff88802c2b1e00 RCX: 0000000000000000 [ 306.566639][ T5893] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8b3ddf80 [ 306.566653][ T5893] RBP: 0000000000100000 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 306.566667][ T5893] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 0000000000000002 [ 306.566682][ T5893] R13: 0000000000000001 R14: ffff888027d23100 R15: 0000000000000000 [ 306.566695][ T5893] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 306.566713][ T5893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.566727][ T5893] CR2: 0000000000000010 CR3: 0000000053e6c000 CR4: 00000000003526f0 [ 306.566746][ T5893] Kernel panic - not syncing: Fatal exception [ 306.567067][ T5893] Kernel Offset: disabled